Privacy Policy

Last updated: September 21, 2026

1. Local-First Architecture

Ivy Tendril is built on a strict local-first privacy model. Your source code, git branches, plans, promptware definitions, and agent transcripts reside exclusively on your local machine in your working directory and the ~/.tendril/ folder. Tendril does not upload your repository source files, diffs, or project secrets to external Ivy servers.

2. Bring Your Own LLM Keys (BYO Keys)

When you configure model providers (such as Anthropic Claude, OpenAI, Google Gemini, OpenRouter, or European sovereign providers like Berget and Evroc), your API keys and credentials are stored securely in your local operating system keyring and encrypted vault. Model API requests are transmitted directly from your local machine to the chosen model provider's API endpoint over HTTPS. Ivy Interactive does not proxy, log, or inspect your model API traffic.

3. Documentation Website & GitHub Pages

This documentation website is statically hosted on GitHub Pages. Standard web server logs (IP address, user agent, and requested URLs) may be processed by GitHub pursuant to GitHub's Privacy Statement. No third-party behavioral ad trackers or invasive analytics cookies are embedded on our documentation pages.

4. GDPR and Data Subject Rights

In accordance with Regulation (EU) 2016/679 (GDPR), you retain full ownership and control over your personal data. Because Tendril operates locally on your device, you have complete power to export, modify, or permanently delete your local database and transcripts at any time by deleting ~/.tendril.

For inquiries regarding privacy practices or data subject requests, please contact our Data Protection Officer at privacy@ivy.app.