Safety and privacy

Work and sign-in data

Arco keeps global settings and saved work on the computer. Project workflows and settings are kept with their project. Provider command-line tools may keep their own credentials outside Arco's data folder.

Provider sign-in connects an account or local runtime to Arco. It is separate from access to the workbench itself.

Provider requests and network features

Model requests send prompts and selected context to the chosen provider under its data and billing terms. Local-first does not mean every feature is offline.

Sign-in, model catalogs, downloads and online speech can use the network. Local voice recognition does not make a request to a remote Computer provider private from that provider. Arco does not upload project folders for telemetry.

Project access and trust

Project folders, permissions and trust are separate choices. Untrusted project instructions and skills are suppressed until trust is granted. Review an unfamiliar repository before granting trust or broader permissions.

File and media tools apply their documented folder boundaries. Additional media folders must be allowed explicitly. These controls are not a claim that every provider's tools form a complete sandbox.

Access to the workbench

The production server is reachable only from the same computer by default. Its browser session and origin checks are not a separate user login. Anything given access to the workbench must be trusted.

Network exposure needs deliberate configuration. The planned mobile interface is intended for private-network access, not public-internet control.

Release checks

Arco checks GitHub for new releases after startup and periodically afterward. The request includes the Arco version, and GitHub sees the connection's public network address. It does not include prompts, project paths or workflow content.

Turn off Check for new releases under SETTINGS > Advanced > CLI and runtime versions to disable the checks. A release check does not download or install an update.

This website

This website has no analytics, advertising scripts or tracking cookies. Fonts and images are served with the site. Links to GitHub open that service under its own terms.