Demo security notes

Sensitive context deserves boundaries.

Do not enter sensitive data in this demo. The items below describe intended architecture and must be independently verified for any production release.

Encrypted local data

Profile context, job descriptions, access tokens, and durable grants use Electron safeStorage, backed by macOS Keychain or Windows DPAPI.

Renderer isolation

Desktop renderer pages run sandboxed with context isolation and Node integration disabled. Narrow preload APIs validate sensitive IPC requests.

Server-side providers

Production provider credentials belong in the Express service, not this frontend or packaged renderer assets.

Honest capture protection

SmartyAI can request capture exclusion, but behavior depends on the operating system and the application doing the capture. It cannot guarantee invisibility.

Ready to see the desktop experience?

View downloads