Effective date: 2026-10-20
Ekko Studio is a self-hosted, local-first AI workspace maintained by EKKOLearnAI. Local-first does not mean offline-only. This notice describes the application; your NAS administrator and the external services you select may have additional policies. Do not send data you are not authorized to disclose.
Studio can store account/authentication settings, API credentials, provider configuration, conversations, prompts, generated responses, attachments, uploaded files, tool results, workspaces, agent configuration and operational logs on the host. Tools and agents may read files, run commands and access networks with the permissions you grant. Review prompts, attachments and tool access before use.
Application-managed storage follows the configured Studio/agent home directories. External workspaces and administrator backups are separate from that storage.
When you run a model request, the configured provider may receive the prompt, selected conversation history, system instructions, attached content and tool results included in that request. The request uses your configured credentials; the recipient can also observe network metadata such as your source IP address. Provider presets are configuration shortcuts, not a guarantee that a request is sent to the original model developer.
Examples of built-in model endpoint bases (the actual configuration controls the recipient) include:
| Service | Endpoint base | Destination / processing region |
|---|---|---|
| OpenAI | https://api.openai.com/v1 |
OpenAI; region depends on account/service terms, not selected by Studio |
| Anthropic | https://api.anthropic.com |
Anthropic; region depends on account/service terms |
https://generativelanguage.googleapis.com/v1beta/openai |
Google; region depends on account/service terms | |
| DeepSeek | https://api.deepseek.com |
DeepSeek; verify region with provider |
| xAI | https://api.x.ai/v1 |
xAI; verify region with provider |
| Alibaba Cloud | https://dashscope-intl.aliyuncs.com/compatible-mode/v1 |
International DashScope; verify account deployment/region |
| MiniMax | https://api.minimax.io/anthropic/v1 |
MiniMax; verify region with provider |
| Nous Research | https://inference-api.nousresearch.com/v1 |
Nous Research; verify region with provider |
| ChatGPT OAuth | https://chatgpt.com/backend-api/codex |
OpenAI/ChatGPT; account terms apply |
| Qwen OAuth | https://portal.qwen.ai/v1 |
Qwen; account terms apply |
| Custom, imported or agent-managed provider, including apikey.fan presets | Exact URL displayed in the active provider/agent configuration | The configured operator and possibly downstream providers; region is not verified by Studio |
This table is not an exhaustive network allowlist. Third-party agents, MCP servers, browser tools, plugins, speech services and integrations can contact additional services when enabled. Their data flows and retention are governed by their configuration and policies. Review each integration before enabling it. A domain name alone does not establish processing location. If a recipient or region cannot be confirmed, do not send sensitive data to that service.
There is no universal automatic expiration period for self-hosted conversations, files, credentials and logs. They remain until deleted by the user/administrator or the relevant tool's retention mechanism. Delete conversations/files and remove credentials through the corresponding application settings where available. For complete local deletion, stop Studio and ask the host administrator to remove its configured Studio and agent data, uploads, logs, caches and unwanted backups. External workspaces require separate deletion by their owner.
Uninstall and deletion behavior depends on your deployment method. Back up data before removing application storage. Removing Studio does not recall data already sent to third parties or delete external workspaces and administrator backups.
Security depends on your deployment configuration. Run with least privilege, restrict network access, use HTTPS on untrusted networks, and protect host data, backups, API keys and administrator accounts. Local-first does not guarantee encryption at rest or eliminate risks from tools and external services.
You or your host administrator can inspect, export/copy, correct and delete local data and disable integrations. Availability of export/edit actions varies by feature; filesystem-level administration may be required. Rights over externally processed data depend on applicable law and the recipient's policies.
For privacy questions or a private contact channel, use the maintainer contact options on the EKKOLearnAI GitHub organization. General requests may be filed at https://github.com/EKKOLearnAI/ekko-studio/issues; never post prompts, keys, personal data or other sensitive material in a public issue. Maintainers cannot delete data on a self-hosted NAS they do not control; contact its administrator.