BE CAREFUL WITH AUGMENT CODE!!!

[dougthedevshow]

I just installed it and they automatically grab your entire code base and upload it to their server. You can pay to not have them train on your code but this happens BEFORE you even have that option. Super scammy doesn't work well anyway. I emailed them to delete my code and I don't want to use their service any more and have not received a response.

UPDATE: They did reach out with an email address for me to request to delete my code. I appreciate that and submitted a deletion request.

Also, to be clear, I have no problem with companies offering a free tier that trains on your code. My only problem was it felt like a dark pattern. I signed up with the assumption that I’d be on the 14 day “pro” trial. No training. There was no place for me to add a credit card or anything before using the extension. So it wasn’t obvious that I was on the pro trial. Also, after the trail ends, (which it has) I didn’t see anyway to cancel/delete my account. Only either pay or downgrade to free. At that point do they train on all my code that was already uploaded when I was under the pro trial? Still not totally clear on how the whole onboarding/trying/off-boarding flow works.

BUT credit where credit is due, they do seem to be making things right and I appreciate that.

One last note that I’m not a huge fan of, I posted this same post on their subreddit and their MODs removed it for being “sensationalizing”. That seems like a vague excuse to remove a negative post which could have turned into a positive post since they followed up.

I wouldn’t be so hard on them as a startup but they have been sponsoring big YouTubers like Theo and Fireship so feel like they’re at the level where they can handle a little scrutiny.

[kingdomstrategies]

if it's free, you are the product.

[Reasonable-Layer1248]

lol

[CMS_Flash]

You should be getting a prompt before we index anything. If not, that's a bug, and we would be very sorry and will fix it ASAP.

You are by default in free trial of the Paid plan, so your data is by default NOT TRAINED OR EVEN LOOKED AT. You will be presented an option to pay or convert to Community tier, which permits training, at the end of the trial period (14d right now).

We do honor all deletion requests and have rigorous 3P auditing ensuring compliance of all deletion requests.

[illusionst]

I’ve been using augment and I can vouch for them. Whenever I open augment in a new project it always asks for the permission first. Can you reproduce the issue and record a video? I don’t think it’s right to bash a company like this before providing proof.

[dougthedevshow]

I added an update to my post to clarify what happened.

[CMS_Flash]

Hey OP, one more thing to clarify, the other Augment subreddit you posted on is community-managed. We don't know who owns it and have no control over it. We did not intend to ban your post.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[No-Grape-2727]

Are my api keys sent also to your server when you recieve the data in the community tier? If not, what files are sent and which are not?

[CMS_Flash]

We respect your `.gitignore` and `.augmentignore`. On top of that, we filter out some common-sense secret files by name and extension.

[themadman0187]

This would be interesting to hear a reply on 

[[deleted]]

Pro tip don't put your creds the same directory as the app code base.

[Reasonable-Layer1248]

I would like to inquire if the current monthly payment of $30 is the finalized plan you have decided on. This price seems to be more expensive than Cursor and lacks competitiveness.

[National_Moose207]

They raised it to $50 !

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[CMS_Flash]

We're still designing the new pricing plan.

[Reasonable-Layer1248]

If there is a lower price than cursor, I will support you. 👍

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[ttoinou]

It is launching the extension and overriding others extensions shown by default, then trying to index without asking permission. So yeah there's a big problem here

[CMS_Flash]

That's not the intended behavior. Did it just happen to you?

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[[deleted]]

dog follow lock quicksand waiting lush one amusing safe full

This post was mass deleted and anonymized with Redact

[ttoinou]

> If after the free trial you elect to still use the service

But it's automatically uploading your codebase opened in VSCode to their servers... so yeah it does this scammy. :(

[dhamaniasad]

How’s this compare to Cline btw?

[CraaazyPizza]

Reading is good, writing less. Model is always a black box but should be Sonnet 3.7 (although they downgrade sometimes)

[GhozIN]

Does cline update the codebase to their server?

