Know what leaves your desktop.

The Client keeps engineering work locally, while some account and AI functions use remote services.

Engineering work and AI

Projects, chat history and candidate workspaces are stored locally by the desktop application. Messages, selected or captured context, attachments and tool results can be sent through the SynthCrew server to a remote AI provider. The model does not run locally. Do not submit restricted or confidential data without authorization.

Account and service data

Website authentication uses Better Auth with Google or GitHub sign-in; the selected provider also processes authentication data. The server records account membership, device credential hashes and expiry, billing identifiers, usage reservations, token counts, cost rates and support requests. The gateway is not intended to persist chat payloads. Infrastructure and provider logs can have separate retention practices.

Client AI uses OpenAI through the server when enabled; billing uses Stripe when enabled. Public AI and payments are currently closed. See cookies and storage for browser sign-in.

Access and control

Workspace administrators can remove members and revoke connected desktops when the account service is available. This stops future authenticated use, but does not delete a member’s local files. Client credentials use Windows DPAPI or Linux Secret Service, without a plaintext fallback.

Questions and requests

Do not include passwords or API secrets in support requests. The in-account request form is available only when the account service is enabled and does not automatically send email. See support availability.