vertex privacy policy.

This is the privacy policy for vertex, my free terminal coding assistant for Apple silicon Macs. The portfolio site at thyfwxit.com has its own policy at /privacy, and the Nexus AI Terminal at /nexus/ has its own at /nexus/privacy.

Plain English. No legalese. If something here is unclear, email me and I will fix it.

Who runs vertex

Xavier Scott (alias THYFWX), solo. Contact: xavier@thyfwxit.com. There is no company, no team, no third party operator.

What vertex is

vertex is my free terminal coding assistant for Apple silicon Macs running macOS 11 or newer. You download it from this site as a compiled program; its source code is not published.

No telemetry. vertex does not send me usage data, crash reports, analytics, or identifiers. It talks only to the AI provider, the Nexus server or the model server on your Mac that you choose, plus the GitHub request described under "GitHub status" below if you use it. If you choose my Nexus server, I receive what is described under "vertex and a Nexus server" below.

Every connection vertex makes. This is the complete list:

• The model provider you picked: each reply (your messages, the kept conversation, and the files and command output the model asked for), the model list when you add or check a key, and for OpenRouter the key's allowance in /usage. Each request carries your key.
• Ollama or LM Studio on your Mac (127.0.0.1), if you picked one: the same, plus a question about each loaded model's context size, and none of it leaves your Mac.
• A Nexus server, only if you sign in to one or set NEXUS_URL: signing in (which can open your browser at that server's sign in page, and sends this Mac's name, or your username and password if you sign in with them), a status check when vertex starts, its model and usage lists, and each reply, under that server's own policy.
• GitHub, through your own GitHub CLI, about once a minute in a git repo when gh is installed and signed in: gh pr view for the current branch. /github off stops it.
• thyfwxit.com in your browser, only when you click the docs link on the welcome card: a normal page visit.

Nothing else: no telemetry, no analytics, no crash reports and no update check. Commands vertex runs in its sandbox have no network at all.

vertex and your AI provider

You can use your own API key for Anthropic, OpenAI, Google Gemini, OpenRouter, Groq, Cerebras, Mistral, xAI, Together, DeepInfra, Fireworks, or any OpenAI compatible https endpoint. vertex keeps each key in the macOS Keychain and sends it only to that provider. The settings file ~/.nexus/vertex.json on your Mac records the provider, the model you picked, and the last four characters of the key, never the key itself.

What you type, and the files vertex reads in your project folder to answer you, go to the model you picked, or to the Nexus server you signed in to. The provider's own privacy policy and terms apply to what it receives, so read them before you send private code or personal information.

vertex and a Nexus server

Someone who runs a Nexus server can give you a chat only access key (it starts with nxa_). Whoever runs that server can see and log what passes through it. If it is someone else's server, ask them how they handle and delete data.

On my own Nexus server, Agent Control keeps:

• One record per vertex session: the session id, your username or access key, the machine label, the working folder name, the model tier, effort level and model, whether the reply ran locally or in the cloud, the start and last activity times, and the number of turns and tokens.
• Daily counts per access key: requests and tokens for each key each day, used to enforce its daily cap.
• A cloud audit entry each time a prompt goes to a cloud model provider instead of one of my own machines: the model, whether the prompt looked sensitive, its length, and its first 200 characters after secrets and personal data patterns are scrubbed. Prompts that stay on my own machines are not written to this audit.

My server strips API keys and secrets from prompts before any cloud call. That catches common patterns, not every kind of private information.

These records have no automatic expiry yet: they stay until I delete them. You can ask me to delete yours (see "Deleting vertex data").

vertex files on your Mac

vertex keeps your chat history in ~/.nexus/history.jsonl, what you typed in ~/.nexus/history, and the model's reasoning in ~/.nexus/thoughts.jsonl. A Nexus sign in token, if you have one, is in ~/.nexus/credentials, readable only by your user account. The app unpacks itself into ~/.cache/vertex. The /cost records are in ~/.nexus/vertex-spend.json: token counts and dollars per day and per model, for the last 90 days you used vertex, never sent anywhere. The files stay on your Mac, but what's in them is used: the kept conversation goes to your provider or Nexus server with your next message, and a sign in token goes with each request to that server.

GitHub status

If the GitHub CLI (gh) is installed and signed in, vertex runs gh pr view in your project about once a minute, and right after a push, to show the branch's pull request and checks in the status row. That request goes from your Mac to GitHub under your own gh sign in. vertex sends nothing else to GitHub. /github off stops it.

Models on this Mac

If you use Ollama or LM Studio, your prompts and code go to that server on your Mac and nowhere else.

Deleting vertex data

You can delete the files above at any time. /forget in vertex wipes the chat history, and removing the Keychain entries for the service vertex removes your saved keys. Deleting local files does not delete anything already sent to a provider or a Nexus server.

To have your records on my Nexus server deleted, email xavier@thyfwxit.com with your username or the label of your access key and roughly when you used it. Never send a key or token. I will delete the records I can identify and tell you when it is done. I can't delete what an AI provider or someone else's server holds; ask them under their own policy.

Downloading vertex

You download vertex, or its install script, from thyfwxit.com, which is hosted on Cloudflare Pages. Cloudflare automatically logs HTTP request metadata for every visitor, as described in the site privacy policy. vertex itself sends nothing to that site once it is installed.

Your rights

To delete the files vertex keeps on your Mac, use the steps under "Deleting vertex data" above. If you use vertex through my Nexus server, the vertex records and deletion steps above apply too.

If you are in the EU/EEA, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA / CPRA, primarily the right to access, correct, or delete the limited personal data described above. The personal data I hold about you through vertex is the vertex records above, and only if you used my Nexus server. Email xavier@thyfwxit.com to exercise any of those rights.

Liability

To the extent the law allows, my total liability to you for all claims about this site, vertex, or how I handle the information described here is limited to the greater of 50 US dollars or what you paid me to use them. The site and vertex are free. This is the same single limit as in my terms, not a separate one, and it does not limit anything the law does not let me limit.

Governing law

This policy is governed by U.S. law, the same as my terms. That does not take away protections that apply to you and can't legally be waived.

Indemnification

To the extent the law allows, you agree to cover losses and reasonable legal costs I face from a third party claim caused by your unlawful use of this site or vertex, or by content you sent through them without the right to. This does not cover losses caused by my own negligence or misconduct. It is the same obligation as in my terms, not an extra one.

Changes

If this policy changes materially, I will update the "Last updated" date at the top and, where possible, note what changed.

Contact

xavier@thyfwxit.com, for any privacy question, takedown request, or correction. I read every message and answer within 48 hours.