Lancelot privacy policy
Revision 1
Ayers Electronics Inc holds no account for you and receives nothing from a Lancelot you run yourself.
Lancelot runs on your own machine inside an AI agent you already use. It reads the database folder you point it at and never writes to it.
What we collect
Nothing from the software. Lancelot's own code contains no analytics, no telemetry, and no crash reporting, and it makes no network request of its own except the embeddings request described below. Its log lines go to standard error for the agent that started it; it keeps no log file.
Your database
Lancelot opens the LanceDB folder named by its configuration only when that folder already exists, and it only reads tables from it. It creates, changes, and deletes nothing there. Search results are returned to the agent that asked and to nowhere else.
What leaves your machine
With an OpenAI API key set, the text of each query is sent to OpenAI to compute an embedding, under OpenAI's terms and privacy policy. With no key, Lancelot runs a text search on your machine and nothing leaves it.
The AI agent and MCP client you connect Lancelot to handle what you type and what Lancelot returns under their own terms and settings.
Where a key is kept
Lancelot reads an API key from the environment variable your agent passes it. The optional setup command can store one instead: in your operating system's keychain when it is available, and otherwise in an encrypted file named credentials inside the lancelot folder of your user configuration directory, encrypted with a key derived from this computer's name, your user name, and its platform. A second file there records which store holds the key. Nothing in either file is uploaded.
The hosted endpoint
Ayers Electronics Inc runs a Lancelot server at https://mcp.ayers.repair/lancelot. It searches a read-only index built from the public pages of ayers.repair, with text search only: no query sent to it is passed to OpenAI or any other model provider.
A request to it carries the query text and the ordinary connection details of any web request, such as your IP address. It is served by Amazon Web Services in the US East (N. Virginia) region, with no account, no cookie, and no tracking. The service's own log lines are kept for 14 days and are then deleted; the query text is not logged. The endpoint is rate limited and may refuse a request when the limit is reached.
Contact
Questions about this policy may be sent to marketplace@ayers.repair or through the Ayers Electronics Inc contact page.