AgentOS Privacy Policy

EFFECTIVE OCTOBER 21, 2026  |  LAST UPDATED OCTOBER 21, 2026

This privacy policy explains how Lucus Labs, LLC ("Lucus Labs," "we," "us") handles information in connection with AgentOS: the AgentOS desktop and server software, its command-line tools, the AgentOS CDP Bridge browser extension, and the AgentOS mobile app (together, "AgentOS"). Use of the lucuslabs.com website is covered by our general Privacy Policy and Cookie Policy.

1. Data that stays on your device

AgentOS keeps its working data as plain files on the computer where it is installed: in a global folder (~/.agentos/) and in a .agentos/ folder inside each workspace. This includes:

• Chat history, conversation memory (MEMORY.md, DURABLE.md) and workspace context (BRAIN.md)
• Jobs, schedules, plans, todos and activity logs
• Settings, model configuration, and connector and MCP server configuration
• Saved credentials (CREDENTIALS.md), which are encrypted at rest
• Files you upload into a chat, which are copied into the workspace's uploads/ folder
• Screenshots and UI snapshots taken by Local UI Control, stored temporarily in ~/.agentos/tmp/
• The server log (~/.agentos/server.log)

Lucus Labs cannot access these files. By default the AgentOS web interface listens only on your own computer (127.0.0.1). It is reachable from other devices only if you turn on "Listen on all network interfaces" or Remote Control.

2. Data sent to Lucus Labs

License activation and verification

AgentOS is activated through Symbient AI, the Lucus Labs account service at symbient.ai. When you activate, and each time the AgentOS server starts, AgentOS sends:

• your activation token (at activation) or your license certificate ID and signature (on later checks);
• a machine fingerprint: a one-way SHA-256 hash derived from your computer's hostname, operating system, processor architecture, a network adapter's MAC address, CPU model and installed memory. We receive only the hash, never the underlying values. It is used to detect copied or misused licenses; and
• the AgentOS version you are running.

If our license server can't be reached, AgentOS keeps working on its locally stored certificate for a grace period of up to 30 days. Your Symbient AI account (name, email address, organization and billing details) is covered by the privacy terms of that service.

Update checks

By default AgentOS checks for updates in the background about every six hours, using the AgentOS update service at updates.squrl-labs.com. Each check sends a random installation ID generated on your machine, your current version, your operating system and architecture, and your update channel (stable or beta). The ID identifies the installation, not you, and is used to deliver the right update and to count active installations. You can turn background checks off by setting update.enabled to false in ~/.agentos/server.json.

Diagnostics reports (only when you send one)

If you click the option to email diagnostics to support in Global Settings, AgentOS sends a diagnostics report to Lucus Labs support. The report contains your license certificate ID and license details, your operating-system username and computer name, your AgentOS, Node.js and operating-system versions, a configuration summary (for example your port, display name and ASB host; secrets such as API keys appear only as "set" or "not set"), and recent workspace start-up issues and error lines from server.log. We use it only to diagnose and fix the problem you reported. Nothing is sent unless you click the button.

What we do not collect

AgentOS does not send your conversations, prompts, files, memory, credentials, connector data or browsing activity to Lucus Labs, and it contains no advertising or third-party analytics trackers. The only exceptions are the optional features in Sections 3 and 4, which you control.

3. AI models & third-party services

AgentOS connects to the services you configure. Each of them receives the data it needs to do the job:

Lucus Labs does not control these services. Their own privacy policies and terms govern how they use your data. Information that the agent retrieves from a connector or website may in turn be sent to your configured AI model as part of the conversation.

Connector credentials and OAuth tokens are stored encrypted on your device. They are never shared with Lucus Labs, and they are kept out of what the AI model sees.

4. Optional features that share data

• Agent Service Bus (ASB). If you connect AgentOS to an Agent Service Bus, your workspaces are registered as agents on that bus so other agents can send them tasks. Tasks and results routed through the bus pass through the ASB host you configured.
• ASB telemetry (off by default). When enabled, AgentOS streams agent activity to your configured ASB host for monitoring and auditing. This includes your messages, agent replies, reasoning, tool calls and tool results. Your organization operates that host.
• Agent interfaces & webhook API. The MCP, A2A, ACP, OpenAI-compatible and webhook interfaces let other applications send messages to your agents and receive replies. Applications you authorize with your API key can see those conversations.
• Local UI Control (off by default). When enabled, the agent can view and operate your browser, keyboard, mouse and on-screen applications, including taking screenshots. Anything visible on screen or in the controlled browser may be passed to your AI model. Browser control can act within your logged-in sessions.
• Desktop notifications. These are shown by your operating system and are not sent to Lucus Labs.

