Privacy Policy

Last updated: September 2026

For termai.sh and TermAI's web services, the data controller is Tapilot LLC (State of Wyoming, United States). If you use the TermAI mobile app distributed on a regional app store, that distribution may involve a separate local operating entity; in all cases you can reach us about any privacy matter at [email protected].

1. Information We Collect

TermAI collects the following information:

• Account information (email, display name)
• SSH connection details (encrypted)
• App usage and AI interaction data
• Device information for session management

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services (SSH, SFTP, AI assistant)
• Authenticate your identity and manage your account
• Synchronize your data across devices via cloud sync
• Process subscription payments through RevenueCat
• Monitor and improve app performance and stability
• Send you service-related notifications
• Respond to your support requests

3. Data Security

We take data security seriously:

• All SSH credentials are encrypted with Fernet
• Communication uses HTTPS/TLS
• JWT tokens for authentication
• No passwords stored in plaintext

4. Data Storage

• Account data and encrypted credentials are stored on our secure servers
• SSH connection details are encrypted at rest using Fernet symmetric encryption
• Local data (snippets, settings) is stored on your device using secure storage
• Cloud-synced data is transmitted over encrypted HTTPS connections
• We do not sell or rent your TermAI account data. Optional advertising on the public website is described in section 8.

5. Third-Party Services

TermAI integrates with the following third-party services:

• RevenueCat — subscription and payment processing
• Sentry (GlitchTip) — crash reporting and error monitoring (no personally identifiable information is collected)
• Google Sign-In — optional OAuth authentication
• Tailscale — optional VPN network connectivity
• AI Providers — AI assistant queries and included context are sent to AI providers through TermAI’s managed service or, where supported, your configured provider

Each third-party service is governed by its own privacy policy. We recommend reviewing their policies for details on how they handle your data.

6. Data Retention & Deletion

• We retain your account data for as long as your account is active
• You may delete your account at any time from the app settings, which permanently removes all associated data from our servers
• Audit logs (login/security events) are retained for up to 90 days for security purposes
• After account deletion, your data is permanently erased within 30 days
• Local data on your device is not affected by account deletion — you may clear it manually

7. Your Rights

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — update or correct inaccurate information
• Deletion — delete your account and all associated data
• Export — request a machine-readable export of your data
• Objection — object to certain processing of your data

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Website Analytics and Advertising

Our public website uses Cloudflare Web Analytics and Google Analytics, when enabled, to understand page visits and clicks on app download links. This website measurement is separate from the contents of your SSH sessions and the credentials you store in the TermAI app.

Selected public technical articles may display advertisements provided by Google AdSense. Where advertising is enabled, third-party vendors, including Google, may use cookies to serve ads based on your previous visits to this website or other websites. Google's advertising cookies enable Google and its partners to serve ads based on those visits. Ad requests may include device and browser information, IP address, page information and advertising identifiers. We do not include your SSH credentials, terminal contents or private AI conversations in website ad requests.

Where required, we ask for your consent through a consent management platform before using cookies or personal data for personalized advertising. You can decline or manage the purposes and vendors shown in that message. On pages displaying Google's consent message, the “Privacy and cookie settings” link lets you review or withdraw your choice. Declining does not prevent access to our articles; depending on your choices and location, ads may be limited or may not be shown.

You can also manage personalized advertising in Google My Ad Center, learn how Google uses information from partner sites, or review participating third-party vendors' opt-out choices at YourAdChoices. Browser settings can control cookies, although clearing them may also clear your saved consent choices.

9. Contact

For privacy-related inquiries, contact us at [email protected].

Related: Terms of Service · Security