Privacy

Last updated 15 August 2026.

LuTerm Cloud stores your email, encrypted inventory, and usage counters. It does not receive SSH traffic or plaintext credentials.

Vault keys are created on the device. Optional master passwords are derived with Argon2id locally. We cannot recover secrets if you lose both the master password and the recovery kit.

Payments are processed by Gumroad. We receive the buyer email, product, and subscription status so we can set your plan. We do not store card numbers.

Account emails (verify, reset, workspace invites, inventory exports) are HTML messages from the address configured on the Cloud origin.

You can delete your account from the desktop app. Residual logs may be kept for a short period for abuse handling.