Default posture
Telemetry is off by default. When enabled, events cover product actions such as connect, compose, record, replay, export, crash opt-in, and update checks. Trace payloads, API keys, prompts, tool outputs, headers, and local file paths are excluded or redacted.
The user can inspect the local event log before anything is sent and can disable telemetry from Settings at any time.
Provider keys live in the OS keychain on desktop.
Trace cards redact secrets before export.
AuraOne intake packets show a privacy preview before upload or contact-form handoff.
Crash reports require explicit opt-in and scrub local paths.