Privacy
Policy.

1. Introduction

Welcome to Ultron SSH ("Ultron", "we", "us", or "our"). We are an individual software developer operating this service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at ultronssh.com and the Ultron macOS application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign up, we collect your email address to create and manage your account.
• Payment Information: Payments are processed by Lemon Squeezy. We do not store your credit card or payment details on our servers.

2.2 Information Collected Automatically

• Usage Data: We may collect anonymized, aggregated data about how you interact with the Service (e.g., feature usage, crash reports) to improve the product.
• Log Data: Our servers may automatically record information including your IP address and browser type when you visit our website.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information, including purchase confirmations
• Send technical notices, security alerts, and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns to improve user experience

4. Data Storage and Security

All sensitive credentials you store within the Ultron app (SSH keys, passwords, server details) are encrypted locally on your device using AES-256 encryption. These credentials are never transmitted to our servers unless you explicitly enable the Cloud Sync feature (Pro tier only).

If you use Cloud Sync, your data is end-to-end encrypted on your device before transmission. We store only the encrypted ciphertext and cannot decrypt your credentials.

Your account data (email, plan tier) is stored securely on Supabase, a SOC 2 compliant backend platform.

5. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Service Providers: Supabase (database), Lemon Squeezy (payments), Vercel (hosting). These providers are bound by their own privacy policies.
• Legal Requirements: If required by law, we may disclose information to comply with legal obligations.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and associated personal data
• Export your data in a portable format
• Withdraw Consent: You have the right to withdraw your consent to data processing at any time. Withdrawal will not affect processing completed prior, but may restrict or terminate access to some Pro/Sync features.
• Nomination: In accordance with the DPDP Act 2023, you have the right to nominate any individual to exercise your data principal rights in the event of your death or incapacity.

To exercise these rights, contact us at privacy@ultronssh.com.

7. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes your acceptance of the revised policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

10. India DPDP Act 2023 Disclosures

In compliance with the Digital Personal Data Protection (DPDP) Act, 2023 of India, we provide the following additional disclosures for users residing in India:

• Consent Withdrawal & Nomination: You may exercise your right to withdraw consent or nominate an individual to act on your behalf by emailing our Grievance Officer.
• Grievance Redressal: If you have any complaints or grievances regarding the processing of your personal data, you may reach our Grievance Officer at grievance@ultronssh.com. We will respond to and address your grievance within the statutory period of 30 days.
• Complaint to DPBI: If you are unsatisfied with the resolution provided by our Grievance Officer, you have the right to file a complaint with the Data Protection Board of India (DPBI) in accordance with the rules prescribed by the Government of India.
• Notice in Regional Languages: If you require this privacy notice or consent statement in any of the 22 scheduled regional languages of India, please submit a request to grievance@ultronssh.com, and we will arrange a translation for you.