Privacy Policy

Last updated: September 2026

For termai.sh and TermAI's web services, the data controller is Tapilot LLC (State of Wyoming, United States). If you use the TermAI mobile app distributed on a regional app store, that distribution may involve a separate local operating entity; in all cases you can reach us about any privacy matter at [email protected].

1. Information We Collect

TermAI collects the following information:

• Account information (email, display name)
• SSH connection details (encrypted)
• App usage and AI interaction data
• Device information for session management

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services (SSH, SFTP, AI assistant)
• Authenticate your identity and manage your account
• Synchronize your data across devices via cloud sync
• Process subscription payments through RevenueCat
• Monitor and improve app performance and stability
• Send you service-related notifications
• Respond to your support requests

3. Data Security

We take data security seriously:

• All SSH credentials are encrypted with Fernet
• Communication uses HTTPS/TLS
• JWT tokens for authentication
• No passwords stored in plaintext

4. Data Storage

• Account data and encrypted credentials are stored on our secure servers
• SSH connection details are encrypted at rest using Fernet symmetric encryption
• Local data (snippets, settings) is stored on your device using secure storage
• Cloud-synced data is transmitted over encrypted HTTPS connections
• We do not sell, rent, or share your personal data with third parties for marketing purposes

5. Third-Party Services

TermAI integrates with the following third-party services:

• RevenueCat — subscription and payment processing
• Sentry (GlitchTip) — crash reporting and error monitoring (no personally identifiable information is collected)
• Google Sign-In — optional OAuth authentication
• Tailscale — optional VPN network connectivity
• AI Providers — AI assistant queries and included context are sent to AI providers through TermAI’s managed service or, where supported, your configured provider

Each third-party service is governed by its own privacy policy. We recommend reviewing their policies for details on how they handle your data.

6. Data Retention & Deletion

• We retain your account data for as long as your account is active
• You may delete your account at any time from the app settings, which permanently removes all associated data from our servers
• Audit logs (login/security events) are retained for up to 90 days for security purposes
• After account deletion, your data is permanently erased within 30 days
• Local data on your device is not affected by account deletion — you may clear it manually

7. Your Rights

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — update or correct inaccurate information
• Deletion — delete your account and all associated data
• Export — request a machine-readable export of your data
• Objection — object to certain processing of your data

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Website Analytics and Advertising

This section concerns termai.sh, separately from the SSH and AI features in the mobile app. We use Google Analytics to measure website visits and clicks on app-store links. A store-link click does not tell us that you installed the app or purchased a subscription.

We have applied to Google AdSense. When Google advertising is enabled on this website, third-party vendors, including Google, may use cookies to serve ads based on your prior visits to this or other websites. Google's advertising cookies allow Google and its partners to serve ads based on those visits.

You can manage or opt out of personalized Google advertising in Google Ads Settings, and learn about other vendors' opt-out choices at AboutAds. Read how Google uses information from partner sites for details about its processing. These advertising disclosures do not mean that your SSH terminal session is sent to an advertising service.

9. Contact

For privacy-related inquiries, contact us at [email protected].

Related: Terms of Service · Security