What stays on your machine, and what never sees a server.

Overview

DNP is a desktop workspace where people and AI coding agents — Codex, Claude Code and similar tools — plan, build and review software together on a shared canvas.

This policy covers the DNP desktop application and this website. DNP is in active development, so features move quickly; whenever that changes how data is handled, this page is updated to say so.

Your workspace stays local

The workspace is designed to live on your computer. The data DNP creates and reads is written to your own disk and is never uploaded to a DNP server in the background.

• Canvases, briefs, agent notes and revision history stay on your machine
• Workspace files are read directly from your project folders — copies are not uploaded
• Deleting the app removes the workspace data with it; there is no server-side copy to clean up later

AI agents and model providers

Agents run on your machine against the providers you have configured. When an agent sends a request — a prompt, a diff to review, a test to run — that request goes directly from your computer to the model provider, using your credentials.

That means agent traffic is governed by the policies of the provider you chose, not by DNP. DNP does not proxy agent requests and does not store conversations, diffs or run logs on DNP-owned infrastructure.

In short: if an agent can see something, it is because it is on your canvas or in your workspace — not because DNP shared it anywhere.

Accounts and payments

The Free plan currently needs no account and collects no sign-up information.

When subscriptions ship, purchases will be processed by the payment provider, and DNP will only need to keep proof that an entitlement is active. We will never ask for or store full payment-card details.

This website

This site is a set of static pages. One analytics tool runs on it: PostHog, a product-analytics service. It loads only after the page has finished rendering, and it is served through our own domain (d.dnp.io) rather than a third-party tracker domain.

• PostHog records page views, page leaves and clicks on this site — including clicks on the download buttons — and may capture session replays of how the site is used; anything typed into an input field is masked before it leaves your browser
• Visitors stay anonymous: analytics profiles are created only for people who explicitly identify themselves, which this site never asks you to do
• No ad networks or cross-site tracking pixels are embedded, and analytics data is not used to profile visitors across other sites

Deleting your data

Because the workspace lives on your machine, you are in control of deletion. Uninstalling the app and removing its data folders deletes your canvases, notes and local history permanently — there is no hidden cloud copy and no retention window on our side.

Changes to this policy

As connected-agent features ship, parts of this policy will be revised — and every revision gets a visible date at the top of this page. If a change ever introduces server-side processing that is not described here, the app will surface it explicitly rather than rely on this document alone.

Contact

Questions about this policy? Reach the team through the contacts listed on the about page — or write to [email protected].