# Privacy

Unified AI System is self-hosted software. The Codex plugin does not include
analytics, advertising, or project-operated telemetry, and the default local
fake-provider flow requires no provider credentials.

When you configure an external model provider, prompts, responses, metadata,
and files you choose to send may be processed under that provider's privacy
policy. Docker, Codex, your hosting platform, and other third-party software
may also process operational data under their own policies.

Operators are responsible for choosing providers, configuring retention and
access controls, and obtaining any consent required for the data they process.
Do not submit secrets or personal data unless your deployment and provider
configuration are approved for that data.

Security reports should follow [SECURITY.md](SECURITY.md). Privacy questions
can be opened as a public GitHub issue when they contain no sensitive data.