Privacy Policy

Effective date: June 6, 2026 · Last updated: June 6, 2026

1. What ObserveCo Is

ObserveCo is a local-first AI agent monitoring tool. It runs as a CLI and dashboard on your machine, monitoring your AI agents' health, token usage, and configuration. It stores all data in a local SQLite database on your computer.

ObserveCo is not a cloud service. There are no ObserveCo servers that process or store your data.

2. What Data We Collect

2.1 Data Stored Locally (Always)

ObserveCo stores the following data on your machine only in ~/.observeco/pulse.db:

Data Type	What It Is	Why We Store It
Agent health pulses	Agent name, status, PID, uptime, memory usage	Dashboard display, health monitoring
Token usage logs	Token counts per turn, cost estimates, provider	Cost tracking, anomaly detection
Error logs	Agent error messages, timestamps	Error analysis, auto-heal
Circuit breaker state	Failure counts, cooldown timers	Auto-heal logic
Plugin tracking stats	Plugin name, cost per call, error rate	Plugin Firewall feature
Anomaly records	Detected issues, severity, status	Anomaly Inbox
Alert history	Alerts sent, delivery status	Alert Management

This data never leaves your machine unless you explicitly opt in to telemetry (see §2.2).

2.2 Telemetry (Opt-In Only)

ObserveCo has an optional telemetry system. It is disabled by default.

When telemetry is enabled (via the opt-in file at ~/.observeco/.telemetry_opt_in), we receive:

Data Sent	Frequency	Purpose
Machine ID (random hash)	Once	Aggregate unique-user counts
Event type	Per event	Feature usage analytics
ObserveCo version	Per event	Version adoption tracking
OS platform	Per event	Platform compatibility

We never receive: your agent names, configurations, content, token usage, API keys, SOUL.md files, chat messages, or any personally identifiable information.

2.3 License Validation

When you have an active Pro subscription, ObserveCo validates your license key:

• License key stored locally in ~/.observeco/license.json with restricted permissions
• Validation checks our license server once every 24 hours
• The request contains only your license key — no usage data, no agent data
• Result cached locally — if the server is unreachable, Pro features continue working

3. What We Never Do

• We never read your agent content. We see token counts and file sizes, never the content of your SOUL.md, MEMORY.md, chat messages, or agent outputs.
• We never run servers that store your data. Your data lives in ~/.observeco/pulse.db on your machine.
• We never sell your data. We sell a software product (Pro tier), not data.
• We never track you across the web. No cookies, no analytics scripts, no tracking pixels.
• We never access your machine remotely. ObserveCo runs locally.
• We never share your data with third parties. No third-party data processors.

4. How We Protect Your Data

4.1 Local Storage

• All data stored in SQLite with WAL mode for concurrent access safety
• License key stored with restricted file permissions (owner read/write only)
• No data in world-readable directories
• Daily pruning — Free: 7 days, Pro: configurable retention

4.2 Network Communication

• License validation uses HTTPS (encrypted in transit)
• Telemetry uses HTTPS (encrypted in transit)
• Dashboard binds to localhost only — not accessible from your network
• No data sent over unencrypted connections

5. Your Rights

Since ObserveCo is local-first, you have full control:

• Access: Your data is in ~/.observeco/pulse.db — open it with any SQLite tool
• Delete: Delete ~/.observeco/pulse.db to remove all ObserveCo data
• Export: Query the SQLite database directly — you already have the data
• Opt out: Delete ~/.observeco/.telemetry_opt_in or never create it
• Downgrade: Switch to Free tier — all data remains local

6. Open Source

ObserveCo is open source under the MIT license. You can verify our privacy claims by reading the source code:

• src/observeco/db.py — local data storage (no outbound calls)
• src/observeco/telemetry_client.py — opt-in telemetry (disabled by default)
• src/observeco/dashboard/server.py — dashboard (localhost-only binding)

7. Changes to This Policy

We will update this policy when our data practices change. The "Last updated" date will reflect the most recent change. We will not retroactively change how existing data is handled.

8. Contact

For privacy questions:

• Email: privacy@observeco.ai
• GitHub: Open an issue