Privacy of reports and usage

BAS sends a skill's author records, not conversations. Each time an agent uses a skill, it sends one usage record with bas record-usage, and any problems it met go in that record. This page says exactly what leaves your Mac. The full privacy policy covers your account and everything else.

What a record contains

• The skill and the version it was used at, and the model that used it.
• Any problems: each with its category, severity and summary, and the details and suggested fix if the agent wrote them.
• If the agent wrote them: a line for the skill's owner, a summary of what the skill was used for and how it went, and the structured result the skill asks for.
• Who sent it: the account signed in to BAS.

Nothing else is attached: no transcript, file contents or repository name, only what the agent writes into these fields. The CLI removes secrets such as API keys, tokens, private keys and passwords in URLs from every field before the record is saved or sent, so nothing unredacted leaves your Mac.

When a record is sent

The CLI sends each record to BAS as soon as the agent runs the command; the app does not need to be open. Offline, or with nobody signed in, the record waits in a queue in ~/.bas and the next call that reaches BAS sends it.

An agent can send a record again with its ID to add to it, such as a problem it found afterwards. That changes the same record and never counts a second use.

What is never sent

• Records about a skill of yours that was never published.
• Records about a GitHub skill whose sharing with maintainers is off.
• Any record while usage sharing is off in Settings. A record carries both the use and its problems, so with sharing off the CLI sends neither.

Who sees them

Installed skills

Only the skill's owner, the person who published it.

Your skills

Only you. Your own uses of a changed skill count as a draft, apart from the published versions.

Skills from GitHub

The repository's verified maintainers, BAS users with write access to the repository, while you leave Share uses and reports with the maintainers on. It is on by default, and you can turn it off for each GitHub skill.

If you delete your account, records you sent stay with the skill's author with your name removed.