PRIVACY.md

# Privacy Policy

CodexDB Agent runs locally as a Codex plugin and does not intentionally collect,
sell, or transmit personal data to a third-party service by itself.

## Data Processed

Depending on how it is configured, the plugin may process:

- Database metadata such as table names, column names, indexes, and constraints.
- Query text, query plans, wait events, and performance metrics.
- Optional telemetry references from Prometheus, Grafana, Neo4j, pgvector, SQL
  Server, or PostgreSQL connections.
- Audit and replay records generated by the local runtime.

## Local Runtime State

Local runtime state may be written under `.codexdb/` or `runtime/state/`. These
paths are ignored by Git in this repository and should not be published.

## Secrets

Connection strings, passwords, tokens, certificates, and migration-signing keys
must be provided through environment variables or secret stores. Do not commit
real secrets to the repository.

## User Responsibility

Operators are responsible for ensuring that database access, retention,
masking, and audit behavior comply with their organization policies and
applicable laws.