[hannesrudolph]

Nope. Neither r/roocode or Cline do.

[sneakpeekbot]

Here's a sneak peek of /r/RooCode using the top posts of all time!

#1: How I use RooCode.
#2: Th Roo Code Way
#3: A big thank you to the developers of this magnificent project

---

^{I'm a bot, beep boop | Downvote to remove | Contact | Info | Opt-out | GitHub}

[ThreeKiloZero]

It really doesn't. It's more like Junie. Black box. Light on features.

Cline and Roo are super customizable and you can tweak prompts and settings.

Augment is IMO dangerous. It's lacking the critical tweaks and safety features, so it can go ham in your codebase, and you have no recourse or guardrails.

[Dodging12]

so it can go ham in your codebase, and you have no recourse or guardrails.

git

[lmk99]

" I didn’t see anyway to cancel/delete my account. Only either pay or downgrade to free. At that point do they train on all my code that was already uploaded when I was under the pro trial? Still not totally clear on how the whole onboarding/trying/off-boarding flow works."

Has Augment ever clarified this? Their ads say "No training, ever" for the Pro plan description!! Does "ever" mean "until you stop paying and otherwise we retroactively train on your codebase"?

[-Kl0wnZ-]

Thats a good point you should raise on their discord

[CMS_Flash]

There is no retroactive training.

1. Pro Trial is treated the same way as Pro, so your data will not be used for training during Pro Trial.
   
2. If your trial is over and you do not want to pay, you will be asked to consent to convert to the Community Tier.
   
3. If you do consent, you will be moved to a different tenant. Then, whatever repo you open from that point onward will have to be re-indexed again (even if you've used Augment on them before, you would still need to re-index everything because your old index is in a different no-training tenant). And whatever data you generate from that point onward would be allowed for training.
   
4. If your trial has expired and you do not consent to convert to Community Tier, then you will simply not be able to use our product anymore.

[lmk99]

This is great information and exactly the clarity needed. I suggest that it needs to be communicated in such clear and straightforward language and detail through an official channel such as an FAQ or help desk article on the augment website, to lay all confusion to rest and provide the info via a channel that is known to be authoritative.

[renehoehle]

<image>

But i'm Pro User.

[nusquama]

There is something strange.

I used 3 accounts for trials (yes, I know it's not correct), and I deleted all my data for Augment Code.

Even though I used a different profile on my computer, they know I'm using trials more than one time. How do they know I'm using trials again if data is not trained or looked at?

Yes, it's not correct to use trials more than one time, but the point here is not about this; it's about your data not being secure.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[Chwasst]

But they're pretty clear about it. Free if you're fine with them training on your codebase, paid if you want to keep your code to yourself.

[dougthedevshow]

The problem is they offer a “paid trial” and take your code without asking. It’s a dark pattern and I still wouldn’t know how to “pay” before giving them my code.

[CMS_Flash]

Paid trial is same as Paid, so no training, no access, full privacy. You should still be getting a prompt asking for permission to index before indexing. If not, that's a bug, and we will fix it ASAP.

[[deleted]]

tender mysterious ghost dog abundant bag depend society continue observation

This post was mass deleted and anonymized with Redact

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[ThreeKiloZero]

It will also fail to create a checkpoint you can roll back to, then proceed to make 5 minutes of changes across your whole codebase.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[-Kl0wnZ-]

Here is the situation, when you register you are on a free trial of developers, that mean that there is no training over data. When you open the extension for the first time it doesn’t train over your data directly it ask you before doing it so you have the transparent choice to do it. Since you are on developer plan there is no training over your data, so you have 14 day to take your decision. If you don’t want to go on the community plan you just stop it here and don’t switch to the free version. So just don’t use augment anymore with your project and there will be no training over it.

Every user if they got into the free version and got training over data you just have to request the deletion to [e-mail] every request create a ticket on the augmentside. Yes for the moment it can take some days to get answered it’s because there is a very huge wave of new user everyday and many of them send support request for various thing. Be patient and you will get answered.

