AI sharing

Selected profile sections

Choose sections in About me or Connect AI. Changes to these sections will also be shared. New and renamed sections start private. Existing taste connections do not receive profile access unless you add it.

Browser access

WebMCP tools can read only sections you approve for the current tab session. Access ends when you reload, sign out, change accounts, or select Stop sharing. A browser tool is not a verified named remote client.

Read the text before sharing

Anything you write in an approved section is shared as written. Sensitive facts are not removed automatically. Suggestions need separate permission and your approval. Preferences do not authorize purchases, messages, or publication.

You approve the copy

An AI tool never gets your full vault. You select domains, signals, boundaries, context, and tool permissions. You can preview the exact copy first.

Each connection is separate

Each AI connection has its own key, scope, token, and revocation control. Pausing or revoking one connection does not affect another.

The copy can be old

The gateway serves the last approved copy when no unlocked browser has sent a newer one. The response includes its update time.

Review or allow saves

Suggestions need review by default. You can separately allow a named remote connection to save selected sections or taste ratings. Authorized saves run when PF is unlocked and online, including on the next unlock. Changes that conflict with newer data stop for review. You can cancel a queued save or stop the connection.

PF cannot verify a confirmation inside an AI chat. Grant save access only to connections you trust. New sections stay private until you approve sharing them. Queued content is encrypted at rest and expires after 30 days. Status records contain no profile text.

Group approval

Every current group member must inspect and approve a group copy before it becomes an AI connection. A membership change revokes that connection.

Excluded from taste exports

Taste exports do not add email, account IDs, raw notes, imported source fields, private messages, protected domains, or unapproved social data. This filter does not inspect facts you write in approved profile sections.