Privacy Policy
Last updated: August 1, 2026
1. Overview
ZShell ("we", "us", "our") is a desktop SSH terminal and SFTP client for developers and system administrators. This Privacy Policy explains what data we collect, how we use it, and the choices you have when you use the ZShell application and website.
We treat your server data with the highest priority on privacy. Connection credentials, host configurations, and command history are encrypted end-to-end and are never readable by us.
2. Data We Collect
Account data: your email address and hashed password, used to create and sign in to your account.
License and billing data: subscription plan, status, and expiry, processed through our payment provider.
Synced content: host connection settings, quick commands, appearance preferences, command history, and path history. When cloud sync is enabled, this data is encrypted on your device before upload — we only ever store ciphertext.
Basic usage data: app version, operating system, and language, used to deliver updates and improve compatibility.
3. What We Do Not Collect
We never see your SSH passwords, private keys, or server contents in plaintext. With end-to-end encryption, the encryption keys remain on your devices, and our servers store only encrypted blobs.
We do not sell, rent, or share your personal data with advertisers.
4. How We Use Data
To provide and maintain the service: account authentication, cloud synchronization, subscription billing, and device pairing.
To communicate: transactional emails such as password reset, payment receipts, and account notices.
To improve the product: aggregated, anonymized statistics about usage and errors.
5. Third-Party Services
Payment processing is handled by Stripe, which processes and stores your payment details subject to its own privacy policy.
Transactional email is sent through a third-party email provider. We share only the minimum information required to deliver those messages.
6. Data Retention & Deletion
We retain account and subscription data for as long as your account remains active. You may request deletion of your account and all associated data at any time by contacting us; we will delete it within a reasonable period, except where retention is required by law.
7. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at the address below.
8. Contact
For any privacy questions or requests, email us at [email protected].