Privacy Policy

1. Scope

This Privacy Policy explains how the DuskShell website, account system, membership, device authorization, and related online services process personal information. SSH passwords, private keys, server connection profiles, and local session data stored by the desktop or Pad client are not intended to be stored by the website servers unless you deliberately enable sync, upload diagnostics, request support, or use another online feature that requires processing.

If you use DuskShell on behalf of a company, team, or client, you must make sure you are authorized to provide any account, billing, device, or support information to us.

2. Controller and contact

Controller: DuskShell.

Privacy contact: [email protected]. You may use this address to request access, correction, deletion, restriction, objection, withdrawal of consent, data portability, or to ask questions about this policy.

3. Information we collect

Account information: email address, password hash, sign-in status, registration time, account status, and security event records.

Membership and transaction information: plan, entitlements, device limits, expiry, order status, payment processing results, invoice, and tax-related information.

Device authorization information: device identifier, device name, platform, app version, activation time, last-seen time, revocation status, and device counts under the account.

Website and product usage information: pages visited, language, theme, cookie choices, browser type, operating system, IP address, request time, error logs, and security logs.

4. Purposes and legal bases

Service delivery and contract performance: account creation, sign-in, membership display, device authorization, downloads, subscription maintenance, and client support.

Security and abuse prevention: detecting unusual sign-ins, device abuse, API attacks, fraud, malicious access, and violations of the Terms.

Billing and compliance: payments, refunds, tax, invoices, accounting records, disputes, audits, and legal obligations.

Product improvement: understanding page visits, errors, performance, and common usage paths. Non-essential analytics cookies are enabled only with consent.

5. Cookies and local storage

We use essential cookies and local storage for sign-in, language, theme, security, cookie choices, and basic site functionality.

Analytics, performance, marketing, or third-party tracking technologies are non-essential. They are enabled only after you choose “Accept all”.

6. Sharing and international transfers

We may use hosting, database, email, payment, analytics, error monitoring, customer support, and security providers, limited to what is needed to provide their services.

Where personal information is transferred from the EEA, UK, or Switzerland to another region, we use applicable safeguards such as adequacy decisions or standard contractual clauses.

We do not sell personal information and do not share it for cross-context behavioral advertising unless clearly explained and consented where required.

7. Retention

Account information is retained while the account exists; after deletion, limited records may be retained for security, disputes, accounting, or legal requirements.

Membership, order, and payment records are retained as needed for tax, accounting, refunds, disputes, and compliance.

Device authorization records are retained while devices are bound; after revocation or deletion, limited records may remain for security, abuse prevention, and audit.

8. Privacy rights

In the EU, UK, Switzerland, and other applicable regions, you may have rights to access, correction, deletion, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority.

California and certain U.S. state residents may have rights to know, access, correct, delete, limit the use of sensitive personal information, opt out of sale or sharing, opt out of targeted advertising, and be free from discrimination for exercising rights.

9. Security, children, and AI assistance

We use reasonable technical and organizational measures to protect personal information, including access controls, encrypted transport, least privilege, audit logs, credential separation, and security monitoring.

DuskShell is intended for developers and professional users. It is not directed to children under 13.

AI features used to explain logs, command output, or troubleshooting suggestions are assistive only.