Security & data

Powerful access.
Your rules.

Codvian needs access to your project to do real work. Here is exactly how you control it and where your data goes.

Step 1 · Choose a mode

Three access modes, per session.

Pick one from the composer before you start. You can switch at any time.

Most careful

Ask for approval

Confirm before writes, commands, installs and other sensitive actions

Balanced

Approve for me

Auto-approve safe actions; destructive ones still ask

Most autonomous

Full access

Broad access for this session — files, terminal, network, git

Step 2 · Fine-tune

Allow, Ask or Deny
for every action.

In Settings → Agent Permissions, set each capability on its own. Read-only operations can be auto-approved. Full access enables everything for that session.

Try it. These toggles are a live preview of the settings page.

Read Files & ASTRead and parse source files
Write & Modify FilesCreate and edit source files
Delete FilesDelete files from the workspace
Run Terminal CommandsExecute shell commands and scripts
Install DependenciesInstall npm, cargo or pip packages
Network AccessMake HTTP requests to external services
Browser AccessBrowse the web through the integrated browser

Where your data lives

Three places. Nothing hidden.

On this device

Stored locally, per account. Codvian does not sync or upload it.

  • Chats, messages and attachments
  • Memories and projects
  • Chat workspaces
  • Local diagnostics (counts and timings only)

Model provider

Sent only when you run a request, to the provider you chose.

  • Your message and the chat’s context
  • File contents and tool results the agent uses
  • Retention follows that provider’s terms

Codvian sign-in

Held by Codvian’s sign-in service, not by the app.

  • Authentication for this device
  • Account identity, such as your email
  • Not removed by deleting local data

Your controls

Keys, export and deletion.

Encrypted keys

Provider keys are stored encrypted with your OS keychain and sent only to that provider.

Export everything

Settings → Data & Privacy exports projects, chats, memories, artifacts and settings as JSON.

Delete on demand

Delete chats, memories, diagnostics, one account or everything on the device. Deleting everything requires typing DELETE.

Found a security issue?

Email support@codvian.com with the version, a short description and safe steps to reproduce.

Report an issue