Privacy
1. The short version
Vetromar is local-first, open-source software. We (the project, maintained by Leonardo Linden Dries) run no servers that receive your data: your knowledge graph lives on your own devices and, if you enable team sync, on a workspace server you host. AI calls go directly from your machine to the provider you configure with your own keys.
2. This website
vetromar.com is a static site. It sets no cookies, runs no analytics or trackers, and has no accounts. It is served by Vercel, whose infrastructure logs (IP address, request path) are subject to Vercel's privacy policy.
3. The desktop app
The app makes network requests only to endpoints you control or configure:
- Update checks fetch release metadata and signed builds from GitHub Releases (subject to GitHub's privacy statement).
- AI extraction and transcription go to the provider you configure (Anthropic, any OpenAI-compatible endpoint, Deepgram, or fully local models) using your own API keys, under that provider's terms. In fully-local mode, nothing leaves your machine.
-
Connected sources (Notion, Slack, …) are reached
directly from your machine via each vendor's official MCP server,
with OAuth tokens stored locally. One static page on this site
(
oauth-callback.html) relays OAuth redirects back to your machine; it runs entirely in your browser and sends nothing to us. - Workspace sync talks to the workspace server your team self-hosts. Its operator — you or your team — is the data controller for what syncs there.
4. What we collect
Nothing. There is no telemetry in the app and no data pipeline to the project. If you email us or open a GitHub issue, we see what you send.
5. Changes & contact
The version date above changes when this policy does. Questions: leo@vetromar.com.