Privacy & terms

Your data stays yours

Last updated 22 October 2026

Local-firstMemory, chats, settings and keys are stored on your computer.

Small accountOur servers hold your sign-in and a few profile answers — never your conversations or files.

Never soldWe don't sell, rent or share your data with advertisers or brokers.

Privacy

CantoWork is a desktop application. It runs on your computer and works with the AI providers and apps you choose to connect. This page explains what that means for your data in plain language.

What CantoWork stores, and where

On your PC in %APPDATA%\CantoWork: your local accounts, conversation memory, preferences, scheduled tasks, connected-app tokens and the API keys you enter.
The app itself lives in %LOCALAPPDATA%\Programs\CantoWork and contains no personal data.
Files CantoWork creates for you (documents, videos, images) are saved where you ask, by default under your CantoWork data folder.

Your CantoWork account

You sign in to CantoWork with GitHub. Google, Microsoft and emailed-code sign-in are coming soon. Your account is stored with our account provider, Supabase, and holds:

Your email address, and the name and profile picture your sign-in provider shares.
Your active sign-ins: device type, rough location (city and country) and IP address, so you can spot and revoke ones you don't recognise.
The answers you give in the short welcome questions (all optional): first name, role, team size, industry, what you'll use CantoWork for, how you found us, tools you use today, rough budget and whether you'd like product emails.
Your country (worked out from your connection), operating system, app version, campaign tags from the link you arrived on, and when you signed up and last opened the app.

We use this to run sign-in, understand who CantoWork is for and improve it. Your conversations, memory and files are never sent to us. On your PC the app keeps you signed in with a token encrypted by Windows for your user account. You can see where you are signed in, sign other devices out and delete your account at any time from your account page. The active sessions list shows each sign-in's device type, rough location and IP address.

AI providers and connected services

When CantoWork thinks, sees or speaks, your request — which can include text, screenshots, audio or file contents you ask it to use — is sent directly from your computer to the AI provider you selected (for example Google Gemini, OpenRouter or NVIDIA). Connected services such as Gmail, Slack or Notion receive only what's needed to carry out the task you asked for. Each provider handles that data under its own terms and privacy policy, so please review the ones you use.

Microphone, camera and screen

CantoWork uses your microphone for voice commands, your camera when you ask it to look at something, and screenshots of your screen when a task needs to see what's in front of you. These are only used while CantoWork is running, and the live activity feed shows what it's doing.

Downloads and updates

Our website and download host may keep standard server logs (such as IP address and browser type) when you download the installer. The installer checks our release feed to find the latest version.

Your controls

Sign out from the account menu in the app; this forgets your sign-in on that computer.
Remove an API key or disconnect an app at any time from the Providers and Connectors pages.
Uninstall from Settings → Apps. The uninstaller asks whether to also delete your CantoWork data folder.
You can delete %APPDATA%\CantoWork yourself at any time to erase everything CantoWork stored.

Terms of use

By installing or using CantoWork you agree to these terms. You're granted a personal, non-exclusive, non-transferable license to install and use CantoWork on devices you own or control.

You're in charge of what it does

CantoWork can control your mouse and keyboard, open apps, read and write files, browse the web and send messages through services you connect — when you ask it to. You're responsible for the tasks you give it, so review important actions such as sending messages, purchases or deleting files.

AI can be wrong

Output from AI models may be inaccurate or incomplete. Don't rely on CantoWork for medical, legal, financial or safety-critical decisions.

Third-party services

Your use of AI providers and connected apps is subject to their terms, including any fees they charge for API usage.

No warranty

CantoWork is provided "as is", especially while in beta, without warranties of any kind. To the extent permitted by law, we aren't liable for indirect or consequential damages arising from its use.

Contact

Questions about privacy or these terms? Get in touch.