Privacy at Phigon

Who decides what is collected

Collection needs two decisions: your workspace policy and the machine owner's local approval. Phigon collects only what both allow. Starting a pairing is a request; it is never treated as consent.

What the default profile collects

Agent presence, state, health, activity types, and lifecycle events. It does not collect prompts, replies, reasoning, terminal output, file contents, browser pages, or environment values.

Full activity

When a machine owner explicitly approves the Full activity profile, supported prompts, replies, tool calls, outputs, and past conversations are shared. Secrets are redacted on the machine before anything is sent.

Where data lives

Hosted workspaces store records in Phigon's infrastructure, isolated per workspace. Business deployments keep everything on servers you control. Each machine keeps only source cursors and an encrypted delivery queue so it can survive disconnects.

AI features

Cortex and Guardian drafting send model requests through the Phigon control plane only when they are enabled for your deployment. Your workspace policy chooses whether models see aggregate counts only or permitted diagnostic excerpts. Secret redaction applies in both modes.

Revocation and deletion

The machine owner can revoke consent at any time. Administrators can revoke machine credentials, remove machines, revoke access keys, and request deletion of retained records.

Contact

Questions or requests: nikku@phigon.online.