Legal

Privacy Policy

Last updated: March 2026


1. Information We Collect

We collect information you provide when creating an account (email address), server connection data (hostname, IP address), terminal session data, container management logs, file access logs, AI chat history, and API usage data. We also collect authentication events and audit log entries for security purposes.

2. How We Use Information

We use your information to provide and maintain the Service, manage server connections, process terminal sessions, authenticate devices, detect and prevent unauthorized access, and improve our platform. We do not use your data for advertising.

3. Data Encryption

Server credentials and authentication tokens are encrypted at rest. JWT tokens are signed with HS256. All data in transit is encrypted via TLS 1.3. PIN codes are hashed and never stored in plaintext.

4. Server Data

Terminal session content is ephemeral and not permanently stored. File operations are logged for audit purposes. Docker container management actions are logged. AI chat sessions are stored for session continuity.

5. Data Retention

Account data is retained for the lifetime of your account. Audit logs are retained for a minimum of 7 years as required by applicable regulations. Upon account termination, personal data is deleted within 30 days, except where retention is required by law.

6. Third Parties

We share data with infrastructure providers as necessary. We do not sell your personal data. We use industry-standard subprocessors for hosting and monitoring.

7. Your Rights

You have the right to access, correct, and delete your personal data. You can export your data at any time. To exercise these rights, contact us at [email protected]. We will respond to requests within 30 days.

8. Cookies & Analytics

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. We may use privacy-respecting analytics to understand platform usage patterns. You can disable non-essential cookies in your browser settings.

9. International Transfers

Your data may be processed in the United Kingdom and European Economic Area. We ensure appropriate safeguards are in place for any international data transfers, including Standard Contractual Clauses where required by GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at [email protected]. For security-related concerns, see our Security page or contact [email protected].