Privacy policy

In short

• Your mail, calendar, tasks and contacts are stored on your own computer, in an encrypted database.
• We do not run a server that receives your data. The software talks to the providers you connect, and to the releases host when you install or update.
• Passwords and sign-in tokens never leave your machine except to the provider they belong to.
• We found no analytics or telemetry in the software TO CONFIRM, and this website sets no cookies and loads nothing from third parties.

Who we are

White Room OS [TO CONFIRM: legal entity] ("we", "us") publishes Sill, wros and this website. Contact: hello@whiteroom.os.

The software: Sill and wros

What is stored, and where

Sill keeps what it handles in a database in a data folder on your computer (on Windows %APPDATA%\Sill). The database is encrypted (SQLCipher). Its key is held in your operating system's keychain, or in a key file db.key in that folder when no keychain is available. Logs, backups, downloaded programs and Matrix data live in ~/.sill. This includes your email and attachments, calendar events, tasks, contacts, verification codes found in your mail, and settings.

Accounts and secrets

When you connect Gmail, Outlook or another mail account, one internal component, the connectors core, holds your password or OAuth refresh token. The other cores receive only what they need to do a job, such as a short-lived access token held in memory. No command, log or event prints a secret, and the AI and the command line cannot read them.

Logs and crash reports

The software writes logs, an audit log of commands (~/.sill/logs/cli-audit.jsonl) and crash reports to your computer. They are not sent to us. You can view and delete them with wros logs and wros log.

Local servers

The core and the web UI listen only on your own computer (127.0.0.1) and require a token. Nothing listens on a network address.

Backups

wros backup copies the database to ~/.sill/backups/. The key is not included.

Outside connections

The software connects to the internet only for these reasons, and you can list and switch each one off with wros permissions list and wros permissions disable <id>:

• Your providers. The mail, calendar or chat servers of accounts you connect (for example Google, Microsoft, or your own IMAP/SMTP server). What they receive and how they handle it is governed by their own policies. Sign-in uses your browser (OAuth) and goes only to the provider.
• Installing and updating. wros install and wros update fetch release information and files from the releases host TO CONFIRM: host. That host can see your IP address and the version and platform you request, as any download server does. Files are checked against published SHA-256 sums.
• Optional features you turn on, such as the AI assistant (below) or Matrix.

Google sign-in: Sill uses your Google account data only to show it to you inside Sill. TO CONFIRM: if Sill is published with Google's restricted scopes, add Google's required "Limited Use" statement here.

AI features

AI features (classification, summaries, chat) are optional and are in beta. When you use them, the text you ask about is sent to the AI provider you configured: a model running on your own computer (such as Ollama), or Claude (Anthropic) using the key you supply. If you use a provider, its policy applies to what you send. Keys are stored by the connectors core, never in a command line.

This website

• No cookies, no analytics, no advertising and no tracking scripts.
• Fonts and images are served from this site itself, not from a third party.
• The web server or host may keep ordinary access logs (IP address, page, time) for security and to keep the site running TO CONFIRM: hosting provider and retention.
• If you email us, we keep the message to reply to you.

Your control

Because the data is on your computer, you hold it. You can read it, back it up (wros backup), move it, and delete it: remove an account with wros account remove <id> --yes to delete its local mail and stored credentials, or delete the data folder and ~/.sill to remove everything. Uninstalling the apps never deletes your data.

We hold no copy of your Sill data, so there is nothing for us to export or erase on your behalf. For anything we do hold, such as an email you sent us, contact us and we will help. TO CONFIRM: add the rights notices your jurisdiction requires (e.g. GDPR, CCPA).

Security

Encryption at rest, isolated handling of secrets, local-only servers and checksummed downloads are described above. No system is perfectly secure, and an early build can have bugs. Please report security problems to hello@whiteroom.os.

Children

Sill and this website are not directed at children under 13 TO CONFIRM: age, and we do not knowingly collect information from them.

Changes

If we change this policy we will update the date at the top, and for material changes say so on the home page.

Contact

Questions about privacy: hello@whiteroom.os.