Privacy Policy

Teminops Corporation ("TEMINOPS", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the TEMINOPS desktop application and the teminops.com web portal (collectively, the "Service"). By using the Service you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account & Registration Data (collected by our web portal)

• Identity: Name, email address, and password (bcrypt-hashed; we never store plaintext passwords).
• Authentication: If you use Google OAuth, we receive your name, email, and Google account identifier.
• Subscription & Billing: Stripe customer ID, subscription plan, billing period, and payment status. We do not store full credit card numbers; Stripe processes and stores payment instrument data subject to Stripe's own privacy policy.
• Device Information: A per-device unique key (dk_ + 32 hex characters), device name, operating system, and registration timestamp, stored when you activate the application on a device.
• License Data: Issued license key (Ed25519-signed), plan type, and device limit.

1.2 Application Usage Data (collected locally on your device, not transmitted to TEMINOPS)

• SSH host connection details (hostname, port, username, authentication credentials, connection name, description, host group tags).
• AI provider API keys (OpenAI, Anthropic, or others you configure).
• Terminal settings, theme preferences, and AI Copilot settings.
• Chat and agent session history.
• Captured terminal logs (if the Log Capture feature is enabled).
• Credential vault entries (saved server credentials).

All of the above is stored in an AES-256-CBC encrypted database on your local device. Teminops Corporation cannot access this data.

1.3 Support & Communications

When you contact our support team, we collect the content of your message, your email address, and any information you voluntarily provide to help resolve your issue.

1.4 Automatically Collected Data (portal & API)

• Server logs: IP address, browser/OS, referrer URL, pages visited, and timestamps. Logs are retained for up to 90 days for security and debugging purposes.
• License validation requests: timestamp, device key hash, and plan status. No SSH or terminal content is included.

2. SSH Session Data

TEMINOPS establishes SSH connections directly between your device and your remote servers. We do not route, proxy, record, or store SSH session traffic on our infrastructure. The commands you run and the output you receive are never transmitted to TEMINOPS.

The optional Session Sharing feature uses WebRTC peer-to-peer technology. TEMINOPS may relay WebRTC signalling messages (SDP offers/answers and ICE candidates) through our signalling server solely to help peers establish a direct connection. Terminal output is then streamed between peers directly; TEMINOPS does not intercept or store this stream.

3. AI Copilot & API Key Handling

AI Copilot uses a Bring-Your-Own-Key (BYOK) model:

• Your AI provider API key (OpenAI, Anthropic, etc.) is entered within the TEMINOPS desktop application.
• The key is stored exclusively in the AES-256-CBC encrypted local database on your device.
• Your API key is never transmitted to TEMINOPS servers.
• When you use AI Copilot, queries (terminal context, chat messages) are sent directly from your device to your configured AI provider, using your key. TEMINOPS does not see these queries or responses.
• You are responsible for managing, rotating, and revoking your API keys directly with your AI provider.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your account and subscription.
• Issue and validate license keys and enforce device limits.
• Process payments through Stripe.
• Send transactional emails (account confirmation, subscription receipts, license key delivery, password reset).
• Respond to support requests.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.
• Improve the Service (using aggregate, anonymised analytics only).

We do not sell your personal data. We do not use your data for advertising.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: To provide the Service you have subscribed to (account management, license issuance, billing).
• Legitimate interests: Security monitoring, fraud prevention, and improving the Service.
• Legal obligation: Where we are required to retain or disclose data under applicable law.
• Consent: For optional communications such as product newsletters (you can withdraw consent at any time).

6. Data Sharing & Disclosure

We share your data only in the following limited circumstances:

• Stripe: Payment processing. Stripe acts as an independent data controller for payment data.
• Email service provider: Used solely to deliver transactional emails on our behalf.
• Legal process: We may disclose data if required by law, regulation, court order, or to protect the rights and safety of TEMINOPS or others.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity, subject to equivalent privacy protections.

We do not share your data with analytics companies, advertising networks, or data brokers.

7. Data Retention

• Account data: Retained for the duration of your account plus up to 90 days after deletion, to allow dispute resolution and fraud prevention.
• Device records: Retained while your account is active or until you deregister a device.
• Payment records: Retained for 7 years to comply with financial and tax regulations.
• Support correspondence: Retained for up to 2 years after your last contact.
• Server logs: Retained for up to 90 days.

Local application data (SSH credentials, AI keys, session history) is entirely under your control. It is deleted when you uninstall the application or remove the local database.

8. Security

We implement industry-standard security measures to protect your account data:

• Passwords are hashed with bcrypt (never stored in plaintext).
• All web portal traffic is encrypted in transit using TLS 1.2 or higher.
• Our production database runs in a private network not directly accessible from the internet.
• License keys are signed with Ed25519 asymmetric cryptography; the signing key is kept offline.
• Access to production systems is restricted to authorised personnel and protected with multi-factor authentication.

No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

9. Cookies & Tracking

The teminops.com web portal uses strictly necessary session cookies to maintain your login state. We do not use tracking cookies, advertising cookies, or third-party analytics scripts. We do not use fingerprinting or cross-site tracking technologies.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email support@teminops.com. We will respond within 30 days (or within the timeframe required by applicable law). We may request proof of identity before fulfilling requests.

California Residents (CCPA / CPRA)

California residents have the right to know what personal information is collected, to delete personal information, to opt out of sale (we do not sell your data), to non-discrimination for exercising your rights, and to correct inaccurate personal information. To exercise these rights, contact support@teminops.com or submit a request through our web portal.

11. Children's Privacy

The Service is not directed to children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at support@teminops.com and we will delete it.

12. International Data Transfers

Teminops Corporation is incorporated in Delaware, United States. If you access the Service from outside the United States, your account data will be transferred to and processed in the United States. For transfers from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) as the legal transfer mechanism where required by applicable law. By using the Service, you acknowledge and consent to this transfer.

13. Third-Party Links

The Service may contain links to third-party websites or documentation. TEMINOPS is not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice within the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

15. Contact & Data Controller

The data controller for personal data collected via the Service is:

You also have the right to lodge a complaint with your local data protection authority if you believe your rights under applicable law have not been respected.