Privacy Policy

1. Zero-Data Retention

RemoteGravity does not store, inspect, or retain your code, file directory structures, terminal commands, or console outputs on any remote server. Your codebase remains stored exclusively on your local workstation.

2. Wormhole Relay & End-to-End Encryption

The Wormhole Pro Relay uses secure, pass-through Cloudflare Worker tunnels to route interactions between your local daemon and paired remote devices (such as our web console or mobile apps).

• Natively Encrypted: All command runs, file diffs, and chat logs are encrypted on your local workstation before transmitting.
• Zero Key Access: The keys to decrypt this traffic are generated and stored strictly on your paired local devices. The Wormhole Relay acts as a blind piping system and does not possess the cryptographic keys needed to read or modify your data.
• Device Token Revocation: Your paired client permissions are fully controlled by Ed25519-signed JWT tokens generated by your local daemon. You can revoke paired access keys instantly via your CLI or desktop console settings.

3. Strictly Opt-In Telemetry

We do not track your activity by default. Opt-in telemetry is strictly disabled (`telemetryOptIn: false`) until you explicitly enable it in your CLI configuration or Desktop controller settings.

When telemetry is enabled, we collect minimal, aggregate usage data to improve application performance. To protect your confidentiality, we run a recursive client-side scrubbing engine that redacts:

• Absolute filesystem paths (e.g., /Users/yourname/projects/ is scrubbed to [path]/).
• Sensitive environment variables, passwords, and secret keys.
• Authentication headers, CSRF tokens, and bearer keys.

Scrubbed events are transmitted securely to our analytics backend (PostHog) using randomized, anonymous identifiers.

4. Payment Processing & Billing

Paid subscription plans (such as Wormhole Pro Relay) are managed securely through Stripe. Your card numbers, bank details, and billing addresses are transmitted directly to Stripe and never pass through or touch RemoteGravity servers.

5. Cookies & Tracking

The RemoteGravity marketing website is built to be clean and lightweight. We do not use third-party marketing cookies, cross-site trackers, or advertising pixels.

6. Your Rights & Data Control

Because we store no codebase contents or credentials remotely, we do not maintain a server database of your proprietary project code to delete or export. You have full self-custody over your local logs, paired keys, and diagnostic profiles. If you have opted into telemetry and wish to request removal of your anonymous telemetry profile, please contact our support team.