Privacy Policy

Website and downloads

The website does not require an account or ask you to submit personal details. To display the page and find current release downloads, it loads resources from Google Fonts, cdnjs, the Tailwind CSS CDN, and the GitHub Releases API. The site host and these services may receive standard connection information, such as your IP address, browser and device headers, requested URL, referrer, and request time. Their own privacy notices govern how they handle that information.

The page does not implement first-party account, advertising, or analytics features and does not intentionally set first-party tracking cookies. Following download links or using the npm command connects your browser or package manager to GitHub, npm, or the services you choose.

Using the self-hosted software

Symbiote runs in the environment you install and configure. It can process information you provide to agents, sessions, tools, and integrations. Providers, channels, MCP servers, and other services you connect may receive the inputs or outputs needed to perform the actions you request. Their privacy practices and terms apply to that processing; review them before connecting a service or sending sensitive information.

Symbiote's runtime metrics are stored locally by default in .symbiote/metrics. They can include provider call, token, latency, and error details; tool call and duration statistics; session counters; and system resource snapshots. The metrics history rotates after seven days by default, and the storage directory is configurable. Other application data may also be stored according to your configuration. Review local records before sharing them, as error details or user-provided content may be sensitive.

Retention and your choices

Website request logs are handled by the site host and external services under their respective policies. Local Symbiote records remain in the storage configured for your installation until you remove them or they expire under the relevant retention settings. Connected providers and platforms control their own retention. You can choose which integrations to enable and what information to provide to them.

Please do not post credentials, private personal information, or sensitive logs in public issues. For general privacy questions, contact Artifact Virtual through its website. Report security vulnerabilities through the private process in the project's security policy.

Changes to this policy

We may update this page as the website or software changes. The date above identifies the latest revision.