Privacy notice

The short version

• What you tell your 1bot is stored on this node, encrypted with a key only this node holds.
• To answer you, your messages are sent to an AI model provider (unless you picked a model that runs on this machine).
• Rooms only ever see what everyone in them may see. Secrets you tell your 1bot stay in your own chat.
• Admins of this node can see who has an account and how much they use, not what anyone says.
• You can download everything that is yours, and delete your account and all of it, at any time.

What is stored

• Your account: your name, handle, timezone, quiet hours, when you joined, your passkeys (public keys only; there are no passwords), your signed-in devices.
• What you say and share: messages, files you attach, and the things 1bot writes down from them (facts, preferences, decisions, promises, questions), your calendar, contacts, reminders, roles, skills, and any accounts you connect (for example Google, a card for checkouts, a phone, tools).
• Encrypted at rest: message text, everything 1bot remembers, settings, contacts' notes, calendar titles, tokens for connected accounts, and saved cards are sealed with AES-256 before they reach the database. What stays readable to the node (so it can route and count): names and handles, room titles and who is in them, when messages were sent (not what they say), contact addresses and circles, and monthly model usage.
• Logs contain handles, ids and web addresses, never message text or prompts.

What leaves this node

• The AI model provider. Every message in your own chat goes to the model you chose, as does group text (to the node's default model). Mail you forward to your agent, tool results and phone-call transcripts too. A local model (if the operator offers one) keeps this on the machine. Incognito mode stops 1bot from remembering, not from processing.
• Services you connect: Google (mail and calendar), Stripe (payment links), Twilio (phone calls, which Twilio also transcribes), speech-to-text servers, tools (MCP servers) and websites the browser agent visits for you. Each gets only what that task needs.
• Other people's 1bots: only what your circle rules allow (for example free/busy for friends), end-to-end encrypted between agents. Every disclosure is logged for you to see.
• Telegram and email, if you use them, carry those messages.

What the operator and admins can and can't see

• The admin screen shows people's names, handles, join and last-seen dates, token usage and caps, and invites. It has no way to show messages, memories, contacts, calendars or settings.
• The operator holds the encryption key and the server, so technically they could read stored data. The encryption protects against stolen disks and backups, not against the operator. Only use a node run by someone you trust.
• An admin can set how many AI tokens you may use each month (by default 2,000,000 model tokens a month), suspend an account, or remove it (which deletes it as below).

Friends and groups

• In a group, what you say is visible to the people in that room, as in any group chat, and 1bot may use it there.
• Something told to one room is only used where everyone present was there when it was said. People who join later don't see earlier chat.
• Say "just between us" or similar and it becomes private to you, even in a group.

Your rights and controls

• See and correct: the Vault tab lists everything 1bot remembers from you; forget any item, unsend a message, or set things to expire.
• Download: Account → Download everything gives you a readable JSON file of all that is yours (messages in your own chats, what you wrote in groups, memories, settings, roles, calendar, contacts, actions, payments ledger, calls, tools, skills and more; secrets like card numbers and passwords are left out).
• Delete: Account → Delete my account removes your account and everything that is yours on this node in one step: your chats, memories, files, contacts, keys, devices, connected accounts and settings. Your messages in shared groups are removed too; the group itself stays for its other members, and a group decision you recorded stays with the group without your name. Your contacts' agents are told your keys are no longer valid. This can't be undone.
• Backups: the node keeps rolling backups (typically 14 days). Deleted data disappears from them as they age out.
• If you are in the EU/EEA, the UK, China or elsewhere with data-protection law (GDPR, UK GDPR, PIPL and similar), these tools are how you exercise access, portability and erasure. For anything else, contact the operator at 8273429+markbooch@users.noreply.github.com.

Retention

Data stays until you delete it, set it to expire, or delete your account. Payment records at Stripe and call records at Twilio are kept by those companies under their own policies.

See also the terms of use. Technical details: the project's PRIVACY.md.