Privacy Policy.
Your data, clearly explained.

TermSquad is operated by Servicios Comerciales Clickbuy, S de RL de CV, a company in Mexico. We are responsible for the personal data we use to operate TermSquad, manage customer relationships and maintain this website.

This policy covers termsquad.com, app.termsquad.com and the TermSquad service: cloud computers, Web Terminal, files, persistent sessions, Squad, Squad Memory, workload protection and support.

If you store other people’s personal data in your workspace, you decide why and how to use that content. We host and process it to provide the service you request. You are responsible for having the necessary rights and permissions for that use.

We receive information you provide, information generated when you use TermSquad, and information from services that help us operate it.

Account & sign-in

Your email, account name or profile information, verification status, sign-in sessions, IP address and browser information. Verification and rate-limit records help protect account access.

Payments & subscriptions

Customer, checkout, invoice and subscription references; plan, payment status and billing dates. Stripe collects and processes payment details. TermSquad does not store your full payment card number or card security code.

Computer & access

Machine name, plan, region, network addresses, installed tools and versions, settings, public SSH keys and access credentials used to operate your computer.

Health & activity

CPU, memory, disk and network usage; service status; process names and resource use; and agent status, session identifiers, workspace names and tab names.

Workspace content

Files, repositories, terminal output, agent conversations, shared memory and other content stored or generated on your computer. This can include credentials or personal data you choose to put there.

Support & operations

Emails, issue descriptions, information you share for troubleshooting, support notes and records of account or machine operations.

Website usage

Pages visited, interactions, referral or campaign information, and browser or device information used for website statistics. See cookies and analytics.

We do not ask for sensitive personal information, such as health, religious or biometric data, to create an account. Content you upload may contain it; avoid including it in your workspace or support requests unless necessary and you have a lawful basis to do so.

Our core use of your information is to provide and support TermSquad. This includes:

• Creating your account, verifying sign-in and controlling access to your machines.
• Processing subscriptions, provisioning computers and carrying out the operations you request.
• Keeping sessions, files and shared memory available; displaying machine and agent status.
• Maintaining infrastructure, diagnosing faults, preventing abuse and protecting the service.
• Answering support requests, sending sign-in codes and communicating about payments or service operations.
• Meeting legal obligations, keeping required business records and addressing disputes.

We process data needed for our relationship with you and for legal obligations, and obtain consent where required. Some information is necessary to provide the service: without your email, for example, we cannot provide email sign-in.

A separate purpose: improving the website

We use Google Analytics to understand visits, navigation and conversions and improve our website. This is separate from running your cloud computer. We do not use it for advertising or remarketing. You can limit this collection using the controls described below.

Files, terminals and persistent sessions

Your cloud computer stores your projects and working environment. Session history and terminal output may persist there so you can reconnect and continue. Closing a browser or disconnecting SSH does not erase that content.

Web Terminal and file connections travel through the computer’s Cloudflare Tunnel to its runtime. The dashboard authorizes access; the terminal and file streams connect to your machine. This still involves TermSquad’s infrastructure and hosting providers.

Squad and Squad Memory

Squad lets agents exchange tasks and context. Squad Memory stores shared knowledge on your TermSquad computer and makes it available to connected agents. An agent can include that context in a request to its AI provider. Consider which tools and agents you allow to access a project.

Your AI providers and connected tools

You choose and authenticate the AI providers and tools you use. Those tools may send prompts, code, files, conversations or retrieved memories to their providers. Their privacy policies, retention rules and account settings govern that processing, including any use for model training. Our commitment about our own models does not change their terms.

Monitoring and workload protection

The dashboard receives resource measurements and session metadata. Its workload metrics contain process names, identifiers, CPU and memory usage, without command arguments or environment variables.

TermSquad Guard manages resource pressure on your computer. It keeps local workload records, including working directory, executable name, duration, resource conditions and exit result. These are distinct from the dashboard’s metric history. Disabling Guard does not disable machine health reporting or erase existing records.

We use the following services to deliver TermSquad. The information involved depends on the part of the service you use.

01OVHcloud

Cloud computers and available provider backups. Processes hosted workspace data and infrastructure information.

02Cloudflare

Website and application delivery, networking, tunnels, platform services and outgoing service emails. Processes traffic, connection information and the data involved in those services.

03Stripe

Checkout, payments, subscriptions and billing. Processes payment and customer information and may act independently for purposes such as fraud prevention and legal compliance.

04Google

Google Analytics and Google Tag Manager support website measurement. See how Google uses information from partner sites.

Email services also process correspondence you send to our support address. Providers and integrations you connect to your computer receive the data you or your tools send to them.

Processing outside Mexico

Your information may be processed outside Mexico by our infrastructure and service providers. The region selected for a computer applies to that machine; it does not mean account, billing, support or website analytics data stays in that region.

