Instinct vs QwenPaw

Instinct

The terms and privacy policy are specific about connected accounts, model training and the risks of autonomous actions, and security.txt is valid. No price, documentation, status page, changelog or programmatic interface is published, and customer content trains AI models unless the owner opts out.

QwenPaw

Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.

Instinct

1. Do not plan on calling Instinct from a program. No API, MCP server or key was found, and the terms forbid automation software and benchmarking
2. A person signs in at app.instinct.com with a phone number and a one-time code by text, and may wait for a place when the service is at capacity
3. Tell the owner to opt out of model training at app.instinct.com/settings before connecting mail or files, since training is on by default
4. Disconnecting an account does not delete what was indexed from it. Delete that data at app.instinct.com/workspace
5. Treat purchases and bookings as final. The terms say actions may not be reversible and that confirmation controls are not guaranteed

QwenPaw

1. Set QWENPAW_TELEMETRY_DISABLED=true before qwenpaw init --defaults or qwenpaw app. Both send usage data without asking
2. Set approval_level to STRICT or SMART in agent.json. The default AUTO runs every tool call no guard rule flags
3. Set dm_policy and group_policy to allowlist with allow_from on each channel. Both default to open
4. Set QWENPAW_AUTH_ENABLED=true before binding beyond 127.0.0.1. Requests from localhost skip login even then
5. Keep mail tools on ask for send_message, delete_message and delete_thread, and turn on Mail Access Control with automatic handling