{"slug": "termai-privacy-changed-low", "title": "TermAI — privacy changed (low)", "summary": "Tapilot LLC, the Wyoming-based data controller for TermAI, updated the TermAI privacy policy on November 8, 2026, adding a disclosure that cloud-backed SSH passwords, private keys and passphrases are encrypted at rest on the server with Fernet but that \"this is not end-to-end encryption.\" The revision also states that local snippets and settings may use application storage rather than hardware-backed key storage, and that AI assistant queries and included context are sent to AI providers through TermAI's managed service or a user-configured provider. The policy retains up to 90 days of login and security audit logs and erases account data within 30 days of deletion.", "body_md": "Privacy Policy\n\nRemoved\n\nLast updated: September 2026\n\nAdded\n\nLast updated: November 8, 2026\n\nFor termai.sh and TermAI's web services, the data controller is Tapilot LLC (State of Wyoming, United States). If you use the TermAI mobile app distributed on a regional app store, that distribution may involve a separate local operating entity; in all cases you can reach us about any privacy matter at privacy@termai.sh .\n1. Information We Collect\nTermAI collects the following information:\nAccount information (email, display name)\nSSH connection details (encrypted)\nApp usage and AI interaction data\nDevice information for session management\n2. How We Use Your Information\nWe use the information we collect to:\nProvide and maintain our services (SSH, SFTP, AI assistant)\nAuthenticate your identity and manage your account\nSynchronize your data across devices via cloud sync\nProcess subscription payments through RevenueCat\nMonitor and improve app performance and stability\nSend you service-related notifications\nRespond to your support requests\n3. Data Security\nWe take data security seriously:\n\nRemoved\n\nAll SSH credentials are encrypted with Fernet\n\nAdded\n\nCloud-backed SSH passwords, private keys and passphrases are encrypted at rest on the server with Fernet. The service decrypts them for authenticated retrieval; this is not end-to-end encryption.\n\nCommunication uses HTTPS/TLS\nJWT tokens for authentication\nNo passwords stored in plaintext\n4. Data Storage\nAccount data and encrypted credentials are stored on our secure servers\nSSH connection details are encrypted at rest using Fernet symmetric encryption\n\nRemoved\n\nLocal data (snippets, settings) is stored on your device using secure storage\n\nAdded\n\nLocal storage varies by feature and platform; snippets and settings may use application storage rather than hardware-backed key storage.\n\nCloud-synced data is transmitted over encrypted HTTPS connections\nWe do not sell or rent your TermAI account data. Optional advertising on the public website is described in section 8.\n5. Third-Party Services\nTermAI integrates with the following third-party services:\nRevenueCat - subscription and payment processing\nSentry (GlitchTip) - crash reporting and error monitoring (no personally identifiable information is collected)\nGoogle Sign-In - optional OAuth authentication\nTailscale - optional VPN network connectivity\nAI Providers - AI assistant queries and included context are sent to AI providers through TermAI's managed service or, where supported, your configured provider\nEach third-party service is governed by its own privacy policy. We recommend reviewing their policies for details on how they handle your data.\n6. Data Retention & Deletion\nWe retain your account data for as long as your account is active\nYou may delete your account at any time from the app settings, which permanently removes all associated data from our servers\nAudit logs (login/security events) are retained for up to 90 days for security purposes\nAfter account deletion, your data is permanently erased within 30 days\nLocal data on your device is not affected by account deletion - you may clear it manually\n7. Your Rights\nYou have the following rights regarding your personal data:\nAccess - request a copy of the data we hold about you\nCorrection - update or correct inaccurate information\nDeletion - delete your account and all associated data\nExport - request a machine-readable export of your data\nObjection - object to certain processing of your data\nTo exercise these rights, contact us at privacy@termai.sh . We will respond within 30 days.\nOur public website uses Cloudflare Web Analytics and Google Analytics, when enabled, to understand page visits and clicks on app download links. This website measurement is separate from the contents of your SSH sessions and the credentials you store in the TermAI app.\nSelected public technical articles may display advertisements provided by Google AdSense. Where advertising is enabled, third-party vendors, including Google, may use cookies to serve ads based on your previous visits to this website or other websites. Google's advertising cookies enable Google and its partners to serve ads based on those visits. Ad requests may include device and browser information, IP address, page information and advertising identifiers. We do not include your SSH credentials, terminal contents or private AI conversations in website ad requests.\nWhere required, we ask for your consent through a consent management platform before using cookies or personal data for personalized advertising. You can decline or manage the purposes and vendors shown in that message. On pages displaying Google's consent message, the \"Privacy and cookie settings\" link lets you review or withdraw your choice. Declining does not prevent access to our articles; depending on your choices and location, ads may be limited or may not be shown.\nYou can also manage personalized advertising in Google My Ad Center , learn how Google uses information from partner sites , or review participating third-party vendors' opt-out choices at YourAdChoices . Browser settings can control cookies, although clearing them may also clear your saved consent choices.\n9. Contact\nFor privacy-related inquiries, contact us at privacy@termai.sh .\nRelated: Terms of Service · Security", "url": "https://wpnews.pro/news/termai-privacy-changed-low", "canonical_source": "https://isittrainingonme.com/changes/2026-11-15T07-57-56-termai-privacy/", "published_at": "2026-11-15 07:57:56+00:00", "updated_at": "2026-11-15 08:51:35.063615+00:00", "lang": "en", "topics": ["ai-tools", "ai-products"], "entities": ["TermAI", "Tapilot LLC", "RevenueCat", "Sentry", "GlitchTip", "Google Sign-In", "Tailscale", "Cloudflare Web Analytics"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/termai-privacy-changed-low", "markdown": "https://wpnews.pro/news/termai-privacy-changed-low.md", "text": "https://wpnews.pro/news/termai-privacy-changed-low.txt", "jsonld": "https://wpnews.pro/news/termai-privacy-changed-low.jsonld"}}