Effective date: 2026-09-06 · Applies to the DataOS Windows client and this official website

1. General principle: Local-first

DataOS is a local-first personal digital asset manager. File scanning, content indexing, OCR, transcription, and image/video/audio processing all run on your machine by default. Your private files, filenames, file contents, media streams and subtitles are never uploaded to any server by default.

2. Data we handle

• Account information: registration uses a self-chosen username and password (stored only as an irreversible hash), nickname, avatar, invite relationships and membership status. All stored in the local database on your machine. We do not collect phone numbers, and email is not mandatory.
• Files and media: indexed and processed only within your local drives, external drives, and data sources you add (NAS via SMB / WebDAV). The index database also lives on your machine.
• Local usage statistics: to improve the product, the client records feature usage events (e.g. "opened media repair"). These records stay in the local database and are never uploaded, and are strictly allow-listed: no media titles, no file paths, no full URLs, no file contents; network addresses are reduced to domain hashes.
• NAS/WebDAV credentials: connection addresses and credentials you configure stay on your machine, used only for your own device connections.

3. Network usage (all expected, all optional)

The software accesses the network only in these cases:

• Downloads and update checks: fetching installers and version manifests (version numbers / checksums) from this website.
• Cloud AI (off by default): only after you manually enable the cloud AI switch and provide your own API key will tasks requiring a hosted LLM send the text fragment you explicitly submit to the AI provider you chose. While the switch is off, all AI processing routes locally.
• Data sources you configure: connecting to your own NAS/WebDAV, initiated by you.

Apart from these three cases, the client sends no data of yours to any server.

4. Backup and security

• Backup files are encrypted for transfer and storage before leaving your machine toward the target you choose (external drive / NAS / WebDAV).
• Private vault contents are PIN-protected and stored separately.
• On uninstall you choose whether to keep user data; uninstalling never deletes your original files.

5. Third-party services

This website and installer distribution use Tencent Cloud Object Storage (COS). The service only delivers static pages and installer files, and involves none of your personal data. We never sell or share your personal information.

6. Minors

This product serves general users managing their own digital files and does not collect personal information from children under 14.

7. Your rights

• All data is on your machine: you can erase everything at any time by deleting the data directory.
• Turning off the cloud AI switch stops all cloud calls immediately.
• Uninstalling ends the software — no residual data is sent.

8. Updates to this policy

This policy evolves with product versions; significant changes will be highlighted in release notes. Contact us: in-app "Community Feedback" or this website shuziguajia.yandao.vip.