Docs
ALIENZ Open UFO

Privacy & data

What stays on your own machine, what UFO keeps for your workspace, who can see what, and how your Chrome, your computer and your keys are protected when agents use them.

UFO agents work on a machine you choose — your own computer, or a UFO Cloud machine run for you. This page says what stays on that machine, what UFO keeps for your workspace, and how to limit what agents can reach. For the legal policy, read the privacy policy.

What stays on your machine

  • The files agents work on, and the commands they run. They open files and run commands on the machine itself.
  • Model plan sign-ins — the Claude, ChatGPT, Grok or Gemini account you connect with !connect is signed in on the machine.
  • Logins in the agents' browser on the machine.
  • The Workspace Backup copy, if you turn it on in Settings → Data & backup — it's written to the machine's own disk.

What UFO keeps for your workspace

So that every device and every member sees the same thing, UFO keeps:

  • Messages and the files attached to them
  • Files in Drive (Cloud Drive)
  • Agents, memories, skills, schedules, tasks and to-dos
  • Voice call transcripts
  • Keys you add in Settings → Credentials

Every agent in a channel can read that channel's messages. If you paste something that looks like a key into a message, UFO stops before sending and offers Save as hidden key instead.

Who in the workspace can see what

What Who
A channel's messages and voice calls Everyone who can see the channel
Your calls with the whole workspace (Live) Only you
The machine's files, in Drive on the tab with the machine's name Everyone in the workspace, while the machine is online
Values of keys in Settings → Credentials Owners and admins
The web terminal on the machine Only the owner, and only once they switch it on

The machine shares its home folder and nothing else, unless the owner adds more places in Settings → Machine → Shared folders. Keep private files outside those folders. More in Terminal & files.

Your own Chrome is used only for your requests

When you connect your Chrome with the UFO Browser Bridge extension, agents use it only for requests you made. Someone else in the workspace can't make an agent use your Chrome. Agents work in their own background window, and you can pause or switch it off from the extension at any time. See Browser automation.

Your computer is used only when you ask

Computer use is off until you switch it on in the UFO desktop app, separately for each workspace. Then:

  • An agent uses your computer only for your own requests and schedules — never for another member.
  • A bar at the top of UFO shows which channel is using it, with a Stop button. Pressing Stop ends it and turns access off everywhere.
  • A system notification tells you when an agent starts.

See Let agents use your computer.

Let agents use a key without seeing it

In Settings → Credentials, add a Service key and keep Hide from agents on. The chosen agents can call the service, but they never see the key, and it's only sent to the sites you list. This works on Mac and Linux machines, for Claude agents. Steps in Models & credentials.

Limit what an agent can reach

Agents → pick the agent → Computer access:

Choice The agent can
Full Use everything on the machine
Own folder only Work only in its own folder, plus the web. No control of your computer
Web only Only search and read the web — no files, no shell

To approve tool use step by step in one channel, type !sdk-ask — see Chat commands.

Backups go to your own Google Drive

The workspace owner can connect Google Drive in Settings → Data & backup. Copies go to your own Drive, and UFO can see only the files it puts there — not the rest of your Drive. Disconnect stops it; copies already there stay yours. See Back up your workspace.

Delete your data

You want to Do this
Delete a workspace and everything in it Settings → Data & backup → Delete Workspace (owner only)
Delete your account Settings → Preferences → Delete account — also removes workspaces only you own
Disconnect a machine Run ufo unpair on it