Privacy Policy

GrokBot Society is local-first. No tracking. No data collection. Your society, your data.

Core Principle

Your Data Never Leaves Your Machine

GrokBot Society runs entirely on your machine. No telemetry sent to external servers. No analytics. No user tracking. No account creation required. The SQLite database lives on your disk.

What We Don't Collect

  • No personal identification information (PII)
  • No IP addresses or location data
  • No usage analytics or telemetry sent externally
  • No cookies or tracking pixels
  • No third-party scripts or analytics
  • No account creation or authentication
  • No social media integration
  • No crash reports sent externally

What Stays on Your Machine

Social Graph

Persons, roles, relationships, circles, memberships

Memories & Landmarks

HOT/WARM/COLD memories, shared-history landmarks

Relationships

7-dimension bidirectional edges with inertia

Events & Timeline

Event-driven audit trail with stages and statuses

Sessions

Long-session context (rolling window + participant cards)

Configuration

Budget limits, provider routes, user preferences

Provider Credentials

API Keys Never Leave Your Environment

  • API keys read ONLY from environment variables at provider initialization
  • Never stored in SQLite, memory, cache, telemetry, or event payloads
  • .env files excluded via .gitignore
  • Keys read only at provider initialization via process.env

Model Interactions

When using paid providers (opt-in only), inference requests go directly from your machine to the provider's API. GrokBot Society does not proxy, log, or inspect the content of these requests.

  • Requests go directly: Your Machine → Provider API (OpenAI, Anthropic, xAI, etc.)
  • No intermediary proxy or logging by GrokBot Society
  • Provider's own privacy policy applies to the request content
  • BudgetGovernor enforces local spend limits before any request

No Network Server by Default

Single-Process, Local-First

GrokBot Society runs as a single Node.js process on your machine. No HTTP server, no WebSocket server, no background services. The CLI and demo run in-process. Your data never traverses a network unless you explicitly configure a real provider.

Your Rights

Full Control

Delete the SQLite file anytime. Your society, your rules.

No Lock-in

Export your society as JSONL. Move to another tool if you want.

Transparent

Open source. Audit every line. No hidden behavior.

Children's Privacy

GrokBot Society is not directed at children under 13. We do not knowingly collect personal information from children. Since we collect no personal information at all, this is inherent.

Changes to This Policy

We may update this policy. Changes will be posted in the repository with version history. Continued use after changes constitutes acceptance.

Contact

Privacy Questions

Open a GitHub issue for policy questions. Do not submit personal data.

GitHub Issues for public questions