AIOS data handling terms

Version 1.0, effective 19 October 2026. Anaboo.ai Pte Ltd, Singapore.

These terms explain where your data goes when you use Augment AIOS, who can see it, how long it is kept, and what you agree to before installing. They sit alongside the AIOS End-User Licence Agreement (the LICENSE file in your AIOS folder) and the Anaboo privacy policy at www.anaboo.ai/privacy. If they conflict on how data is handled, these terms apply.

They are written for firms that hold confidential client material, such as law firms, accounting practices and advisory businesses. Every firm should read them.

1. Who is responsible for what

• Your firm decides what data AIOS handles. Under Singapore's Personal Data Protection Act 2012 (PDPA), and any other privacy law that applies to you, your firm remains responsible for the personal data and client material you process with AIOS. That includes consent, notification, professional confidentiality and your own retention rules.
• Anaboo supplies the AIOS software, the install and the training. AIOS runs on your computer, under your accounts. Anaboo does not host your workspace and does not receive your files.
• Your AI provider processes the requests AIOS sends it, under the plan your firm holds with them. AIOS uses Claude, made by Anthropic, by default. Your firm can choose a different provider, or open-weight models that run entirely on your own computer. You contract with any provider directly.

2. Where your files live

• AIOS is a folder on the computer it is installed on. Your documents, notes, drafts and history stay in that folder until you delete them.
• AIOS keeps a version history of the folder using git. That history is stored on the same computer. The installer does not upload it anywhere.
• Passwords, API keys and connection tokens are kept in one file, ~/.aios/env, in your user account. Only your user account can read it.
• If you choose to sync folders to Google Drive, SharePoint, OneDrive or GitHub, those copies live wherever that service stores them, under your account and their terms. Our guidance is to sync only your business folders, never the whole AIOS folder.
• Claude Code, the engine AIOS runs on, keeps a plain-text record of each working session under ~/.claude/projects/ on your computer for 30 days by default, so a session can be resumed. You can shorten this with the cleanupPeriodDays setting.

3. What goes to the AI provider

• When you ask AIOS to do something, the instruction and any text or files it reads for that task are sent to your AI provider so the model can work on them. The answer comes back to your computer.
• If you use an open-weight model running on your own computer, that work never leaves the computer.
• Requests to Claude are encrypted in transit (TLS 1.2 or higher), and Anthropic encrypts stored data at rest (AES-256). Other providers set their own security terms.
• AIOS only sends what a task needs. It does not upload your whole folder. A task that reads a client file does send that file's contents.

4. Where it is processed: data residency

• Claude, bought directly from Anthropic, has no Singapore data residency option. Anthropic stores data in the United States and may process requests in other regions.
• If your firm needs processing kept in Singapore, Claude is available through Amazon Web Services in the Singapore region for selected models. Anaboo can configure AIOS this way before install. It changes which Claude models you can use and how you are billed, so tell us before we start.
• Open-weight models running on your own computer keep the processing where the computer is. They need a capable machine and are less capable than the leading cloud models, so Anaboo will help you decide which work suits them.
• Files on your computer stay wherever your computer is. AIOS does not move them offshore.

5. Training on your data

The rules below are for Claude, the default. If you choose another provider, its own terms decide whether it trains on your data. Open-weight models running on your own computer do not send your data anywhere to train on.

• Claude Team and Enterprise plans: Anthropic does not train its models on your prompts, files or outputs.
• Claude Pro and Max plans: these are consumer plans. Anthropic trains on your data if the "Help improve Claude" setting is on. You control it at claude.ai/settings/data-privacy-controls.
• Anaboo does not train any AI model on your data, and never receives your prompts or files in the first place.

Our requirement: if AIOS will handle client-confidential or privileged material, use a setup that does not train on your data. That means one of: Claude Team or Enterprise; Claude Pro or Max with "Help improve Claude" switched off; another provider under terms that exclude training; or an open-weight model running on your own computer.

6. How long the AI provider keeps your data

For Claude:

Anthropic keeps anything you send through Claude's /feedback or /bug commands for 5 years. Never use those commands while client material is in the conversation. Anthropic's own terms and privacy centre (privacy.anthropic.com) are the final word on their retention, and can change. Other providers set their own retention. Open-weight models on your own computer keep nothing beyond what is saved on that computer.

7. Services you connect

• AIOS only connects to services you choose to set up, using your own accounts and keys. Examples are Google Workspace, Microsoft 365, Telegram, your CRM and web research tools.
• Each service sees what AIOS sends it for the task you asked for, under that provider's terms. Web research tools receive the web addresses and search terms you give them, not your files.
• Messages to and from the AIOS Telegram assistant pass through Telegram's servers. Do not send client-confidential material through Telegram.
• AIOS asks before sending email or posting anything on your behalf.
• To disconnect a service, revoke AIOS's access in that service's security settings and remove the key from ~/.aios/env.

8. What AIOS sends to Anaboo

AIOS sends Anaboo exactly two small check-ins.

1. Licence check, when AIOS starts (about weekly on a General licence): your licence key, edition, licence status, a scrambled (hashed) identifier for the computer, and the AIOS version.
2. Health check-in, at most every 12 hours: your licence key, the same kind of hashed computer identifier, the operating system name and version, and the AIOS version.

Neither check-in contains your files, prompts, outputs, client names, email, the computer's name or its raw hardware details. Anaboo does not keep the IP address of these requests. Licence records are kept as long as your licence needs administering. Detailed licence logs are deleted after 90 days. Anaboo does not sell or share this data.

9. Anaboo's access to your computer

• Anaboo has no remote access to your computer. AIOS installs nothing that would give us one.
• During install and support sessions you may share your screen with us. We do not copy your files during those sessions.
• If a support task needs a file, you send it to us. We use it only for that task and delete it within 90 days of the task closing.

10. Your side of security

Before AIOS handles client material, your firm should:

• turn on full-disk encryption (FileVault on Mac, BitLocker on Windows) and a screen lock
• keep the AIOS folder out of personal cloud sync such as iCloud or Dropbox
• give each person their own login and their own AIOS install, not a shared one
• set your Claude plan and the session record period in cleanupPeriodDays to match your firm's retention policy.

11. Leaving AIOS and deleting data

To remove AIOS and its data from a computer:

1. Delete the AIOS folder and the ~/.aios folder.
2. Delete the Claude Code session records in ~/.claude/projects/.
3. Revoke AIOS's access in every service you connected, and rotate any keys you created for it.
4. Ask Anaboo to revoke your licence. We delete your licence data on request, apart from records the law requires us to keep.

Anthropic deletes your data on its own schedule for your plan (section 6).

12. Changes and contact

If these terms change, the version number changes and AIOS asks you to accept the new version. Questions, data requests and complaints go to Anaboo's Data Protection Officer at legal@anaboo.ai. We reply within 30 days.

What you agree to when you install

By accepting these terms in the AIOS installer, the person installing confirms that:

1. they are authorised to install AIOS for the firm named
2. they have read these terms
3. they understand that instructions and any files used in a task go to the firm's chosen AI provider (Claude by default, which stores data outside Singapore), unless a local model or in-region processing has been set up
4. for client-confidential material, the firm will use a setup that does not train on its data, as set out in section 5
5. the firm remains responsible for its clients' consent, its professional confidentiality duties and its own retention rules.