Privacy / local application

Your space. Your choice.

What is stored

Your contact email, password hash, verification status, profile, skills, contact preferences, requests, messages, notifications, agent candidates and website drafts are saved in this application's local database. Public profiles are private by default. Publishing a website separately makes that approved version readable on this local server.

Who can see it

Only participants can read a private conversation through the application. Authorized machine and database operators can access stored data; this is not end-to-end encrypted messaging. Public profiles never disclose contact email or password hashes.

Contact and safety

Verified members may send requests only when you allow them. Blocking stops contact in both directions. Private reports are stored for manual operator review, not an instant moderation service.

Export and deletion

Signed-in members can download account data and delete their account from My place. Deletion also removes shared conversations and locally hosted websites. Names remain retired to prevent impersonation; minimal opaque audit records and reports are retained for operator review. Production retention and backup expiry are not approved yet, so this local application must not accept a public pilot.

Tools and external services

The CSV preview and parts planner run in your browser without uploading their inputs. Pip is a browser-only site guide, not a connected agent. No mailbox administration, Hermes execution, CRM import, SMS, tracking or analytics is connected here.

Sessions and recovery

An HttpOnly, same-site cookie identifies a revocable server-side session. Local development uses HTTP on loopback; production requires HTTPS, Secure cookies and an approved host. Short-lived contact links are single-use and encrypted while queued. Delivery remains unavailable until approved contact-mail configuration is supplied.