Last updated: September 24, 2026. This Privacy Policy details the data handling, storage practices, and network communications of the Exa CLI executable and documentation website.
The Exa CLI binary contains zero tracking code, zero analytics SDKs, and zero telemetry beacons. We believe that developer terminal workflows must remain completely private. The application does not collect usage metrics, IP addresses, search queries, or error logs back to any SpaceCorps server. The only network requests made by the tool are direct HTTPS calls to the official Exa API (https://api.exa.ai/) to fulfill user-initiated commands.
Authentication tokens and API keys are sensitive secrets. Exa CLI refuses to save secret tokens in plain-text configuration files by default. Instead, API keys are delegated directly to the secure credential store provided by the host operating system: macOS Keychain Services via the native security subsystem, Windows Data Protection API (DPAPI) encrypted under user-specific credentials, or the freedesktop.org Secret Service daemon via libsecret on Linux.
Non-sensitive configuration metadata—specifically account alias names, masked key previews, and addition timestamps—is stored locally in an owner-restricted YAML file (chmod 0600 on POSIX platforms) located within your standard system configuration directory (~/Library/Application Support/exa-cli on macOS, ~/.config/exa-cli on Linux, or %APPDATA%\exa-cli on Windows). This file can be inspected, backed up, or deleted at any time.
This documentation website is hosted as a static site on GitHub Pages. It contains no tracking scripts, no third-party cookies, and no personal data collection mechanisms. Standard web server access logs are handled directly by GitHub in accordance with GitHub's standard Privacy Statement.