Soundpost runs entirely on your machine. It has no account system, no server, no network calls, and no telemetry. Your configuration lives locally on disk.

• Windows audio APIs (Core Audio / WASAPI) to enumerate and control devices, sessions, and default endpoints.
• Some of these APIs are undocumented (IPolicyConfig, IAudioPolicyConfig). Soundpost uses them the same way Windows' own Settings UI does. Interop code is isolated in Soundpost.Core.Audio and commented for auditability.
• Local config files under %AppData%\Soundpost (profiles, rules, settings, logs).

Soundpost does not capture audio content, record microphones, read other apps' data, or transmit anything off your device.

If you discover a security issue, please do not open a public issue. Instead, open a private security advisory via the repository's Security tab, or contact the maintainer directly. We'll acknowledge within a few days and work with you on a fix and coordinated disclosure.

During early development, only the latest main receives fixes. A supported release policy will be published with the first tagged release.