# Data use and release limitations

Hosted requests can contain your prompts, conversation history, enabled tool schemas and tool results. Files, scene/component data and other project information inspected by enabled capabilities may become tool results and be sent to the selected provider. Configure the workspace and tool permissions deliberately. Provider retention, training and privacy practices depend on that provider and your account terms; AIRuntime cannot promise that an external service will not retain or train on submitted data.

Agent configuration export serializes the API key as plaintext JSON. The Chat Console's default export location is Documents/AIRuntime/architect/agent.json (with a project-root fallback if Documents is unavailable); other workflows and user-selected paths can differ. Keep profiles outside Assets and outside version control. A masked UI field is not encryption. Runtime API callers supply their own credentials and must not embed secrets in a distributed client.

Debug consoles, capability logging, local conversation/board memory and Unity logs can contain prompts, tool results and project data. In particular, the Ollama adapter warns that request/response bodies may be logged. Review and redact logs before sharing. No claim of encrypted local storage or comprehensive secret redaction is made.

Permission policies constrain registered capability execution. They are not an operating-system security sandbox. Review generated changes and retain backups. Model-generated code and automated reviews can be incorrect. Kanban may require human intervention after provider, compilation, review or artifact-validation failures.

The initial validation target is the Windows Unity 2022.3.30f1 Editor. Runtime player builds, IL2CPP, WebGL, mobile, macOS, Linux and newer Unity releases require separate testing before compatibility claims. The package has no render-pipeline-specific visual assets. No live-provider reliability or generated-game completion guarantee is offered.

External service terms and fees are determined by the selected provider. Consult the provider's current official account documentation before connecting. Models and APIs change independently of this package.
