Privacy

Privacy and agent task data

Runmote connects an authenticated ChatGPT Action to the user's active paired computer and local coding agent. The local owner chooses the workspace and execution controls.

ChatGPT sends

  • An opaque Markdown agent prompt.
  • A bounded idempotency key.
  • An opaque task or continuation reference for follow-up operations.

Runmote protects

  • Prompt and report text where private retention is required.
  • Broker, device, session, and agent-native references.
  • OAuth and Action credentials, which are never returned as task data.

Routine diagnostics

  • Lifecycle state and aggregate counts.
  • Prompt byte counts and bounded native usage when available.
  • No raw prompt, report, credential, or private internal identifier.

Responsibility boundary

Runmote transports task text without parsing coding semantics. Codex receives it in the owner-selected workspace and operates under the owner's configured sandbox and native approval model. Status calls do not retransmit the prompt, and retries reconcile through idempotency instead of creating duplicate agent work.

Data control

Users can revoke paired devices, rotate device credentials, disconnect OAuth grants, and revoke Action keys from Runmote settings. No credential should be pasted into normal chat or an agent prompt.