Privacy Policy

Effective Date: June 9, 2026
Last Updated: August 3, 2026

FuXi (伏羲) is a local terminal AI programming assistant developed and operated by Shanghai Weiniu Technology Co., Ltd. (上海维牛科技有限公司). In this Policy, "we," "us," and "our" refer to Shanghai Weiniu Technology Co., Ltd. It helps developers complete software engineering tasks through conversation, code editing, and tool integrations.

This Privacy Policy explains how we and service providers related to your use of FuXi collect, use, disclose, and process your personal information when you use FuXi. For your privacy rights and how to exercise them, please see Section 4 (“Your Rights and Choices”).

Scope:

This Policy applies when you install and run FuXi client software and related features on your device (collectively, the “Services”).
This Policy also applies when you contact us about FuXi, access documentation, or submit feedback through https://www.fuxicode.com. If the website uses separate cookies or visit analytics, those will be described separately.
FuXi is designed with a local-first approach: your sessions, configuration, and most runtime data are stored on your computer by default.
To enable AI conversation and tool invocation, FuXi sends your inputs and tool execution results to third-party AI services and integrations that you choose or configure (for example, large language model APIs, MCP servers, and similar services). Those third parties apply their own privacy policies to the data they receive; FuXi acts as a client that forwards relevant data and does not control how third parties handle your information.
If you obtain FuXi through an enterprise or third-party channel, and that organization centrally manages accounts, models, or network policies, that organization may act as an independent data processor or controller; please refer to its relevant policies. In such cases, we may act as a processor on that organization’s instructions.

1. Collection of Personal Information

We collect the following categories of personal information:

1.1 Personal Information You Provide to Us Directly

Identity and Contact Information: When you sign in to an AI service account, configure an API key, or complete OAuth authorization, we may store your access credentials and account information returned by the service provider (such as email address and subscription type, depending on the provider).
Inputs and Outputs: You may interact with FuXi through chat, coding, slash commands, voice input, and other means (“Inputs”). FuXi generates replies, code suggestions, or tool execution results (“Outputs”). If your Inputs contain personal information, source code, business data, or references to external content, we will process that information as needed for the Services, and it may be reproduced in your Outputs.
Feedback and Preferences: Your usage preferences for FuXi, privacy settings, and evaluations or feedback regarding features or Outputs.
Communication Information: If you submit questions, suggestions, or support requests to us regarding FuXi (including via GitHub Issues or email), we will collect the contact information and message content you provide.

1.2 Personal Information Collected Automatically When You Use the Services

When you use FuXi, we may automatically collect the following technical and usage information (collectively, “Technical Information”):

Device and Connection Information: For example, device type, operating system, terminal environment, time zone, network connection status, and—when you enable remote control or bridge features—environment identifiers such as working directory and code repository names.
Usage Information: For example, feature usage, session start and end times, models used, types and frequency of tool invocations, and error- and performance-related records.
Log and Troubleshooting Information: To diagnose issues, we may record application runtime status, error information, and session-related metadata.

This Technical Information is primarily stored on your local device. Some of it may also be sent to us or our analytics service providers under default settings, as described in Section 1.4.

1.3 Information Stored Locally

To provide a continuous, personalized programming assistance experience, FuXi stores the following locally on your device:

Conversation and session history
Configuration, permissions, and integration settings
Agent memory and project context (if you enable them)
Credentials such as API keys and OAuth tokens (on macOS, Windows, and similar systems, we prefer system-provided secure storage mechanisms where available)

You may clear this data at any time through FuXi’s session management features or by deleting your local configuration directory.

1.4 Usage Analytics Enabled by Default

Under default settings, FuXi enables usage analytics (usage_analytics) to understand feature usage, diagnose defects, and improve the product. You may turn this off at any time with /privacy-settings set usage_analytics off.

Usage analytics typically includes:

An anonymous or pseudonymous session identifier (not your name or email)
Feature and event types (for example, model calls, tool categories, error classifications)
Performance and stability metrics (for example, latency ranges, failure types)
Product version, operating system, and similar platform information

Usage analytics is designed to avoid collecting:

Your conversation text, code content, file paths, command output, or other user-generated content
Information that directly identifies you (unless you voluntarily provide it through feedback channels)

By default, analytics events may be processed and stored through backend services we configure (such as data analytics or feature-flag services). If you disable usage_analytics, related events will no longer be sent to our backends.

