Privacy

Joxo moves project context between computers you own. The short version: your prompts, your transcripts, your credentials and your repository contents never reach the relay. They are not filtered out — the connector never reads them in the first place.

What leaves a computer

The connector on each computer sends only:

• A hardware summary: operating system, CPU count, RAM.
• Optionally, the percentage of your AI provider's allowance left and when it resets, if your agent exposes it.
• Which agents are installed, and a summary of running sessions: the agent, the folder name, and whether it is active or idle.
• What you publish on purpose: messages, decisions, blockers, handoffs, task state and continuation notes.

It never sends prompts, transcripts, credentials, API keys, full file paths or repository contents. Message bodies are plain text, capped, and written by you or your agent at your instruction.

What the relay stores

• Your identity: the name you chose, an optional email, and — if you signed in with GitHub — your GitHub user id, login and avatar URL.
• Your projects and their membership.
• The project context above, so your collaborators and your other computers can read it.
• Your computers: their names, the summaries listed above, and when they were last seen.
• Your entitlement: plan status, trial end, and the identifiers of a subscription if you have one.
• If you connect GitHub so your agent can create a repository, an access token — encrypted at rest with a key the relay holds — and the GitHub login it belongs to.
• If you register a phone for notifications, the push token that phone needs to be reached.
• If you send your computer a command from your phone, that command and its arguments — including, for instruct, the text you typed for your agent to act on. It is stored so the computer can fetch it, and so there is an audit trail of what was asked; it is signed by your phone and readable by you.

What it does not store

No transcripts, no source code, and no credentials for anything. No advertising or analytics of any kind: the site loads no third-party script, no external font and no tracker, and its Content-Security-Policy forbids them outright. There is no session recording and no fingerprinting.

This page used to say "no prompts", and that was wrong: a phone-issued instruct command carries the text you typed, and the relay stores it in order to hand it to your computer. Your agent's own conversation with its model never reaches Joxo — that is what "no transcripts" means — but the sentence you type into the phone app does.

Cookies

One cookie: sync_session, which keeps your browser signed in. It is HttpOnly, SameSite=Lax and Secure in production. There are no other cookies, and no cookie is used for tracking.

Payments

No payment provider is live on this relay yet, so no payment data exists. When one is, it will be a merchant of record: it becomes the seller of record for the transaction, and card details go to it and never to Joxo. The relay would store only the subscription and customer identifiers it needs to know that you are entitled.

Where the data lives

The relay is a Cloudflare Worker with a Cloudflare D1 database. Data is processed on Cloudflare's network, which spans several countries. Locally, your computer keeps Joxo's own files in ~/.joxo with owner-only permissions; they are not encrypted at rest, so use a private operating-system account.

Sharing

Project context is shared with the people you invite to that project — that is the point of the product. It is shared with nobody else. Joxo does not sell data, and does not hand it to advertisers or data brokers. It is disclosed to a third party only where the law requires it, or where a provider is needed to run the service (Cloudflare for hosting, GitHub if you sign in with it, and a payment provider once one is live).

Your control

• joxo disconnect detaches a project from a computer and revokes that computer's device record.
• You can pause, disconnect or remove any computer from the app, and remove a person from a project you own.
• To have your account and everything attached to it deleted, write to support@joxo.ai from the address on the account, or from an account you can prove is yours. Ask for a copy of your data at the same address.

Children

Joxo is a developer tool and is not directed at children.

Changes

This page changes when the software does. Material changes are announced in the app with an effective date.

Contact: support@joxo.ai. This page states what Joxo does today and is written to be verifiable against the code, not to satisfy any particular jurisdiction's disclosure format; the operator's legal identity and governing law are still to be recorded in §12 of the terms.