Privacy Policy

Last updated: September 2026

For termai.sh and TermAI's web services, the data controller is Tapilot LLC (State of Wyoming, United States). If you use the TermAI mobile app distributed on a regional app store, that distribution may involve a separate local operating entity; in all cases you can reach us about any privacy matter at privacy@termai.sh.

1. Information We Collect

TermAI collects the following information:

• Account information (email, display name)
• SSH connection details (encrypted)
• App usage and AI interaction data
• Device information for session management

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services (SSH, SFTP, AI assistant)
• Authenticate your identity and manage your account
• Synchronize your data across devices via cloud sync
• Process subscription payments through RevenueCat
• Monitor and improve app performance and stability
• Send you service-related notifications
• Respond to your support requests

3. Data Security

We take data security seriously:

• All SSH credentials are encrypted with Fernet
• Communication uses HTTPS/TLS
• JWT tokens for authentication
• No passwords stored in plaintext

4. Data Storage

• Account data and encrypted credentials are stored on our secure servers
• SSH connection details are encrypted at rest using Fernet symmetric encryption
• Local data (snippets, settings) is stored on your device using secure storage
• Cloud-synced data is transmitted over encrypted HTTPS connections
• We do not sell, rent, or share your personal data with third parties for marketing purposes

5. Third-Party Services

TermAI integrates with the following third-party services:

• RevenueCat — subscription and payment processing
• Sentry (GlitchTip) — crash reporting and error monitoring (no personally identifiable information is collected)
• Google Sign-In — optional OAuth authentication
• Tailscale — optional VPN network connectivity
• AI Providers — AI assistant queries and included context are sent to AI providers through TermAI’s managed service or, where supported, your configured provider

Each third-party service is governed by its own privacy policy. We recommend reviewing their policies for details on how they handle your data.

6. Data Retention & Deletion

• We retain your account data for as long as your account is active
• You may delete your account at any time from the app settings, which permanently removes all associated data from our servers
• Audit logs (login/security events) are retained for up to 90 days for security purposes
• After account deletion, your data is permanently erased within 30 days
• Local data on your device is not affected by account deletion — you may clear it manually

7. Your Rights

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — update or correct inaccurate information
• Deletion — delete your account and all associated data
• Export — request a machine-readable export of your data
• Objection — object to certain processing of your data

To exercise these rights, contact us at privacy@termai.sh. We will respond within 30 days.

8. Contact

For privacy-related inquiries, contact us at privacy@termai.sh.

Related: Terms of Service · Security