Privacy Policy

1. Introduction

SeshHub ("we", "us", or "our") operates the SeshHub platform at app.seshhub.io. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our service.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and hashed password when you create an account.
• Usage Data: Session metadata such as connection timestamps, session duration, agent identifiers, and IP addresses used to connect.
• Device & Agent Data: Information about enrolled SSH agents and ESP32 devices, including agent version, hostname, and network configuration.
• Log Data: Server logs that may include IP addresses, browser type, and request timestamps for security and debugging purposes.

3. How We Use Your Information

• To provide, maintain, and improve the SeshHub platform.
• To authenticate users and manage terminal sessions.
• To send transactional emails (password resets, account notifications).
• To monitor system health, detect abuse, and maintain security.
• To respond to support inquiries and contact form submissions.

4. Terminal Session Data

SeshHub facilitates real-time terminal connections between your browser and remote devices. Terminal I/O data passes through our infrastructure in transit but is not logged or stored by SeshHub. We do not record the content of your terminal sessions.

5. Data Storage & Security

Your data is stored in a PostgreSQL database on infrastructure we control. All connections use TLS 1.2 or higher. Passwords are hashed using industry-standard algorithms. Session tokens are short-lived and scoped to individual sessions.

6. Cookies & Local Storage

We use browser cookies and local storage for authentication tokens and theme preferences. We do not use third-party tracking cookies or advertising cookies.

7. Third-Party Services

We use the following third-party services:

• Postmark: For transactional email delivery (password resets, notifications). Postmark processes your email address and message content according to their privacy policy.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

8. Data Retention

Account data is retained for as long as your account is active. Session metadata is retained for up to 90 days for security auditing. Log data is retained for up to 30 days. You may request deletion of your account and associated data at any time by contacting us.

9. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal data.
• Export your account data in a portable format.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at [email protected].