Your data

This is the short version for everyone who works with Labtagon AI OS. The full description, with every setting, is Security and privacy in the Administration handbook.

What a model sees

A model gets what belongs to the answer: your message, the conversation so far, instructions, and the results of the tools it called. Every model call goes through AI OS, to the providers your organisation chose. Your organisation can have personal data masked before a call leaves: the model then sees placeholders such as [NAME_1], and you read the real names.

Who can read your chats

• A chat is yours and the people you share it with, such as the members of a workspace.
• The contents of your tool calls only you see. If an administrator looks at your call history, it is recorded, and you see it in your activity.
• Chats with agents are not private: the agent’s owner and the people who oversee agents can read them.
• Whoever operates the installation has access to its database, as with any system your organisation runs.

What is kept, and for how long

What	By default
Your chats	Until you delete them.
Files	7 days after they came in, unless you keep them. A file attached to a chat stays with the chat.
Shared pages	About a week, unless you keep them.
Contents of your tool calls	7 days.
Memories	Until someone forgets them; forgotten ones wait 30 days in the bin.

Your organisation can set other times.

When AI asks you first

A client or an agent gets only what its profile allows. A tool call that must not run without you is held until you answer it, in the chat or in your inbox; only you can approve it. Agents act as themselves, with sign-ins of their own, never with yours. See Tasks and approvals.

Dictation stays on your device

Dictation in the chat is recognised by your browser on your device. The recording goes neither to AI OS nor to a provider.

Taking your data with you

You can download one chat or all of yours at any time: see Exporting chats.