Account.
Email, authentication metadata, provider connection state, and user-selected settings.
Legal
Privacy.
Last updated: May 18, 2026.
picasso / legal / privacyindexed
Legal
Privacy
Last updated: May 18, 2026.
AccountEmail, authentication metadata, provider connection state, and user-selected settings.
MemoryCodebase facts, style preferences, and decisions you allow Picasso to retain for retrieval.
TelemetryWhen enabled, aggregate counts, durations, model family, token bands, cost bands, and path-redacted crash data.
CategoryDefault retentionUser controlMemory.Until deleted by the user.Inspect, edit, export, delete, or clear.Telemetry.90 days for raw opt-in events.Disable, export, or delete.Crash reports.30 days for path-redacted crash data.Disable crash reporting.
picasso telemetry offpicasso telemetry exportpicasso telemetry deleteThe short version.
Telemetry is opt-in. Memory is retrieval-only. Provider credentials stay in your OS keychain for subscription mode. Sponsor partners do not receive code, prompts, model output, tool arguments, memory contents, or provider credentials.
Data categories.
Memory.
Codebase facts, style preferences, and decisions you allow Picasso to retain for retrieval.
Telemetry.
When enabled, aggregate counts, durations, model family, token bands, cost bands, and path-redacted crash data.
Sponsor events.
Disclosure impressions, dismissals, blocklist actions, and sponsored unlock state without code or prompt payloads.
What is excluded.
No code in telemetry.
File contents, prompts, model output, tool arguments, diffs, environment variables, and secrets are excluded from telemetry.
No sponsor-system code access.
Sponsor systems do not receive code, memory entries, generated files, tool output, or model routing decisions.
No training by memory.
Memory is retrieval data for your account, not model-training data.
Retention.
| Category | Default retention | User control |
|---|---|---|
| Memory. | Until deleted by the user. | Inspect, edit, export, delete, or clear. |
| Telemetry. | 90 days for raw opt-in events. | Disable, export, or delete. |
| Crash reports. | 30 days for path-redacted crash data. | Disable crash reporting. |
| Audit logs. | Local workspace retention. | Export or rotate under workspace policy. |
Compliance evidence.
Compliance requests and legal signoffs carry evidence links. Managed-provider, subscription-passthrough, ad-network, privacy, terms, subprocessor, and DPA areas are represented as explicit signoff areas without implying an external approval has happened.
Controls.
picasso telemetry offpicasso telemetry exportpicasso telemetry deletepicasso memory clear --allpicasso auth delete-account