Termbaker is local-first by design. This policy explains the little we collect, why, and what never leaves your machine.
1. What we collect
For your account: your email, a cryptographic hash of your license key (never the key itself), and the name, operating system and activation dates of the machines you connect, so you can manage the 3 seats.
For billing: subscription events from Stripe, such as which plan is active and until when. Your card data is handled entirely by Stripe and never reaches our servers.
For email: delivery of transactional messages (your key, recovery links) through Resend.
2. What we never collect
Your code, your files, your prompts and your AI conversations. The usage Insights screen is computed locally and stays on your machine.
The app talks to our servers only to validate the license, check for updates and download them. There is no behavioural telemetry.
3. Cookies and storage
The account panel uses one session cookie, httpOnly, only to keep you signed in. The site remembers your language preference in your own browser. There are no third-party trackers, no ad pixels and no analytics scripts.
4. Who processes data for us
Stripe for payments, Resend for transactional email and Amazon Web Services for hosting. Each processes only what its role requires, under its own privacy terms.
5. Retention and deletion
Account data is kept while the account exists. You can ask for the deletion of your account and its data at support@termbaker.com; legal or fiscal records may need to be kept for the period the law requires.
6. Your rights
Under the LGPD, the GDPR and similar laws you can ask for access, correction, portability or deletion of your data, and object to processing. One email to support@termbaker.com is enough.
7. Security
License keys are stored only as scrypt hashes, sessions and activation tokens are signed, all traffic uses TLS, and inside the app your secrets are protected by the operating system keystore.
8. Children
Termbaker is not directed at children under 13, and we do not knowingly collect their data.
9. Changes and contact
Changes to this policy are announced on the site or by email. The data controller is OASYS Digital, Brazil; contact support@termbaker.com.