Privacy Policy

Gmail: optional read-only access

Terminal Sync (TerminalSync or TS) requests gmail.readonlyonly when you connect Gmail. It reads senders, recipients, subjects, dates, bodies and attachments to search, display and import messages you select. It cannot send, delete, move, mark or modify mail. Viewing Inbox does not add messages to AI: you choose to send them to a workspace.

Imported emails and attachments are saved on your computer. When you request an answer, enabled context may be sent to the AI providers disclosed below. You can pause, exclude or remove imported context. Disconnecting Gmail does not erase imported copies or recall data already sent to a provider. Original messages remain in Gmail.

See our complete Google data policy for details.

1. Who we are

TerminalSync is a desktop application that syncs the state of your terminals, AI configuration files, and secrets across your computers through the storage provider of your choice (Google Drive, iCloud, Dropbox).

Operated by TerminalSync. Legal contact: legal@terminalsync.ai.

2. Data we collect

We collect only the minimum data necessary to operate the service:

• User account: email, full name (if provided), avatar (if provided via Google or Apple OAuth), time zone. Hosted on Supabase.
• Subscription data: billing status, plan, last 4 digits of payment method. Processed by Stripe.
• Minimal operational logs: sign-in timestamps, sign-in IP (anonymized after 30 days), non-fatal errors (Vercel Speed Insights / Vercel Analytics).
• Affiliate data: if you arrived via an affiliate link, a Rewardful cookie records the referrer.

3. Data we DO NOT collect

The content of your terminals, your files and your secrets NEVER touches our servers. It goes straight from your computer to the cloud provider you choose, under your own account. Your secrets, credentials, memory and conversations are additionally encrypted locally with AES-256-GCM before upload — even if we wanted to, we couldn't read them. The master key lives on your machine, protected by system permissions and by your secret phrase, and never leaves your devices unencrypted.

One exception, and it matters: what you write to the AI. For the AI to answer you, your message — together with whatever is active in your Context panel and the earlier conversation in that workspace — leaves your computer and goes to an external AI provider. That applies to the AI included in the Pro and Max plans, which travels through a server of ours on its way to the provider. Details in section 5.

If instead you use your own AI account with your own key, those messages do not pass through our servers: they go straight from your computer to the provider you picked.

Voice dictation is local. Your microphone audio is transcribed inside your computer, with a model shipped in the application. It is not uploaded anywhere.

Your project files are stored in your own cloud in their original format — so you can open them directly from Drive whenever you want. They stay under your Google account's control, not ours: we cannot access them.

4. What we use your data for

• Authenticating you and keeping your session active.
• Processing payments and issuing invoices (via Stripe).
• Notifying you about product updates and security alerts.
• Improving site performance (aggregated Speed Insights data, not individual user tracking).

5. Who we share your data with

We share data with the following providers strictly to operate the service:

• Supabase: account database hosting (EU/US).
• Stripe: payment processing (US).
• Vercel: website + API hosting (global Edge Network).
• Resend: transactional email delivery (US).
• Rewardful: affiliate tracking (first-party cookie).
• n8n (automation, on a server we manage): processes the messages you type into the support chat, your email when you ask to be contacted, and the content of notifications you opt into.

And, if you use TerminalSync's AI, what you write also passes through these providers:

• Z.ai (Zhipu AI), a Chinese company: receives your message, the active material in your Context panel and the earlier conversation in that workspace, and generates the answer. Our policy prohibits Terminal Sync and its providers from using Google user data to develop, improve or train generalized or non-personalized AI models. Before receiving that data, a provider must support this restriction through applicable contractual terms and processing controls. Provider policy.
• Cloudflare: the middle server that request travels through on its way to Z.ai (and, when the AI looks up businesses or reviews, to SearchApi). It checks that your plan is current and counts how much you used. It does not store the content that passes through it: of your usage we record an identifier for your account, which model was used, how much text went in and out, and what it cost — never the text of your message, the answer, the contents of your documents, your file paths or your email address.
• SearchApi (US): only when you ask the AI to look up businesses or reviews on Google Maps, or when a YouTube video you added to Context can't be read any other way. It receives the text of that search (or the video link), the country and the language, and returns public results. It does not receive your name, your email or your documents. We count how many searches you made this month, but we don't store what you searched for.

We don't sell your data. We never have. We never will.

6. Your rights

Under GDPR (EU), CCPA (California), and equivalent laws, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your account and associated data.
• Portability: export your data in JSON format.
• Objection: opt out of marketing emails at any time.

To exercise any of these rights, email privacy@terminalsync.ai. We respond within 30 calendar days.

7. Retention

We keep your account data while your account is active. If you cancel, we delete your personal data within 30 days, except for data we are legally required to retain (tax records: 7 years).

Conversations you have with the support assistant are stored for up to 90 days for quality control.

8. Cookies

We use cookies strictly necessary for authentication and preferences (language, theme). If you arrived via an affiliate link, a Rewardful cookie records the referrer for 60 days. We don't use ad cookies or cross-site tracking.

9. Changes to this policy

If we materially modify this policy, we notify you by email at least 30 days before the change takes effect. For minor changes (typographical corrections, clarifications), we update the "last updated" date above.

10. Contact

Questions, concerns, or requests? Email privacy@terminalsync.ai.