Privacy and Local Data
Understand the local-first boundary and when data can leave your device.
Data that stays on your machine by default

- Projects, conversations, and local workspace files.
- Email bodies, meeting audio, transcripts, and summaries.
- Local memory, plugin diagnostics, and private content returned by connected apps.
- Third-party API keys and app credentials.
Data the account service handles
- Account identity and subscription status.
- Device binding, feature entitlements, and signed offline licenses.
- Quota and usage metadata that contains no private content.
When content can leave your device
When you explicitly choose a cloud model, a remote connected app, or another third-party service to complete a task, the selected content required for that operation may be sent to the corresponding service. Nexts is expected to state the target service and authorization scope in its permission and connection screens.