Your memory.
Your control.

(S)AGE ((S)overeign Agent Governed Experience) is an open-source, local-first AI memory system. This policy covers the (S)AGE desktop application and the (S)AGE Memory browser extension. The project website is described separately below.

The short version

Your memories are stored locally by default. (S)AGE runs on your computer with no required SAGE cloud account or product telemetry. Optional federation, synchronization, AI connectors and remote model providers can send data to the destinations you configure. Update checks and model setup also contact release and model hosts.

What data is stored

• AI memories: stored in local BadgerDB/SQLite stores at ~/.sage/ on your computer
• Agent working state: private media and workflow journal entries your agents store on the node, held in the same local stores
• Snapshots: scheduled backups stored locally under ~/.sage/data/snapshots/
• Encryption keys: signing keys and vault key material held on your node. Protect the passphrase and recovery key you use to unlock the vault
• Extension settings: your (S)AGE server URL (default: localhost:8080), stored in browser local storage

Vault encryption for memory contents is optional. Private media and workflow journals require the vault and are encrypted at rest with AES-256-GCM.

Product telemetry and optional connections

The SAGE app does not send product usage analytics to the project. It needs no SAGE cloud account. The local dashboard uses a session cookie for authentication.

The memories you and your agents store may contain personal or project information. If you configure a connector, federation or a remote provider, the data required by that feature can be sent to its configured destination.

The project website

The public project website loads Google Analytics and Google Fonts. Those services receive web requests from your browser. The application's no-telemetry statement refers to the SAGE app, not this website.

Browser extension permissions

• activeTab: to inject the (S)AGE sidebar into AI chat pages
• storage: to save your server URL and cryptographic keys locally in the browser
• scripting: to inject the content script that provides the sidebar and tool integration
• Host access to localhost:8080: to communicate with your local (S)AGE server
• Host access to chatgpt.com: to inject the content script on ChatGPT pages

Network requests

By default, (S)AGE talks to your own local server at localhost:8080 (or the URL you configure). Optional federation, synchronization, Cloudflare tunnel, ChatGPT connector, embedding, and reranking flows make the network requests required by those features. Federation relays carry encrypted traffic but can observe connection metadata. Update checks and model setup can contact release and model hosts. The SAGE project does not receive your memory contents merely because you run a node.

Open source

All source code is publicly available at github.com/l33tdawg/sage under the Apache 2.0 license. You can audit every line of code.

Contact

For questions about this privacy policy, open an issue at github.com/l33tdawg/sage/issues or email l33tdawg@hackinthebox.org.