Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Virtual Vertex S.R.L.
Registered in Italy
VAT Number: IT02792380390
Email: support@termial.app

2. Data We Collect

2.1 Account Information (Optional)

If you create a Termial account for cloud sync:

• Email address
• Encrypted password (hashed, never stored in plain text)
• Account preferences

2.2 Application Data (Stored Locally)

The following data is stored locally on your device and is never transmitted to our servers unless you enable cloud sync:

• SSH connection bookmarks and settings
• Terminal preferences and configurations
• Command history
• SSH keys and credentials (encrypted)

2.3 Cloud Sync Data (Optional)

If you enable cloud sync, the following data is encrypted and synced:

• Connection bookmarks (end-to-end encrypted)
• Application settings
• Secure vault entries (end-to-end encrypted)

2.4 AI Features

When using AI-powered features:

• Your prompts are sent to OpenAI's API for processing
• We do not store your AI conversations on our servers
• OpenAI processes data according to their privacy policy

2.5 Analytics (Anonymous)

We may collect anonymous usage statistics to improve the app:

• App version and platform
• Feature usage (anonymized)
• Crash reports (no personal data)

3. How We Use Your Data

We use your data to:

• Provide and maintain the Termial application
• Sync your settings across devices (if enabled)
• Process AI requests
• Send important service updates (account-related only)
• Improve our services based on anonymous analytics

4. Data Security

We implement industry-standard security measures:

• Encryption at rest: All sensitive data is encrypted using AES-256
• Encryption in transit: All communications use TLS 1.3
• End-to-end encryption: Vault and credential data is encrypted with keys only you control
• Zero-knowledge architecture: We cannot access your encrypted credentials

5. Data Retention

• Local data: Retained until you delete it or uninstall the app
• Account data: Retained while your account is active
• After account deletion: All data is permanently deleted within 30 days

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to data processing
• Withdraw consent: Withdraw previously given consent

To exercise these rights, contact us at support@termial.app

7. International Data Transfers

Your data may be processed in:

• European Union: Primary data processing (Cloudflare EU data centers)
• United States: AI processing via OpenAI (when using AI features)

For transfers outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).

8. Third-Party Services

Termial uses the following third-party services:

• Cloudflare: Hosting and CDN (Privacy Policy)
• OpenAI: AI features (Privacy Policy)
• Apple: App Store distribution (Privacy Policy)

9. Children's Privacy

Termial is not intended for users under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via:

• Email notification (if you have an account)
• In-app notification
• Updated "Last updated" date on this page

11. Contact Us