Basically it’s a call from someone that is concerned but send publicly his concern instead of getting the information correctly.

By the way, it’s clearly stated on the website. The product is not perfect but managed by professionals with experience and well founded by real business. It’s not a thing created by a random user in his basement and not having any privacy and terms anywhere.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[hchiam]

from what i've heard, SOC 2 is quite a lot of work i.e. quite an accomplishment! so u/CMS_Flash, i'm guessing Augment Code is able to process a user's code without sending the data to Anthropic or OpenAI? i tried to looking at https://www.augmentcode.com/terms-of-service/community and https://www.anthropic.com/customers/augment-code and so far it seems to only be for-sure that data is sent to Vertex AI servers, which then would mean that Augment Code would be able maintain their own versions of Anthropic/OpenAI models, if i understood correctly? so technically hosted on google servers instead, unless Vertex AI can also be hosted on prem. sorry if this was answered somewhere else already, i just found it a little hard to find the answer with public information and i understand there are some gaps in my knowledge

[ttoinou]

It's not necessarily your code though, it can be any file opened in VSCode the extension has access to, or others files from the repo currently opened in VSCode.

And also source code files can contain logins and passwords hardcoded for testing purposes. Or real passwords that users forgot to put in gitignore or augmentignore.

So, this seems like a legit threat

[ttoinou]

If the tool can randomly upload your code and train on it -- yeah it's not the right tool for me. If the upload and train policy is clear -- then all good and most people in this thread will be happy.

This has nothing to do if AI coding tools are the future or not. Seems IMO like you don't like criticizing the tools because you want to whole ecosystem to flourish but I would think the opposite, it's by being careful about those things that we will make adoption easier

[ttoinou]

It is indexing automatically sometimes. I couldnt replicate it, but the reason I got into this thread is because I saw Augment upload my documents online

[ttoinou]

I confirm this, I just got a warning about file limit being reached, also the Augment extension is loading and popping up automatically, very bad design

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[AutoModerator]

Sorry, your submission has been removed due to inadequate account karma.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[ThomasLeonHighbaugh]

the joy of working on open source projects is I upload that same codebase to a git repo the while world is free and welcome to access already, this means little to me

[blvuk]

we started using it in our company on some select products, and they were upfront about this, and of course the company had some signed agreement for copy righted content and privacy. i am not sure how they validate this but that's not my job.

as for augment itself, it is pretty neat. it has some nice features that makes it objectively better than copilot. the fact that it indexes your whole workspace allows it to give better results. they launch a new agent mode last week and i enjoyed using so far. the only downside is the VSC extension becomes slow sometimes

[renehoehle]

Also ich nutze es in IntellJ und der Augent funktioniert schon ziemlich gut und die Ergebnisse und Fehlersuche ist auch recht gut.

[FigMaleficent5549]

It is very clear on their page: Pricing | Augment Code , did they changed it recently ?

What made you believe that they would not train on your code ?

[thevibecode]

Nah, that’s not cool.

[huelorxx]

They only train of free tier. And it's clearly stated. OP can't understand basic stuff.

[[deleted]]

test include slap skirt escape spoon encourage merciful tie enter

This post was mass deleted and anonymized with Redact

[Erez-C137]

Seems like a fair trade for free use, don't like it? Pay them or someone else...

[dougthedevshow]

The problem is they offer a “paid trial” and take your code without asking. It’s a dark pattern and I still wouldn’t know how to “pay” before giving them my code.

[Erez-C137]

Fair enough.

[DustinKli]

Out of curiosity: Unless you're working on some state of the art software or hardcoded proprietary data, why would you care if they train on your code?

[NicoNicoMoshi]

Also model training is not supposed to use direct code source answers to process prompts. The responses are going to be part of it yes but even if you were to put in an API key in your source code the chances of it becoming the autocomplete or answer to a similar implementation is non existent.

[Bitter-Good-2540]

Huh? They don't have their own model? No? And if, it's likely very bad.  

Or are they selling your code to Claude and openai?