OpenCue is a desktop app that runs on your computer. It has no account system, no servers of its own and no telemetry. This page explains what stays on your computer and what is sent to services you choose to connect.
What stays on your computer
- Your agents, their instructions, memory, skills, chats, automations and settings, in the OpenCue data folder (
~/Library/Application Support/opencueon macOS,~/.local/share/opencueon Linux,%APPDATA%\opencue\dataon Windows). - Files you or your agents share in chats, in that folder's
files/directory and as copies in the agents' workspaces. - Secrets — API keys, email passwords and tokens — in your operating system's credential store. Only when none is available are they saved in a
secrets.jsonfile readable by your user alone. - Files agents create in their workspace folder.
The OpenCue project never receives any of this. There is no analytics, crash reporting or usage tracking in the app.
What leaves your computer, and to whom
OpenCue only talks to the services you configure, when an agent or you use them:
| Service | What is sent | When |
|---|---|---|
| Your model provider (OpenAI, Anthropic, xAI, OpenRouter, Ollama Cloud, CheaperInference…) | The conversation, the agent's instructions and memory, tool results needed for the reply, and the files you attach: pictures as images and small text files as text (other files only by name, unless the agent reads them with its tools) | Every time an agent answers |
Local models (Ollama, LM Studio) or the codex / claude CLIs | The same, to the program on your machine (the CLIs then talk to their own company under their own terms). CLI agents reach OpenCue's tools through a local MCP server (opencue mcp-serve) that runs on your computer and only talks to the CLI that started it; what those tools return goes to the CLI's provider like any other reply | Every time an agent answers |
| DuckDuckGo, Wikipedia, your SearXNG, and websites | Search queries and page requests | When an agent searches or reads the web |
| Your email provider (IMAP/SMTP) | Login and the messages read or sent | When an agent uses email or an email automation checks the inbox |
| Composio | Your Composio API key, user ID and the arguments of actions agents run; when you connect an app, Composio's sign-in page opens in your browser and the app's account is linked to Composio, not to OpenCue | When an agent uses connected apps, Gmail automations check the inbox, or you connect an app |
| ElevenLabs | Your recorded voice and the text of replies to be spoken | Only while you use the microphone or a reply is read aloud |
| SPACE server, Docker, MCP servers | Commands, files and tool arguments. Docker downloads the computer and desktop images from their registry (Docker Hub, lscr.io…) the first time | When an agent uses its computer or an app |
| GitHub | A request for the latest release information (latest.json) and, if you install an update, the update file. GitHub sees your IP address and the app version in the request, like any download | Once at startup (turn it off in Settings → About), when you check for updates, and when you click links to the repository or docs |
Each of those services handles data under its own privacy policy. Review them before connecting an account.
Local servers
The automation webhook server and the Docker desktop view listen only on 127.0.0.1, so they can be reached from your own computer and not from the network.
Install scripts
install.sh and install.ps1 ask the GitHub API for the latest release, download it from GitHub and install it for your user. They send nothing else and collect nothing.
This website
This site is static and hosted on GitHub Pages. It sets no cookies and runs no analytics. GitHub may keep standard server logs (such as IP addresses) as described in the GitHub Privacy Statement. The home page loads the three.js library from the jsDelivr CDN for its animation and asks the GitHub API which release is the latest, so those services receive a normal request from your browser. Your operating system is detected in your browser to pick the right download and is not sent anywhere.
Deleting your data
Delete an agent to remove its chat, memory, instructions, workspace and email password. Clearing a conversation removes its messages; shared files stay in the files/ folder until you delete them. To remove everything, quit OpenCue and delete the data folder; API keys can be removed from Settings or your system's credential manager.
Children
OpenCue is not directed at children. Model providers you connect have their own age requirements.
Changes
Changes to this policy are published on this page and in the changelog, with a new effective date.
Contact
Questions: open an issue. Security problems: please report them privately as described in the security policy.