Trust
What happens to your data.
Arcon never opens a port on your machine. The connector dials out over TLS and streams only what an agent reports. Your code and credentials stay where they are.
Three places, one direction.
- app-server/your code
- .git/your history
- .env
- ~/.ssh/id_rsa
- ~/.aws/credentials
- claudecodexyour agents
Stays here
Your computerThe connector only dials out. No inbound ports, no tunnels.
- Status
- Questions
- Your decisions
Delete a session and it’s gone.
Your phoneSigns in on its own, bound to the device. Revoke it and its sessions end.
- Never uploadedYour repository, your files, your keys
- Never inboundOne encrypted connection out, nothing in
- Never kept for youDelete a session, and its history goes with it
What stays, and what we keep.
You can delete sessions, documents and devices at any time. Deleting your account removes all associated data.
Stays on your computer
- Your code, files and repositories
- Credentials, keys and .env files
- The agent itself and its full transcript
- Screen contents (only small, redacted thumbnails leave, for screen approvals)
What Arcon stores
- Your account email and paired devices
- Session data connectors report: status, steps, outputs
- Approvals and the decisions you made
- Usage totals per agent, computer and model
Small surface, clear rules.
Outbound-only
No inbound ports, no tunnels.
Device-bound sign-in
Revoke a phone and its sessions end.
Exact-action approvals
Scoped to one command, file or recipient. Decisions expire.
No passwords
Sign in with an 8-digit email code.
Report a security issue
Email security@arcon.dev. We’ll confirm we received it and keep you updated until it’s fixed.
Address to confirm before launch
Our privacy policy is a draft during the private beta and will be reviewed before public launch.