# Sync and privacy URL: /documentation/account/sync-and-privacy Sync is part of the Connected and Pro plans, which are not open for purchase yet. Free Local never syncs. ## What it is [#what-it-is] Sync copies the project records the plugin keeps on your machine to your Strata19 account, so they appear in the hosted web workspace. It is off until you connect a project, and it is per project. ## How it works [#how-it-works] After you connect a project, changes to its records sync shortly after they happen, or immediately when you ask the plugin to sync. The plugin checks each outgoing item locally before sending and refuses items that look like source code; the server checks again and rejects what the plugin should not have sent. Items refused either way are counted and reported rather than dropped silently. ### What syncs [#what-syncs] For a connected project, the plugin syncs project records: * Specifications and the specbook * Work items and their history * Library entries * Findings snapshots: type, location by path and line, severity, status * Checkpoint metadata: identifiers, times, labels * Activity history ## Boundaries [#boundaries] ### What is designed not to leave your machine [#what-is-designed-not-to-leave-your-machine] Your source code. The plugin is built not to send it, and the server rejects sync requests that carry source-bearing fields. These checks look at structure and content patterns, so they are safeguards and not a guarantee. They can miss code or secrets that you type or paste into a specification, library entry, work item or prompt, and they can occasionally refuse legitimate text. Do not put source code or credentials in those fields. ### Managed compute [#managed-compute] Managed model calls send the text of the request built from your project records to Strata19 and the model provider. See [Managed compute](/documentation/account/managed-compute). ### Control [#control] You can disconnect a project, export your data, or delete your account. After a subscription ends, synced data is kept for 90 days and then deleted. The full policy is in the Privacy Policy and the list of providers in Subprocessors, both linked from the site footer once published. ## Related [#related] * [Connect a project](/documentation/account/connect-a-project) * [Managed compute](/documentation/account/managed-compute) * [Billing and cancel](/documentation/account/billing-and-cancel)