Privacy policy

SetuSSH has no telemetry, no analytics and no accounts. Your hostnames, usernames, keys, passwords, commands and transferred files stay on your machine, and go only to the servers you choose to connect to.

The one request the app makes by itself is the update check. At launch it asks GitHub for the list of published SetuSSH releases and compares it with the build you are running, so it can tell you when a newer one is out. It carries no identifier and no account. GitHub sees your IP address and the version string, and GitHub's privacy terms apply to that request. The answer is reused for 30 minutes, and the switch in Settings, under Updates, turns the check off entirely. With it off the app makes no request of its own at all.

Desktop notifications, when you turn them on, are shown by your operating system and name the tab and what happened, such as a bell or a session that ended. They never carry terminal output.

Saved passwords are encrypted by your operating system's own credential store (Keychain on macOS, DPAPI on Windows, libsecret on Linux) and can be put behind an additional master password. Licence checks happen entirely offline against a key built into the app, so activating never contacts a server.

A saved Remote Desktop password is used by SetuSSH's own Remote Desktop client to sign you in to that server. It is handed to the client inside SetuSSH for that one connection and reaches the server only inside the encrypted connection. A password typed when asked is used the same way and not saved. SetuSSH makes the connection itself, directly or through the SSH server you chose, with no other app involved. While a remote desktop is connected, the clipboard is shared with that server, as in other Remote Desktop apps: what you copy on this computer can be pasted there, and what you copy there can reach your clipboard. Certificates you choose to remember are kept on this computer, like SSH host keys.

If you configure the AI assistant with your own API key, your prompts and the terminal output you share with it go to whichever provider you chose, under that provider's terms. Nothing is routed through us. Point it at a local model and nothing leaves your machine at all.

When you request a licence key, we store:

• the name, email address and the other details you enter, so a person can review the request and reissue your key if you lose it
• the key itself and its expiry date
• your IP address, to stop one person scripting thousands of keys

That is the whole list. The site has no cookies, no trackers, no advertising and no third-party scripts. Downloads and release notes are served by GitHub, whose own privacy terms apply once you click through.

We email you about the test programme: a new build, or notice that testing is ending. Not marketing, and never shared or sold. Ask us to delete your address and we will.

Questions, or a deletion request: support@setussh.com