Privacy Policy

1. Who we are

TerminalSync is a desktop application that syncs the state of your terminals, AI configuration files, and secrets across your computers through the storage provider of your choice (Google Drive, iCloud, Dropbox).

Operated by TerminalSync. Legal contact: legal@terminalsync.ai.

2. Data we collect

We collect only the minimum data necessary to operate the service:

• User account: email, full name (if provided), avatar (if provided via Google or Apple OAuth), time zone. Hosted on Supabase.
• Subscription data: billing status, plan, last 4 digits of payment method. Processed by Stripe.
• Minimal operational logs: sign-in timestamps, sign-in IP (anonymized after 30 days), non-fatal errors (Vercel Speed Insights / Vercel Analytics).
• Affiliate data: if you arrived via an affiliate link, a Rewardful cookie records the referrer.

3. Data we DO NOT collect

The content of your terminals, files, secrets, and AI conversations NEVER touches our servers. It goes straight from your Mac to the cloud provider you choose, under your own account. Your secrets, credentials, memory and AI conversations are additionally encrypted locally with AES-256-GCM before upload —even if we wanted to, we couldn't read them. The master key lives on your Mac, protected by system permissions and by your secret phrase, and never leaves your devices unencrypted.

Your project files are stored in your own cloud in their original format — so you can open them directly from Drive whenever you want. They stay under your Google account's control, not ours: we cannot access them.

4. What we use your data for

• Authenticating you and keeping your session active.
• Processing payments and issuing invoices (via Stripe).
• Notifying you about product updates and security alerts.
• Improving site performance (aggregated Speed Insights data, not individual user tracking).

5. Who we share your data with

We share data with the following providers strictly to operate the service:

• Supabase: account database hosting (EU/US).
• Stripe: payment processing (US).
• Vercel: website + API hosting (global Edge Network).
• Resend: transactional email delivery (US).
• Rewardful: affiliate tracking (first-party cookie).
• n8n (automation, on a server we manage): processes the messages you type into the support chat, your email when you ask to be contacted, and the content of notifications you opt into.
• Groq: voice transcription — only if you use voice dictation, your microphone audio is sent for transcription (US).

We don't sell your data. We never have. We never will.

6. Your rights

Under GDPR (EU), CCPA (California), and equivalent laws, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your account and associated data.
• Portability: export your data in JSON format.
• Objection: opt out of marketing emails at any time.

To exercise any of these rights, email privacy@terminalsync.ai. We respond within 30 calendar days.

7. Retention

We keep your account data while your account is active. If you cancel, we delete your personal data within 30 days, except for data we are legally required to retain (tax records: 7 years).

8. Cookies

We use cookies strictly necessary for authentication and preferences (language, theme). If you arrived via an affiliate link, a Rewardful cookie records the referrer for 60 days. We don't use ad cookies or cross-site tracking.

9. Changes to this policy

If we materially modify this policy, we notify you by email at least 30 days before the change takes effect. For minor changes (typographical corrections, clarifications), we update the "last updated" date above.

10. Contact

Questions, concerns, or requests? Email privacy@terminalsync.ai.