foxora

Security & Privacy

Secure Foxora by separating account access, task authority, connected services, and device-local data instead of treating them as one permission.

In this section 7 pages

  1. 31.01Overview
  2. 31.02Permission and autonomy securitySet task autonomy separately from operating-system permissions so an agent receives only the authority needed for the current outcome.
  3. 31.03Local data storageTreat Desktop and CLI data as device-local unless a feature explicitly says it uses the Foxora account or cloud workspace.
  4. 31.04Memory privacyFoxora conversation memory can contain messages, working memory, and observational history, so keep secrets out of prompts and export before cleanup.
  5. 31.05Authentication and task securityProtect both the Foxora account session and each task’s execution authority; signing in does not grant unrestricted computer access.
  6. 31.06Managing secrets and API keysEnter credentials only in Foxora’s dedicated secret fields, restrict their scope at the provider, and rotate them immediately after suspected exposure.
  7. 31.07Exporting or deleting dataExport and delete account, cloud, and device-local data as separate scopes, verifying each result before moving to the next.