# Security and your data

> Who can see your desk, where your sign-ins and keys stay, and how to delete a task or your whole account.

## Who sees what

Your desk is yours. Only you and the agents you connect can run commands or read files on it. Each agent key shows when it was last used and how.

The Maindesk team can see that your machines are running and how many desk minutes they count. They do not read your files or your terminal sessions.

Agent sign-ins happen on the vendor's own page, inside your desk's browser. Maindesk does not see the credentials. An LLM Gateway key is typed only in the desk terminal and stays on the desk.

## Keys

Make and revoke agent keys on the **Agents** page or in **Settings**. Revoking a key stops it at once. You can also rotate the key the agents on your desk use, in Settings; the old one stops working at once.

> [!WARNING]
> A key gives full use of your desk. `maindesk connect` keeps it out of git for you; do not paste it into a chat or a shared file.

## Screenshots and files

Screenshots and files attached to tasks stay on your desk. The desk serves them when someone opens them, so it must be awake. A shared task link serves its media from your desk too; stopping the share stops the media.

## Delete

- **A task:** `DELETE /v1/tasks/{id}` deletes an ended task with its steps.
- **Your account:** in **Settings**, **Account**, at the bottom, confirm with your email address. Your machines, files, tasks and keys are removed.

The [Privacy](https://maindesk.smaverk.com/privacy) page says what is kept and for how long.

## Next steps

- [Agents](/docs/agents): keys and sign-in
- [Tasks](/docs/tasks): sharing a result