5. The AgentOS mobile app

The mobile app connects directly to your computer over your local network. No Lucus Labs relay or other outside server sits in between. Pairing uses a single-use QR code that expires after five minutes, and you must approve the phone on your computer. All traffic is end-to-end encrypted (X25519 key exchange, AES-256-GCM) and authenticated with keys pinned at pairing.

The app has no accounts and requires no sign-in. Lucus Labs does not collect, receive or store any data from the mobile app.

• On your phone. The app stores the paired computer's name, network addresses and public key, plus the phone's own device key, in the phone's secure storage (the iOS Keychain or Android Keystore). It does not keep a copy of your conversations.
• On your computer. Your messages, agent replies, approvals and answers travel between your phone and your computer and are stored on your computer as usual. The computer also records the name you give the phone when you pair it, so you can recognize it in Global Settings → Remote Control.
• Voice dictation. When you tap the microphone, the app uses your phone's built-in speech recognition to turn your speech into a message. Where your phone supports it, recognition happens on the device. Otherwise your phone's operating system may send the audio to Apple (iOS) or Google (Android) for transcription, under their privacy policies. The app does not record or keep audio.
• Permissions. The camera is used only to scan the pairing QR code, and images are not saved or sent anywhere. The microphone and speech recognition are used only while you dictate. Local network access is used only to reach your own computer. You can turn any of these off in your phone's settings.
• The app does not include advertising, analytics or tracking SDKs, and push notifications are not currently offered.

To remove a phone, tap Settings → Forget this computer in the app, which deletes the computer's details from the phone, or click Revoke in Global Settings → Remote Control on your computer. Revoking takes effect immediately.

6. The CDP Bridge extension

The AgentOS CDP Bridge Chrome extension connects your browser only to the AgentOS server address you enter in its options (by default ws://localhost:3456). It lets your local agent read and control browser tabs when browser control is enabled. The extension does not send browsing data to Lucus Labs or anyone else.

7. How we protect data

• Credentials and connector secrets are encrypted at rest, and a workspace can be protected with its own password.
• The server binds to localhost by default. HTTP interfaces require your API key, and the web UI supports optional sign-in credentials.
• License certificates are signed, and communication with Lucus Labs services uses HTTPS.
• Supervised mode lets you approve each job before the agent runs it.

You are responsible for securing the computer AgentOS runs on, its backups, and any network access you enable. No software is perfectly secure, and we cannot guarantee that data will never be exposed. Please report security issues to us through the contact details below.

8. Retention & deletion

• Local data stays until you delete it. Use /memory reset, delete a workspace, or remove its .agentos/ folder and ~/.agentos/. Uninstalling AgentOS does not remove these folders automatically.
• Mobile app data: the paired computer's details stay on your phone until you tap Forget this computer. The phone's device key stays in secure storage so the phone can be paired again. Uninstalling the app removes its data, although iOS may keep Keychain items until the device is erased.
• License records (certificate, activation history, machine fingerprint hash, last-verified time) are kept while your license is active and for a reasonable period afterwards for billing, fraud-prevention and legal purposes.
• Update-check records are kept in aggregate to measure versions and active installations.
• Diagnostics reports are kept only as long as needed to resolve your support request, plus a limited period for record-keeping.

9. Your choices & rights

You decide which model provider, connectors, MCP servers and optional features AgentOS uses, and you can change or turn them off at any time. Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA), you may have the right to access, correct, delete or export the personal information we hold about you, and to object to or restrict certain processing. To make a request, contact us using the details below. We will respond within the time required by applicable law.

Lucus Labs does not sell or share your personal information for cross-context behavioral advertising. We disclose data to third parties only as described in this policy: to service providers who help us operate licensing, updates and support; when required by law; to protect our rights or users; or as part of a merger or acquisition, in which case this policy continues to apply to the data.

If you are in the European Economic Area or the UK, Lucus Labs processes license, update and support data to perform our contract with you and for our legitimate interests in securing and improving AgentOS. Lucus Labs is based in the United States, so this data is processed there.

10. Children

AgentOS is not directed to children under 13 (or under 16 where local law requires), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy as AgentOS evolves. We will change the "Last updated" date above and, for material changes, give notice in the AgentOS release notes or by email to the address on your Symbient AI account.

12. Contact us

For questions about this policy or to exercise your privacy rights, contact Lucus Labs, LLC through our contact form. Please include "AgentOS Privacy" in your message.

See also: AgentOS  ·  AgentOS Help Documentation  ·  Website Privacy Policy