Stays on the PC
- Registered folder paths and source files
- The local index, document chunks, questions, answers, and saved knowledge cards
- Original file names and full local paths
DATA BOUNDARY
Your folders are not a Web database
PassAI Desk separates local indexing from optional Web AI processing and keeps the transfer decision visible.
Sent only after approval
- The question and selected Evidence excerpts for grounded answers
- Selected changed excerpts for an AI-enhanced folder briefing
- Bounded text batches for embeddings when that consent is enabled
Metadata the service may retain
- Account, approved device, consent, quota, request outcome, token, cost, latency, and byte-count metadata
- A non-sensitive diagnostic ID, component, and timestamp for support
- No document text, question, answer, Evidence content, file name, or local path in the usage ledger
DATA BOUNDARY
Controls you keep
You can cancel a transfer preview, withdraw AI consent, revoke an approved device, sign out, and continue using local keyword search.
Purpose and retention of Web metadata
- Account, password hash, session, and device authorization metadata provide sign-in and access control. Expired sessions and one-time tokens are removed by bounded cleanup.
- AI usage stores request ID, feature, unit counts, status, and latency for quota, cost, and reliability. It does not store request or response content.
- Support text and a user-reviewed diagnostic reference are used to handle cases. Operators cannot browse local source content.
- You can export account metadata as JSON and delete the Web account. Account deletion and PC local-data deletion are separate actions.