TermAI — privacy changed (low)

Tapilot LLC, the Wyoming-based data controller for TermAI, updated the TermAI privacy policy on November 8, 2026, adding a disclosure that cloud-backed SSH passwords, private keys and passphrases are encrypted at rest on the server with Fernet but that "this is not end-to-end encryption." The revision also states that local snippets and settings may use application storage rather than hardware-backed key storage, and that AI assistant queries and included context are sent to AI providers through TermAI's managed service or a user-configured provider. The policy retains up to 90 days of login and security audit logs and erases account data within 30 days of deletion.

Privacy Policy Removed Last updated: September 2026 Added Last updated: November 8, 2026 For termai.sh and TermAI's web services, the data controller is Tapilot LLC State of Wyoming, United States . If you use the TermAI mobile app distributed on a regional app store, that distribution may involve a separate local operating entity; in all cases you can reach us about any privacy matter at privacy@termai.sh . 1. Information We Collect TermAI collects the following information: Account information email, display name SSH connection details encrypted App usage and AI interaction data Device information for session management 2. How We Use Your Information We use the information we collect to: Provide and maintain our services SSH, SFTP, AI assistant Authenticate your identity and manage your account Synchronize your data across devices via cloud sync Process subscription payments through RevenueCat Monitor and improve app performance and stability Send you service-related notifications Respond to your support requests 3. Data Security We take data security seriously: Removed All SSH credentials are encrypted with Fernet Added Cloud-backed SSH passwords, private keys and passphrases are encrypted at rest on the server with Fernet. The service decrypts them for authenticated retrieval; this is not end-to-end encryption. Communication uses HTTPS/TLS JWT tokens for authentication No passwords stored in plaintext 4. Data Storage Account data and encrypted credentials are stored on our secure servers SSH connection details are encrypted at rest using Fernet symmetric encryption Removed Local data snippets, settings is stored on your device using secure storage Added Local storage varies by feature and platform; snippets and settings may use application storage rather than hardware-backed key storage. Cloud-synced data is transmitted over encrypted HTTPS connections We do not sell or rent your TermAI account data. Optional advertising on the public website is described in section 8. 5. Third-Party Services TermAI integrates with the following third-party services: RevenueCat - subscription and payment processing Sentry GlitchTip - crash reporting and error monitoring no personally identifiable information is collected Google Sign-In - optional OAuth authentication Tailscale - optional VPN network connectivity AI Providers - AI assistant queries and included context are sent to AI providers through TermAI's managed service or, where supported, your configured provider Each third-party service is governed by its own privacy policy. We recommend reviewing their policies for details on how they handle your data. 6. Data Retention & Deletion We retain your account data for as long as your account is active You may delete your account at any time from the app settings, which permanently removes all associated data from our servers Audit logs login/security events are retained for up to 90 days for security purposes After account deletion, your data is permanently erased within 30 days Local data on your device is not affected by account deletion - you may clear it manually 7. Your Rights You have the following rights regarding your personal data: Access - request a copy of the data we hold about you Correction - update or correct inaccurate information Deletion - delete your account and all associated data Export - request a machine-readable export of your data Objection - object to certain processing of your data To exercise these rights, contact us at privacy@termai.sh . We will respond within 30 days. Our public website uses Cloudflare Web Analytics and Google Analytics, when enabled, to understand page visits and clicks on app download links. This website measurement is separate from the contents of your SSH sessions and the credentials you store in the TermAI app. Selected public technical articles may display advertisements provided by Google AdSense. Where advertising is enabled, third-party vendors, including Google, may use cookies to serve ads based on your previous visits to this website or other websites. Google's advertising cookies enable Google and its partners to serve ads based on those visits. Ad requests may include device and browser information, IP address, page information and advertising identifiers. We do not include your SSH credentials, terminal contents or private AI conversations in website ad requests. Where required, we ask for your consent through a consent management platform before using cookies or personal data for personalized advertising. You can decline or manage the purposes and vendors shown in that message. On pages displaying Google's consent message, the "Privacy and cookie settings" link lets you review or withdraw your choice. Declining does not prevent access to our articles; depending on your choices and location, ads may be limited or may not be shown. You can also manage personalized advertising in Google My Ad Center , learn how Google uses information from partner sites , or review participating third-party vendors' opt-out choices at YourAdChoices . Browser settings can control cookies, although clearing them may also clear your saved consent choices. 9. Contact For privacy-related inquiries, contact us at privacy@termai.sh . Related: Terms of Service · Security