Privacy

Pax is local-first and privacy-preserving by default.

No default telemetry#

Telemetry is disabled unless you explicitly opt in through future configuration. Diagnostics commands report local state only.

Repository scanning#

Brand and context scanning reads files on disk. Sensitive globs (.env*, keys, secrets, caches) are excluded by default.

Context export#

paxfx context inspect shows exactly which sources would be included before any model-assisted flow. Nothing uploads automatically.

Related#

• Brand profiles
• Security