Your messages stay yours.

What the app connects to

This is the whole list, and the app shows it to you on first run and in Settings › About:

• The Kafka brokers and schema registries you add.
• Your identity provider's token endpoint, for a connection that signs in with OAUTHBEARER.
• AWS's sign-in endpoints, for an AWS MSK IAM connection that needs them.
• releases.negeseuon.io, to check for and download updates. Nothing is sent but the request.

There is no telemetry, analytics or crash reporter. If that changes, it will say so here and in the app first, it will never include message data, and Enterprise will be able to turn it off.

What it keeps on your computer

• Passwords, keys and tokens live in your operating system's keychain: macOS Keychain, Windows Credential Manager or the Secret Service on Linux. Never in the app's database, logs or error messages.
• Query sessions are encrypted at rest and removed when you close them. Results kept after quitting (off by default, never for production) are encrypted too.
• Produce templates are encrypted. A message you type in the Produce tab is never written to disk.
• Logs hold no message payloads, broker addresses or topic names.
• Query history and saved queries are SQL you wrote, stored unencrypted. History is off until you turn it on.

AI agents

Agents connect over a socket or named pipe on your machine that only your user can open; no network port is opened and nothing goes through our servers. What a tool returns does go to the model behind your agent, such as Anthropic or OpenAI, within the access you set for each workspace. Below All contents, hidden fields reach the agent only as per-session tokens or nulls. Every read is listed in the app, by name and count, never by value.

This website

No cookies, no trackers, no third-party scripts. Fonts are served from this site. Your light or dark choice is kept in your browser's storage and nowhere else.

Questions

Email hello@negeseuon.io.