gabut.
Updated October 8, 2026
gabut connects your AI to a Windows PC. The information on that screen can become part of the task and its evidence.
The hub stores account identifiers, usernames, password hashes, enrolled device information, and access permissions. Account passwords are hashed with bcrypt. Scoped AI token secrets are stored as hashes, along with their permissions, expiry, and revocation state.
The hub stores AI session information, proposed action payloads (including text to type), approval decisions, action results, screenshot evidence, and audit records. Screen content can include personal or business information visible in other apps.
MCP gives your connected AI agent access to task information and screenshots. When you use Claude, this information can be sent to Anthropic by your AI client. Review your client's settings and the provider's privacy terms before connecting it.
The workspace uses browser storage for authentication state and preferences. Treat a browser signed in to gabut as access to your account. Sign out when finished on a shared computer.
Account and device information supports sign-in and authorization. Task data supports supervised actions, result review, and investigation of failures. Audit records help review access and decisions.
There is currently no automatic deletion period for AI action and screenshot evidence. Token expiry or revocation stops access; it does not erase stored evidence. Start with test data and keep unrelated sensitive information off the connected screen.
Send privacy questions or requests to delete account or task information to hello@gabut.work. Include enough information to identify the account or session, but do not email passwords, tokens, or sensitive screenshots. A request does not itself delete data; its scope and any limits need to be reviewed.
As this early access product changes, this page may be updated to describe its data handling. Check the date above before starting a new workflow.