1.5 Features Off by Default That You May Enable

The following features are off by default and may be enabled through /privacy-settings:

Setting	Description
`telemetry`	More detailed local telemetry; when enabled, may include additional diagnostic metadata
`crash_reports`	Crash and exception reports; when enabled, error summaries may be sent to us or our error-monitoring providers
`send_conversations`	Conversation upload; when enabled, conversation-related content may be sent to us for support, quality improvement, or security investigation. Off by default

1.6 What We Do Not Do

Regardless of default settings, FuXi does not:

Upload your conversation content to us for training our own or third-party foundation models (unless you explicitly enable send_conversations or otherwise give written consent);
Send your Inputs to third-party AI services or MCP integrations without your configuration;
Sell your personal information (see Section 3.5).

1.7 Necessary Network Requests at Startup

Even before you configure an AI service, FuXi may make necessary network requests that do not carry your personal content, such as:

Checking for software updates (may be suppressed with options such as --no-update-notifier);
Fetching MCP official server registry metadata (may be suppressed with environment variables such as FUXI_DISABLE_NONESSENTIAL_TRAFFIC);
Syncing remotely managed configuration or team memory when you enable those features.

These requests support software security and integrity and generally do not include your conversations or source code.

2. Uses of Personal Information

To the extent permitted by applicable law, we use your personal information for the following purposes:

Providing and maintaining the Services: Processing your Inputs, generating Outputs, executing tools and integrations you authorize, and saving sessions so you can continue your work;
Account and authentication: Managing your sign-in status and API access with AI service providers;
Personalization and memory: When enabled, using local Agent memory and project context to provide more coherent assistance;
Security and compliance: Detecting abuse, enforcing permission policies, investigating security incidents, and fulfilling legal obligations;
Improving the Services: Analyzing feature usage and performance data (including default usage analytics) to fix defects and improve experience;
Communication: Contacting you about service updates, security matters, or requests you submit;
Enforcing terms: Implementing applicable terms of service, usage policies, and similar agreements.

2.1 Important Note About AI Features

To respond to your requests, FuXi must send relevant Inputs (including code snippets, file paths, and command output from your workspace) to the AI model service providers you configure. This is a core function of the Services and cannot be disabled separately without sending data. Please only enter content you are authorized to share, and choose trustworthy service providers carefully.

2.2 Automated Processing

FuXi uses artificial intelligence models to automatically analyze your Inputs and generate Outputs or execute tools. This process may significantly affect your experience. The logic of automated processing is determined by your chosen model providers and their model capabilities; FuXi does not substantively review model Outputs. You should independently verify AI-generated content (especially code changes) for accuracy and safety. You may refuse or limit such processing by stopping use of relevant features, deleting local sessions, or choosing different providers.

2.3 Sensitive Personal Information

Your Inputs, voice transcriptions, or workspace files may contain sensitive personal information (such as identity, financial, or health information). FuXi does not actively require you to provide sensitive personal information. If you choose to input it or configure related tools, you confirm that you are authorized to provide it and have assessed the risks of transmitting it to your chosen third-party services. Processing sensitive personal information often triggers stricter legal requirements; prefer local or enterprise-hosted services and avoid sending sensitive data to untrusted overseas providers.

3. How We Disclose Personal Information

FuXi may disclose personal information to third parties in the following circumstances:

3.1 Service Providers and Integrations You Choose

When you configure or use the following capabilities, relevant data will be processed under that third party’s terms:

Large language model services (such as Anthropic, OpenAI-compatible APIs, Amazon Bedrock, Google Vertex, and similar providers)
MCP servers and plugin marketplaces
External APIs used by web search, page fetching, speech-to-text (such as OpenAI Whisper), and similar tools
Enterprise or platform features such as team memory sync and remote control (Bridge), if you enable them
Webhooks or HTTP hooks that you configure yourself

We recommend that you read the privacy policies of the relevant third parties before use.

3.2 Our Service Providers

Where necessary and appropriate, we may engage service providers to help operate our website, host documentation, provide usage analytics, feature flags, error monitoring, or—when you enable crash_reports or send_conversations—related data processing. Such providers may process information only to the extent required to perform their duties and are bound by contractual obligations. We may use categories of services such as data analytics platforms (for example, Datadog, GrowthBook, or similar services), depending on backend configuration.

3.3 Other Circumstances of Disclosure

We may also disclose personal information in the following situations:

With your consent or at your direction, for example when you actively connect third-party applications, share sessions, or enable send_conversations;
Corporate transactions, such as mergers, acquisitions, or transfers of business assets (we will require successors to honor this Policy or obtain new consent);
Legal requirements, to comply with applicable law, court orders, regulatory requirements, or to protect the rights, property, and safety of FuXi, users, and the public;
Third-party websites and services: FuXi may include links to third-party websites, repositories, or services. Your interactions with third parties are governed by their privacy policies; FuXi is not responsible for their data practices.

3.4 Joint Processing and Role Clarification

For third-party AI services you configure, FuXi typically acts as a technical intermediary forwarding data and is not the sole controller of that data. For default usage analytics and information you actively submit to us, Shanghai Weiniu Technology Co., Ltd. is the personal information processor (data controller). Roles may vary by deployment scenario (individual use vs. enterprise-managed).

