Privacy and security

Local-first project data

• Project structure, timeline edits, storyboard data, and local job history live in the project.
• Imported original media remains external by default; generated output is downloaded and managed locally.
• Local editing and export of already-downloaded media do not require fal.ai.

Data sent for AI work

When you start an AI operation, the selected prompt, parameters, and required source or reference media are sent to fal.ai and the chosen model provider. Review the provider's own terms, retention policy, and commercial-use conditions before submitting sensitive material.

Credential handling

• The fal.ai key is accepted only by the privileged desktop process.
• On Windows, persistent credentials are encrypted through the operating system's DPAPI-backed secure storage.
• The full key is not returned to the interface, project, browser storage, logs, or diagnostics.
• Disconnect removes the locally stored credential but does not delete the remote fal.ai account or key.

Diagnostics and telemetry

Current beta diagnostics remain local. Structured logs redact credentials, prompts, scripts, media paths, local URIs, and media metadata while retaining normalized error categories and correlation IDs. Remote crash uploading and product telemetry are disabled in the current build.