Privacy is a product boundary.
Phigon is designed for authorized supervision. Pairing intent is not treated as consent, and missing evidence never becomes a positive claim.
Explicit machine-owner consent
The observer shows the selected metadata or full-content scope on the supervised machine and requires acceptance before pairing.
Metadata first
The default profile excludes prompts, responses, reasoning, terminal output, file content, browser content, and environment values.
Local redaction
Collection policy is intersected locally with server policy. Revoked or omitted categories are removed before transmission rather than hidden later in the interface.
Revocation and deletion
Authorized administrators can revoke consent and credentials, remove a machine, and track scheduled data deletion from the privacy center.