When ComfyUI's commercial Terms landed in May, our read was that the pixels are yours but the recipe isn't: the no-training pledge protected your Input and Output, while a carve-out reserved "workflow structures, and node configurations" as metadata Comfy could use.
This week we discovered a new Desktop Privacy Policy, effective June 3, which is the other half of that line, and it is genuinely protective. On your own machine, even with telemetry on, your workflows, prompts, outputs, and model weights never leave the device, which is what makes the Cloud boundary stark: the recipe stays yours right up until you sign in and run it on the Comfy Products, where workflow structure is the metadata the Terms reserve.
In human terms: A VFX freelancer spent two years on her workstation building texture-synthesis workflows for ad clients: the node sequence she refined by trial and error, the sampler choices, the ControlNet chained to her in-painting pass. That craft lives in JSON files on her drive, and the Desktop policy keeps it there, since even with telemetry on the workflow content is not transmitted. Then a brief requires the job to run on hosted infrastructure, so she clicks "Launch Cloud." The workflows transfer cleanly, and her workflow structure, the thing she actually got paid for understanding, is now metadata Comfy is permitted to use to improve its products. The pixels she generates are protected. The recipe that produced them is not.
Why this matters: ComfyUI sits underneath a large share of professional VFX, ad-studio, and game-studio pipelines, which is why the boundary is worth tracing exactly. Outputs commoditize and prompts are noisy, while a workflow encodes expertise: which nodes chain to which, which sampler an artist preferred, an order of operations worked out over months. The Desktop policy confirms that expertise stays local on your own machine. The Cloud carve-out is where it becomes product-improvement input, with no cap, no anonymization requirement, and no time window, while the no-training pledge covers only Input and Output. The contract never says Comfy is building a workflow-savvy agent on user behavior. It does reserve the ability to do so… Below for more…