Service providers process information to perform their role. Disclosures to independent third parties, including international transfers, require an applicable legal basis or your consent where required. You can contact us to ask about recipients or limit transfers that depend on your consent.

We may also disclose information when required by law, a valid authority request, or to establish or defend legal rights. We do not offer your personal data for sale.

Cookies have different jobs. Some support account access; others measure website use.

Account access

The application uses cookies to maintain authenticated sessions and support sign-in and checkout. Deleting or blocking them can sign you out or prevent those features from working.

Website analytics

Our public website loads Google Analytics through Google Tag Manager. Analytics can use cookies or identifiers to measure page visits, interactions, referrals, approximate location and device or browser information.

Analytics concerns activity on the marketing website. It is separate from the machine metrics described in this policy. Google Tag Manager loads the analytics tag; it is not itself a privacy preference control.

Your choices

You can block or delete cookies through your browser settings. Google also provides a Google Analytics opt-out browser add-on for supported browsers. These controls apply to the browser where you use them and do not erase information already collected.

For questions about analytics data or to request limits on its use, email support@termsquad.com. If a request cannot be linked to an identifiable analytics record, we will explain that limitation.

TermSquad uses access controls, machine isolation, encrypted network connections and protections for stored management credentials. Web access uses HTTPS and secure WebSocket connections; SSH uses its own encrypted connection.

Operating a managed computer can require privileged access for provisioning, maintenance, recovery, support or security. Information may be accessible through these operational paths. Access to a machine also depends on the credentials, tools and permissions you configure.

Keep your sign-in email, SSH private keys and AI credentials secure, and review what your agents can access. No service can guarantee that every security incident will be prevented. We will notify affected people of a breach when required by applicable law.

See TermSquad security for the product’s protections and access model.

Different data has different lifetimes. We keep information for the purpose it serves and for applicable legal, accounting, security or dispute-resolution obligations.

Workspace content

Files, session data and memory remain on the computer until you remove them or a machine operation changes or deletes them. Restart preserves the disk. Reset erases the disk and reinstalls the system.

Subscription end or nonpayment

The service currently provides a 72-hour recovery window after a subscription ends or a qualifying payment failure, before initiating machine deletion if payment has not been restored. Cancellation scheduled for period end takes effect at that period’s end. This is a recovery window, not a promise to erase all personal data within 72 hours.

Machine metrics

Historical host metric samples are retained for seven days. Current service, workload and agent snapshots are maintained separately. The seven-day limit does not apply to all account records or logs on your computer.

Backups

Backup availability and retention depend on the computer, plan and provider. Restore returns the disk to the available backup’s state and can bring back earlier content. Deleting a file or resetting a computer does not establish that every provider copy is immediately erased.

Account, billing & support

These records are separate from your machine. We retain them while needed to manage your relationship with us, handle support, meet recordkeeping duties or resolve disputes. Where a legal retention duty applies, deletion can be limited or delayed.

Website analytics

Retention depends on the analytics configuration and Google’s processing. The seven-day machine metric limit does not apply to website analytics. Contact us about the analytics information relevant to your request.

Download the files and memory you need before destructive machine operations. To request deletion of personal data beyond your computer, follow the process below. We will explain any information we need to retain and why.

Under Mexico’s data protection law, you can request access, rectification, cancellation and opposition, known as ARCO rights. This means asking to see your personal data, correct it, have it cancelled or object to its use, subject to applicable exceptions.

For ARCO requests, we communicate our determination within 20 business days of receipt. If approved, we carry it out within the following 15 business days. Either period may be extended once by an equal period when legally justified; we will explain any extension.

You may also withdraw your consent or request limits on use or disclosure through the same email. Withdrawal does not affect earlier lawful processing or obligations that require retention. If a requested limit affects our ability to provide a feature, we will explain the consequence.

Additional rights

Depending on the law applicable to you, you may also have rights to data portability, restriction of processing and complaints to a supervisory authority. Where the GDPR applies, we process service data to perform our contract, necessary security and support data for legitimate interests, legally required records to meet obligations, and consent-based data on the basis of consent. GDPR requests normally receive a response within one month; we will explain any permitted extension within that period.

If your concern remains unresolved, you may contact the competent privacy authority. In Mexico, this is the Secretaría Anticorrupción y Buen Gobierno. See the Mexican federal data protection law for the legal framework.

Information about children

TermSquad is designed for developer and professional workflows and is not directed to children. If you believe a child has provided us with personal data, contact us so we can review the situation and take appropriate action.

We may update this policy as TermSquad or its data practices change. The current version will be available at this address, with its revision date at the top. For material changes, we will provide an additional notice through the application or your account email as appropriate, and obtain new consent where required.

For privacy questions, requests or concerns, contact Servicios Comerciales Clickbuy, S de RL de CV at support@termsquad.com or at the postal address above.