3.5 We Do Not Sell or Share Personal Information for Cross-Context Behavioral Advertising

FuXi does not “sell” your personal information for money or other valuable consideration (as that term is defined under applicable privacy laws, including California law).

Where the California Consumer Privacy Act (CCPA/CPRA) applies, we also do not “share” your personal information for cross-context behavioral advertising. We do not rent personal information or use your conversation content to serve third-party ads.

4. Your Rights and Choices

Depending on the laws applicable in your country or region, you may have the following rights (subject to local law):

Right to know: To understand what personal information we process, for what purposes, and to whom we disclose it;
Access and portability: To request a copy of your personal information that we hold;
Correction: To request correction of inaccurate personal information;
Deletion: To request deletion of personal information we hold, subject to legal exceptions;
Restriction or objection: To restrict or object to certain processing activities where provided by law;
Withdrawal of consent: Where processing is based on consent, to withdraw consent at any time without affecting the lawfulness of processing before withdrawal;
Rights regarding automated decision-making (where required by law): To request information about, or object to, processing that produces legal or similarly significant effects solely through automated means, where applicable.

4.1 Scope of Data We Directly Hold

Please note:

Local data (sessions, configuration, Agent memory, etc.) is primarily under your control on your device; you may delete it locally without contacting us.
Data on our or our processors’ servers mainly includes usage analytics events, feedback you submit by email/GitHub, and content you enable through crash_reports or send_conversations.
Data already sent to third-party AI providers is controlled by those providers; please also exercise your rights with them.

4.2 Steps You Can Take

Privacy settings: Run /privacy-settings (or /privacy) in FuXi to manage telemetry, usage_analytics, crash_reports, send_conversations, and similar preferences.
Disable usage analytics: Run /privacy-settings set usage_analytics off.
Delete local data: Delete FuXi configuration and session directories on your device, or remove individual sessions through in-app session management.
Manage integrations: Review and restrict MCP servers, plugins, remote features, and Webhook configurations.
Choose service providers: Use self-hosted or enterprise-approved API endpoints to avoid sending sensitive data to untrusted services.
Limit non-essential network requests: Disable non-essential registry fetches, remote sync, and similar features through environment variables or deployment policies (common in enterprise deployments).

4.3 Exercising Rights and Response Timelines

To exercise the rights above, please contact us using the details in Section 9. We may request information to verify your identity where permitted by law.

Where China’s Personal Information Protection Law (PIPL) applies, we will generally respond within fifteen (15) business days, with permitted extensions for complex cases. Where the EU General Data Protection Regulation (GDPR) applies, we will generally respond within one (1) month, with permitted extensions where lawful. We generally do not charge fees for exercising statutory rights unless a request is manifestly repetitive, excessive, or abusive.

5. Data Transfers and Cross-Border Provision

FuXi primarily processes data on your local device. The following situations may result in transfer of your personal information outside the People’s Republic of China:

You configure AI services, cloud APIs, speech-to-text, or MCP services located outside China;
You enable remote bridge or team sync features with infrastructure outside China;
Servers for usage analytics, error monitoring, or feature-flag services we use are located outside China (depending on actual deployment).

5.1 Third-Party Service Transfers

When you actively configure overseas AI services, those transfers are initiated by you. The overseas recipient, purposes, and safeguards are governed by that provider’s privacy policy. FuXi cannot fulfill that provider’s legal obligations on its behalf.

5.2 Cross-Border Transfers We Initiate

If we or our processors provide personal information overseas, we will comply with applicable cross-border requirements, including where required:

Obtaining your separate consent;
Entering into standard contracts or implementing other legally required safeguards with overseas recipients;
Informing overseas recipients of your identity, contact details, processing purposes, methods, categories of personal information, and how you may exercise your rights.

Where separate consent is required, we will obtain your explicit consent through in-client notices, settings, or dialogs before transfer. You may refuse, but features relying on overseas infrastructure may not be available as a result.

6. Data Retention, Lifecycle, and Security

6.1 Retention Periods

Local data: Retained while you use FuXi until you delete sessions, clear configuration, or manually remove local directories after uninstallation.
Credentials: Retained for the duration of your authorization until you sign out, revoke authorization, or delete credentials.
Usage analytics data: Retained only as long as reasonably necessary for analytics purposes, typically no more than twenty-four (24) months, unless a longer period is required by law.
Support and feedback you actively submit: Retained as needed to resolve issues and meet compliance archiving requirements.
Other information we hold: Retained only as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer period is required by law.

6.2 Aggregated or De-Identified Information

Where permitted by applicable law, we may aggregate or de-identify personal information to analyze product usage, improve features, or conduct security research. Such information cannot reasonably be used to identify a specific individual. We take reasonable steps to reduce re-identification risk.

