Privacy Policy

Effective Date: September 2026
Applicable To: RenegadeInc Software, Renegade Core Model Manager (RenegadeCMM), and associated utilities
Maintained By: TheStygianRenegade / DevNullInc

🛡️ 1. Absolute User Privacy: Zero Telemetry

RenegadeInc Software is built strictly on the principle of unconditional local-first data ownership.

  • No Analytics or Trackers: We include zero telemetry daemons, tracking pixels, session recorders, or behavioral profiling tools.
  • No Remote User Databases: We do not operate remote databases storing your personal identity, local directory trees, or downloaded AI models.
  • No Third-Party Ad Networks: None of our applications or web properties sell, lease, or syndicate user telemetry.

🔐 2. API Keys & Sensitive Credentials

Applications like RenegadeCMM allow optional API integration with upstream repositories (such as CivitAI and Hugging Face) to enable authenticated downloads and rate limit bypasses.

Storage and Cryptography

  • Saved Exclusively to Local Storage: Stored credentials remain strictly on your machine inside your local database.
  • AES-256-GCM Encryption: Keys and tokens written to disk are encrypted at rest with authenticated AES-256-GCM.
  • No Intermediate Relay: Your keys are never transmitted to RenegadeInc Software servers. When API queries are dispatched, your machine communicates directly with civitai.com or huggingface.co over TLS/HTTPS.
  • Redaction from Logs: Any sensitive values printed to console output or generated in diagnostic reports are automatically scrubbed and redacted.

📁 3. Local Filesystem Boundaries

To manage your generative AI models and ComfyUI installations, our software requests access to specific local directories:

  • Strictly Scoped: Operations are confined solely to your user-configured ComfyUI installation, model folders (checkpoints/, loras/, vae/, controlnet/), workflows directory, and application data.
  • Hash Computation: Checksums (SHA-256) are calculated locally on your processor to verify file integrity and match metadata. Files are never uploaded anywhere.

🗑️ 4. User Control & Data Deletion

Because our software stores all information in local files and SQLite databases on your disk:

  • You can delete API keys instantly via in-app settings.
  • You can wipe all indexed data, cached images, and download queues at any time by deleting the local database file or using the in-app reset utility.
  • You retain complete ownership of every asset generated or managed.

📬 Questions & Security Disclosures

If you have security questions or wish to report a vulnerability, please reach out via our Security Advisories on GitHub or contact us at [email protected].