What leaves your Mac, and when
RevBud is local-first: your data lives on your Mac. When RevBud thinks hard, the relevant slice rides an encrypted call and is never stored. This page is the complete inventory of every flow, in plain English. If it isn't listed here, it doesn't leave.
Kept in sync with the product · July 16, 2026
| What data | When it moves | Where it goes | What's stored |
|---|---|---|---|
| Cloud thinking Context slices: the thread being answered, the matching deal frame | Per call, whenever a job needs the big model | Through the RevBud proxy to the model provider, encrypted in transit | Nothing. Transit-only; the proxy does not log or retain content |
| Live voice audio | Only on the Live tier, and only while the persistent LIVE indicator is lit on your screen | Real-time voice pipeline via the RevBud proxy | Not stored by RevBud |
| Connector tokens Credentials for email, calendar, CRM, and other connected tools | Never | Nowhere. They live in your Mac's Keychain | Never on RevBud servers |
| Your deals, dossiers, drafts, notes, transcripts | Never | Nowhere. They stay on your Mac | Local only. One-click export, yours forever |
| Account and meters Who you are, your plan, usage counters | At sign-in, and as metered features run | RevBud servers | Identity, entitlements, and meter counts. Counters are numbers, never content |
| Crash reports and telemetry | Only if you opt in. Both toggles are off by default | RevBud servers | Feature pulses and scrubbed error logs. Never message content, never contact data |
Details and your rights are in the privacy policy.
Honest limits
- Apple Silicon only. RevBud requires an Apple Silicon Mac running macOS 26 or later.
- No multi-Mac workspace sync at GA. Your account carries your identity and plan across Macs, but each Mac keeps its own local workspace. Export and import is the bridge if you switch machines.
- Export never locks. One-click export of everything, in documented formats, works on every plan, during the trial, and after you cancel.