6.3 Security Measures

We implement appropriate technical and organizational measures to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction, including:

Using operating-system-level secure storage for local credentials and sensitive configuration where available;
Applying strict access permissions to local files;
Providing authentication mechanisms for local API services;
Using industry-standard encryption and access controls for analytics data in transit, where applicable.

The security of any data transmitted over the internet or through third-party services also depends on your network environment and the security practices of your chosen providers. We cannot guarantee absolute security, but we will continue to improve our safeguards.

6.4 Security Incident Notification

If a personal information security incident occurs, we will notify affected users as required by law regarding the incident, potential impact, measures taken or to be taken, recommended self-protection steps, and our contact details. We will also report to competent authorities as required.

7. Children

FuXi is intended for developers and professional users with appropriate legal capacity. It is not directed at children under the age of 14. We do not knowingly collect personal information from children under 14. If you are a parent or guardian and believe we have collected personal information from a child under 14 without appropriate consent, please contact us using the details in Section 9. We will investigate and take appropriate measures, including deleting relevant data, as required by law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes (for example, expanding the categories of personal information collected, changing purposes of use, changing sharing recipients, or enabling new outbound transfers by default), we will notify you through prominent means such as in-client notices, FuXi release notes, project documentation, or our website, and update the “Last Updated” date at the top of this document.

Where material changes require renewed consent under applicable law, we will implement them only after obtaining your explicit consent. You may refuse and may stop using the Services, disable relevant settings, or delete local data. Non-material changes take effect on publication; your continued use after that date constitutes acceptance of the updated Policy.

9. Contact Information

For purposes of this Privacy Policy, Shanghai Weiniu Technology Co., Ltd. (上海维牛科技有限公司) is the personal information processor (data controller).

Personal Information Protection Contact: FuXi Privacy (Shanghai Weiniu Technology Co., Ltd.)
Company Name: Shanghai Weiniu Technology Co., Ltd. (上海维牛科技有限公司)
Registered Address: Room 201, No. 25, Lane 2999, Hutai Road, Baoshan District, Shanghai, China (中国上海市宝山区沪太路 2999 弄 25 号 201)
Privacy Email: [email protected]
General Support Email: [email protected]
Website: https://www.fuxicode.com

If you have any questions, comments, or complaints about this Privacy Policy, or wish to exercise your privacy rights, please contact us through the Privacy Email above. If you object to our processing of personal information, you have the right to file a complaint or report with the competent personal information protection authority in accordance with applicable law.

10. Legal Bases for Processing Personal Information (Summary)

We process personal information within a reasonable scope in accordance with the principles of lawfulness, legitimacy, necessity, and good faith under the Personal Information Protection Law of the People’s Republic of China (PIPL). Our main legal bases include:

Purpose	Types of Data Involved	Legal Basis
Providing and maintaining FuXi core features	Inputs and Outputs, credentials, Technical Information	Necessary to conclude or perform a contract
Managing accounts and authentication	Identity and Contact Information, credentials	Necessary to conclude or perform a contract
Local session storage and Agent memory	Inputs and Outputs, usage information	Necessary to conclude or perform a contract
Default usage analytics (opt-out available)	De-identified usage information, Technical Information	Consent / reasonably necessary to improve the product
Security, abuse prevention, and troubleshooting	Technical Information, log information	Legal obligation / necessary to protect lawful rights and interests
Optional telemetry, crash reports, or conversation upload you enable	Corresponding categories	Your explicit consent
Compliance with law and regulatory responses	All necessary categories	Legal obligation

11. Region-Specific Terms

11.1 EEA/UK Users (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the GDPR/UK GDPR, including the right to lodge a complaint with a supervisory authority. Our main bases are: contract performance (providing FuXi), legitimate interests (product security and default usage analytics, which you may object to or disable), and consent (when you enable optional upload features). Where we transfer personal information outside the EEA/UK, we will use appropriate safeguards (such as Standard Contractual Clauses) as required. Contact us through Section 9 to exercise your rights.

11.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know, access, correct, and delete personal information we hold, and to opt out of “sale” or “sharing.” As stated above, we do not sell or share your personal information for cross-context behavioral advertising. You may have the right to limit use of sensitive personal information where applicable. Submit requests through Section 9, or through any “Do Not Sell or Share My Personal Information” link we provide, if available. We will not discriminate against you for exercising privacy rights.

11.3 Other Regions

If your jurisdiction grants additional statutory rights, we will respect them to the extent required by applicable law. Please contact us through Section 9 and indicate your location and request.

FuXi (伏羲) — by Shanghai Weiniu Technology Co., Ltd. (上海维牛科技有限公司).