Privacy and sharing

Gluon is private by default and shared by choice.

Private to you

Nobody else, including the members of your groups, can see:

• your private chats and your agents;
• your memory: the facts your Gluon keeps about you;
• your inbox and its attachments;
• your private Drive files and your workspaces;
• your connectors, their sign-ins and your browser profiles;
• your approvals and background tasks.

Shared in a group

Everything in a group is visible to all its current members:

• the group chat, from when each member joined;
• the group’s calendar, drive, family inbox and expense ledgers, with their whole history;
• your Gluon’s replies there, and the cards and artifacts they include;
• what an artifact reads from your connectors, once you allow it for that group. See Artifacts.

Other members’ private calendar events show in a group’s calendar only as Busy, without details. When your Gluon waits for your approval in a group, others see only that it’s waiting, not what it wants to do.

Leaving a group ends your access to it. Messages already delivered to others, including notifications, can’t be recalled.

What your Gluon shares

Your Gluon is told never to reveal your private details in a group, including your facts, your connectors’ results and what it recalls from your private chats or other groups, unless you explicitly ask it to share them there. It uses your facts in groups only if you turn on Use my facts in groups. A Gluon only ever acts for its own member: nobody can ask your Gluon to do something.

Links and publishing

• A temporary file link works for anyone who has it until it expires; Gluon asks before creating one.
• Publishing an artifact lists the chosen version in Discover for anyone signed in to Gluon, who can open, star and remix it. See Artifacts. If it uses connectors, each person outside its group who opens it from Discover sees only their own data; members of the group it belongs to or is shared with see it as the group does.
• A public profile is opt-in: it shows your name and what you published, never your email.

Content from outside

Web pages, emails, files and connector results can contain text written to trick an assistant. Gluon treats all of it as information, never as instructions, and actions with side effects still need your permission. Memory saves ask first when a reply includes content you didn’t type.

Where your data goes

• Your messages and the files Gluon reads go to the AI model provider your agent uses, through Vercel AI Gateway.
• A dictation recording goes to a speech-to-text model on Cloudflare Workers AI and is never stored; only the words you send stay in the chat.
• Your device keeps a copy of recent pages and unsent drafts so Gluon opens quickly and works offline. Signing out clears it.
• Deleting a chat deletes its messages and stops its tasks, and moves its attachments to the trash. Drive files, workspace contents and facts saved from it stay until you delete them. Deleted files stay in the trash for 30 days, and deleted mail in the inbox’s Deleted emails for 30 days. Email follows the inbox’s retention setting, and Linux workspace files are deleted a day after the Linux computer stops.