Secrets and credentials
- Bring-your-own-provider credentials remain local and are never collected by opencloudbox.
- Plaintext workload secrets have no durable opencloudbox retention.
- Secret values are not returned after creation.
- Repository credentials are short-lived and narrowly scoped.
Project and command data
- Source upload bundles are deleted after verified extraction.
- Command output streams to the client and has no durable hosted copy by default.
- Local file paths are excluded from hosted analytics.
- Telemetry excludes commands, file content, output, and environment values.
Operational metadata
The control plane keeps the minimum metadata needed to authorize accounts, connect Projects to Sessions, operate lifecycle controls, measure usage, and recover from failures.
Retention
Operational metadata, audit events, and legally required financial records follow separate retention periods. The final notice will state each public retention rule and the available deletion process.