Engine Privacy Policy
The short version
- Engine runs on your computer. Your workspace (records, mail, chat, files, agent memory) stays there. noxsoft doesn't receive it.
- AI requests go from your computer straight to the provider you pick, with your own key. They don't pass through noxsoft.
- What does reach noxsoft: your noxsoft sign-in, mail you send to people outside your company, update checks, and, unless you turn it off, one anonymous count a day of how Engine is used.
1. Who we are and what this covers
Engine by noxsoft ("Engine") is made by Noxsoft Inc., a Delaware public benefit corporation ("noxsoft", "we", "us"). This policy covers the Engine desktop app, Engine when you run it on your own server, and the Engine pages on noxsoft.net, including downloads and the waitlist.
Your noxsoft account and the noxsoft services Engine can connect to (noxsoft Mail, Veritas, BYND, noxsoft video) are covered by the noxsoft Privacy Policy. Where the two differ about Engine, this policy applies.
2. What stays on your computer
Engine keeps your workspace in a database on the computer or server that runs it: company records, mail, chat, documents, tasks, people, finance records, and each agent's identity, memory and notes. On the desktop app it lives in Engine's app data folder. API keys and connection tokens are encrypted with a key held in your operating system's keychain (macOS Keychain, Windows DPAPI, or the Linux secret service where there is one).
We have no access to this data and don't receive copies of it. You decide what goes into your workspace, who you invite, and how you back it up. If your workspace holds other people's personal data, you are responsible for it under the laws that apply to you. Uninstalling Engine leaves the data folder in place; delete the folder to remove the data.
When you share your workspace with teammates (over your local network or a Cloudflare tunnel you set up), their app or browser connects to your Engine, not to noxsoft.
3. Your AI provider
Agents use the AI provider you connect with your own key (for example OpenAI, Anthropic, OpenRouter or another compatible service) or a local model through Ollama or LM Studio. Engine sends each request from your computer directly to that provider. A request contains what the agent is working on, which can include workspace content and personal data. The provider's own terms and privacy policy govern what it does with that data, and it bills you directly. A local model keeps requests on your computer.
noxsoft doesn't proxy, see or store these requests.
4. Your noxsoft account
To create a workspace in the desktop app, you sign in with a noxsoft account (you can make one, free, during setup). Engine receives your account's name, email address and user id, and your company's name, industry and size if your account has them. You can set a local password so you can sign in when noxsoft can't be reached. Teammates you invite join your workspace through your invite.
Importing your noxsoft data
Right after you set up with noxsoft, Engine copies to your computer the AI provider keys you saved in noxsoft and the noxsoft data your account can see, such as projects, tasks, goals, metrics, files, members (as invites, never passwords), conversations and agent memory. Settings shows its progress, and it runs in the background until it finishes. The import only reads from noxsoft; it doesn't change or delete anything there. After it's copied, the data on your computer is under your control as described in section 2, and the original in noxsoft stays under the noxsoft Privacy Policy.
5. Anonymous usage data
Once a day, Engine can send noxsoft a small report so we can see how many people use it and which parts work. It contains:
- a random install id made when Engine is first set up, the Engine version, the operating system, and whether it runs as the desktop app or a server;
- the company size bracket chosen at setup;
- daily counts: active people, members, agents, agent sessions, tasks created and completed, documents, KPIs, connected integrations, invites, and how often features are used.
It never contains names, email addresses, company names, or anything anyone wrote. Setup shows this choice with a switch that starts on; you can turn it off there, or at any time in Settings → Usage data, where Engine also shows exactly what it would send. When you turn it back on, it doesn't send the days it was off.
Like any web server, ours sees the IP address a report comes from. We use it to limit abuse and to record the country, and we don't store the address with your install id.
6. Update checks
The desktop app checks engine.noxsoft.net/releases for a new version when it starts and every six hours, downloads an update in the background, and asks you before it restarts. These requests carry no workspace data. Our server sees what any download server sees: your IP address and a standard request header that names the app, its version and your operating system. Whoever installs Engine can turn update checks off by starting it with ENGINE_UPDATE_URL=off.
7. Mail and other noxsoft services
- Mail to outside addresses. Mail you or your agents send to people outside your company goes through noxsoft Mail, so noxsoft handles those messages as described in the noxsoft Privacy Policy.
- Invites and notifications. Unless you add your own email service in Settings, Engine sends these through noxsoft's relay. The relay keeps send counts, each recipient's domain and the IP address your install registered from, but not recipient addresses or message text.
- Optional connections. If you connect them, Engine uses noxsoft video for calls, merges the noxsoft Veritas news feed and fact checks, and syncs with BYND. Each sends what that feature needs.
8. Other services Engine reaches for you
Some features contact third parties directly from your computer, under their own policies: the news feeds you follow; Jitsi, Daily or LiveKit for calls; Cloudflare, if you share your workspace through a tunnel (Engine downloads Cloudflare's connector from GitHub); Hugging Face, for the optional on-device speech model, downloaded once after you approve it; voice and other providers you add keys for; websites agents visit or search when you let them browse; and coding tools you hand work to. noxsoft isn't part of these exchanges.
9. Support payments
Engine is free. If you choose to send a voluntary payment to say thanks, a third-party payment provider takes it on its own page. We don't receive or store your card details. We receive what the provider shares with us, such as the amount, the date, and your name and email, and use it to keep records, meet tax and accounting duties, and handle refunds. A payment isn't linked to your workspace and doesn't change how Engine treats your data. The provider's privacy policy applies to what it collects.
10. This website
- Waitlists. If you join the Engine or hosted Engine waitlist, we keep your email, the name and use you give us, and which form you used. We send a confirmation and an email when what you signed up for is ready. Reply "unsubscribe" to be removed.
- Your browser. The site remembers your light or dark theme in your browser and caches pages for offline use. We don't run ads or third-party analytics on these pages.
- Server logs. Our servers and our network provider, Cloudflare, log requests (IP address, page, browser) for security and debugging.
11. Sharing
We don't sell personal data or share it for advertising. We share it only with service providers that help us run the services above (such as hosting, email delivery and payments), when you ask us to, or when the law requires it. Where we lawfully can, we'll tell you before we disclose your data in response to legal process.
12. Your choices and rights
You control the data on your computer directly: read it, export it or delete it. For data noxsoft holds (your account, usage reports, waitlist entries, payment records), you can ask us to access, correct, export or delete it, or object to how we use it, by writing to [email protected]. To find usage reports from your install, include its install id. Depending on where you live, including California and the EU or UK, you may have further rights, and you can complain to your local data protection authority. We won't treat you differently for using these rights.
13. Security, location and age
We use encryption in transit and limit who at noxsoft can reach the data we hold. No system is perfectly secure; report vulnerabilities to [email protected]. noxsoft processes the data it holds in the United States. Engine is a tool for businesses and isn't meant for anyone under 18.
14. Changes
If we change this policy in a way that matters, we'll update the date above and say so on this site before the change takes effect, and in Engine where we can.
15. Contact
Noxsoft Inc.
Privacy: [email protected]
Everything else: [email protected]
See also the Engine Terms of Use.