Skip to content

Security & privacy

Vixi asks before the steps that matter.

Vixi always asks before sending as you or paying. You choose how often it asks for the rest.

Vixi with a security shieldVixi with a security shield

Approval cards show what will happen.

Before Vixi sends a message as you or pays, it stops and shows an approval card with exactly what it will do. Depending on your approval mode, it does the same before deleting a file or running a risky command. You approve, or say no.

  • The card shows the draft and who it's for, or the merchant and amount
  • It shows up on every device you're signed in on
  • Press Stop to end any task, any time

Vixi wants to send 12 emails

Waiting for your OK

To  12 coffee shop owners

Subject  Fresh beans for your café

Hi, I roast small-batch beans. Want a free sample this week?

An approval card: Vixi asks before sending an email on your behalf.

Three approval modes.

Manual
Vixi asks before every risky command or file action, like deleting, overwriting or installing. Reading and searching just happen. This is the default.
Smart
An AI safety reviewer checks each risky action first. Clearly safe ones go ahead. Vixi asks you about the rest.
Auto
Vixi runs commands and file actions without asking. Dangerous commands stay blocked.

In every mode, sending messages as you, uploading files, payments and changing security settings still ask first. Set the mode in Settings, or change it for one chat.

Approvals

Settings

Vixi handles routine changes and asks before anything risky.

  • Read my email and calendarAllowed
  • Change my calendarAllowed
  • Create and edit filesAllowed
  • Delete filesAsks first
  • Send messages as meAsks first
  • Pay with my cardAsks first

Sending as you and paying always ask first.

  • Asks in every mode
  • Messages as youAlways asks
  • PaymentsAlways asks
  • Uploading filesAlways asks
  • Security settingsAlways asks

You approve every payment, once.

When a task needs a payment, Vixi shows the merchant, what you're buying and the total. You approve with Face ID or your fingerprint in the app, or a passkey on the web. That signs an approval for that one merchant and amount. It's used once, and has to fit inside your spend limits.

  • A limit per payment and a monthly limit, set in Settings
  • If the price changes, Vixi stops and asks again
  • A ledger of every payment, with the receipt

Delta

NYC → SFO · Fri, Oct 23 · 1 adult

$289.40

Card
Visa •• 4242
Limit
Uses
Single-use

Approve with Face ID

Valid for this merchant and this amount only.

Passwords go in your vault.

When Vixi needs a password, API key or sign-in token, it shows a secure form. What you type is saved encrypted in your vault, with a key for your account only. Vixi fills it into the site when a task needs it, and every use is logged. It never appears in the chat or reaches the AI model.

  • Encrypted with AES-256-GCM and per-person keys
  • Asked for with a secure form, never pasted in chat
  • Stripe holds card numbers, never the vault or the chat
Vault

  • github.com

    alex@gmail.com

  • delta.com

    Alex

  • target.com

    alex@gmail.com

Signing in to github.com with your saved login.Filled from your vault · hidden from Vixi
The vault lists saved logins and keys with the secrets masked. Vixi fills them in without ever seeing them.

Memory you control.

Vixi remembers things like "I'm allergic to nuts". It lives in your own private Vixi, on every device you sign in on. See it, edit it, delete it.

Activity history

Every step Vixi took, with the time, plus the tasks it has scheduled.

  1. Opened Claude Code’s fix as a PR9:41
  2. Posted the plan in #team10:02
  3. Paid Delta $289.40 · signed10:15
  4. Coming up
  5. Morning briefTomorrow, 8:00
  6. Chase 3 late invoicesThu, 9:30

Memory controls

Each memory in plain words. Edit it or delete it, and Vixi forgets.

  • Allergic to nuts
  • Mom's birthday is June 4
  • Sam is vegetarian
  • No meetings before 10
  • Tests on every PR

Only the folders you allow.

With the computer connector, Vixi can reach your computer's files, terminal and browser, even from your phone. It works only inside the folders you turn on, and you can revoke the computer from any other device in seconds.

Get the computer connector

Alex's MacBook

Vixi can see 3 folders

Folder switches on your computer: Vixi can only use the folders you turn on.

How we use your data.

We use it to do the tasks you ask for. We don't show ads, sell your data or train AI models on your conversations.

Your own private Vixi

Each account gets its own Vixi and memory, kept apart from everyone else's. Only devices you sign in can reach it.

We don’t sell your data

We use your data to do what you ask, keep your devices in sync and keep the service safe. Nothing else.

We don’t train on your chats

Your conversations are never used to train AI models, by us or by the model providers we work with.

Read the privacy policy

Using Vixi at work?

The trust center covers Vixi AI for Work: access controls, the audit log, where data lives, subprocessors and what’s planned. Vixi AI for Work is in early access.

Open the trust centerVixi AI for Work security

Common questions

Does Vixi ask before it acts?
Yes. Before Vixi sends a message as you, pays, uploads a file or changes security settings, it shows exactly what it will do and waits, in every approval mode. For other risky actions, like deleting files, your approval mode decides: Manual, Smart or Auto. Set it in Settings, or change it for a single chat.
Can Vixi see my passwords?
No. When Vixi needs a password or API key, it asks with a secure form. What you type goes straight into your encrypted vault and is filled in when needed. It never appears in the chat and is never shown to the AI model.
Can Vixi spend money without me?
No. Every payment needs your approval with Face ID, your fingerprint or a passkey, for one merchant and one amount, inside the per-payment and monthly limits you set. Vixi can't go over them. We don't store card numbers. Stripe, our payment processor, does.
Do you train AI on my conversations?
No. We don't sell your data or use your conversations to train AI models. To answer you, the relevant parts of a conversation go to the model provider set up for your account, and under our agreements they don't train on it either. Details are in our privacy policy.
Who else can reach my Vixi?
Nobody but you. Your Vixi and its memory are your own, kept apart from everyone else's. It accepts no inbound connections and can only be reached through our authenticated edge, from devices you've signed in.
What if I lose my phone?
Open Devices on any other signed-in device and revoke it. It's signed out within seconds, and its key can no longer approve anything.
How do I delete my data?
Remove saved logins and connections any time in the app, and make Vixi forget any memory. To delete your account during the beta, contact us from your account email. We'll erase your Vixi, its memory, your vault and the backups within 30 days.

Try Vixi with Manual approvals.

Manual is the default. Start free, no card needed.

Get VixiHow approvals work