Privacy Policy

Unbound runs on infrastructure you control. It may store conversations, bot memories, routines, files, tool output, screenshots, and browser profiles in your local workspace or persistent Docker volumes. Starting Unbound does not send that workspace to a cloud service operated by the project.

You configure provider credentials locally. The orchestrator reads them; the browser interface does not.

If you choose a remote AI provider, Unbound sends it the information needed for the task. This can include prompts, conversation context, bot memory, tool results, files, screenshots, and content from connected services.

Bots can use websites and accounts you authorize. Each provider or service handles data under its own terms and privacy notice. You choose those services, decide what they can access, and remain responsible for their data practices and charges.

The Unbound website has no user accounts, forms, advertising, or product analytics. It does not set first-party cookies or use browser storage. The site loads display fonts from Google Fonts, which receives ordinary network request information under the Google Privacy Policy.

The website host or content delivery provider may process standard request logs, including IP address, browser type, requested page, referrer, and request time. We do not sell personal information or use it for targeted advertising.

Local data stays in your deployment until you delete it. Unbound limits its local run history to a recent window, but transcripts, memories, routines, browser profiles, files, and screenshots may remain without an automatic expiry. Use the available deletion controls, and remove data from any workspace, backup, or Docker volume you manage separately.

Deleting local data does not delete copies already sent to an AI provider, connected service, website host, or other service. Each service sets its own retention and deletion rules.

You choose the providers, keys, accounts, and data used by your deployment. Laws in your location may give you rights to access, correct, delete, restrict, object to, or receive a copy of personal information.

Use local controls for data stored by Unbound. Contact a provider directly about data it holds. Send privacy questions or rights requests to [email protected]. Do not include credentials or unrelated sensitive information.

By default, Unbound's control plane listens only on the local machine. If you expose it to another device or network, you must add access controls, transport security, network restrictions, and exact origin rules. No method of storage or transmission is completely secure.

Unbound is not directed to children under 13. Do not use it to process children's personal information without the authorization and safeguards required by law.

This policy may change as Unbound changes. Each version will show its effective date. If a change materially affects how information is handled, the updated policy will explain it.