Privacy Policy
Last updated: 12 November 2026.
Who we are
TermRoad is provided by Bowyer.Digital LLP, a limited liability partnership registered in England and Wales with number OC461871, whose registered office is at 117 Lawton Road, Alsager, Staffordshire, ST7 2DD, United Kingdom. We are the controller of the personal data described here, which means we decide how it’s used and we’re responsible for protecting it.
Contact us about anything in this policy at support@termroad.com. For security problems, email security@termroad.com.
The short version
- Your vault (hosts, keys, passwords, identities, snippets) is encrypted on your device before it syncs. We can’t read it, and we never receive your master password or Secret Key.
- To run your account we hold your email address and basic details about each encrypted item: how many there are, their sizes and when they changed.
- This website uses no cookies, no analytics and no third-party trackers. Neither do the apps.
- We don’t sell your data or use it for advertising.
- You can delete your account at any time from the app. You can leave the beta list from any email we send.
What we collect, and why
We only use personal data where the law gives us a reason (a “lawful basis”). Each use is listed below with its basis.
| What | Why we use it | Lawful basis |
|---|---|---|
| Your email address (account) | To create your account, sign you in, and send sign-up codes and account notices | Contract: we need it to provide the service you asked for |
| Your encrypted vault and its item details (ID, encrypted size, when saved, which device saved it, whether deleted) | To sync your vault between your devices | Contract |
| Account security values (a salt, password-stretching settings, a key ID, a hashed sign-in key, your vault key locked with a key we never have) | To let you sign in without us ever learning your password or Secret Key | Contract |
| Each signed-in device: the name the app gives it, when it signed in and was last used | To show you your devices and let you sign one out | Contract |
| IP addresses, and email addresses as keyed hashes, held briefly for rate limiting | To stop password guessing, spam sign-ups and abuse | Legitimate interests: keeping the service and your account secure |
| Server logs, which can include IP addresses | To run, secure and fix the service | Legitimate interests |
| Your email address, if you join the Mac beta list | To email you about the Mac beta | Consent: you confirm by clicking a link, and you can withdraw at any time |
| Your messages, if you email support | To help you | Legitimate interests: answering you |
| Your subscription details from Stripe: email, plan, country, subscription status and dates (never your card details) | To unlock paid features and manage your subscription | Contract |
We don’t collect what you type or see in your terminal sessions, the contents of your vault in readable form, analytics, or crash reports.
Emails we send
All emails come from noreply@termroad.com, and replies go to support@termroad.com. Account emails: sign-up codes, a notice if someone tries to sign up with your address, password-reset codes and confirmations, account-reset codes, reminders and confirmations, and confirmation that your account was deleted. Beta emails: a confirmation link, then news about the Mac beta. Every beta email has a one-click unsubscribe.
Data that stays on your devices
These never reach us: your vault’s keys (kept in the macOS Keychain), your connection logs (when and where you connected, never what you typed or saw; kept for 30 days by default), earlier versions of items replaced by a newer change from another device (kept encrypted for 30 days), and encrypted export files you create.
Who we share it with, and where it’s stored
We don’t sell your data or share it for advertising. We use these providers to run TermRoad. DigitalOcean and Amazon act on our instructions under data processing agreements. Stripe works differently, as explained in its row.
| Provider | What they do | Where the data is |
|---|---|---|
| DigitalOcean | Hosts this website and our server, including your encrypted vault, your account and the beta list | London, UK |
| Amazon Web Services (Amazon SES) | Sends our emails, so it handles your email address and the email’s contents | London, UK (eu-west-2) |
| Stripe | Sells paid plans to you as the merchant of record: it takes payment, handles VAT and sends receipts. For that it’s an independent controller under its own privacy policy, and it tells us only what we need to manage your subscription | Set out in Stripe’s privacy policy |
We may also share data if the law requires it, or to protect our users or the service, and with a buyer if the business is ever sold, who would then be bound by this policy.
Transfers outside the UK
We store your data in the UK. DigitalOcean and Amazon are US-based, so staff or systems outside the UK may sometimes access it, for example for support. Where that happens, it’s covered by the safeguards in their data processing agreements, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework. Ask us for details at support@termroad.com.
How long we keep it
| Data | How long |
|---|---|
| Account email, vault and account security values | Until you delete your account |
| Markers for items you’ve deleted | While your account exists, so your other devices learn about the deletion |
| A signed-in device | Until you sign it out, or 90 days after it was last used |
| Sign-up and recovery codes | Deleted once used or expired, at the latest within a day |
| Rate-limit counters (IP addresses, hashed email addresses) | About an hour, in memory only |
| Emails waiting to be sent that failed | 7 days |
| Server logs | 60 days |
| Backups | 30 days, after which they’re overwritten |
| Beta list: unconfirmed address | 7 days |
| Beta list: confirmed address | Until you unsubscribe, or 6 months after the Mac app’s public launch |
| Support emails | 2 years after the conversation ends |
| Subscription records from Stripe | While you’re subscribed, then 6 years for our accounts |
When you delete your account, everything we hold for it is removed from our server straight away, in one step. Copies in backups disappear when those backups are overwritten. The beta list is separate from accounts: deleting your account doesn’t remove you from the beta list, and leaving the list doesn’t affect your account.
Security
Your vault is encrypted on your device with a key made from your master password and your Secret Key, neither of which we ever receive. Everything travels over HTTPS. If our server were ever compromised, an attacker would get encrypted data they can’t read; our security page explains exactly what they could and couldn’t do.
Because we can’t decrypt your vault, we can’t recover it for you if you lose both your password and Secret Key and no device is still signed in. Keep an encrypted export somewhere safe.
If we learn of a breach that puts your rights at risk, we’ll tell you and the ICO as the law requires.
Your rights, and how to complain
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it if it’s wrong;
- delete it;
- restrict or object to how we use it, including anything we do on the basis of legitimate interests;
- give you data you provided in a reusable format (your vault can also be exported from the app at any time);
- stop using it where we rely on your consent, such as the beta list. Withdrawing consent doesn’t affect what we did before.
Email support@termroad.com to use any of these rights. We’ll reply within one month, and we may need to confirm it’s really you, usually by replying from your account’s email address. There’s no charge. Note that we can only give you your vault in encrypted form: we can’t decrypt it.
Complaints
If you’re unhappy with how we’ve handled your data, email support@termroad.com with “Data protection complaint” in the subject. We’ll acknowledge your complaint within 30 days and tell you the outcome without undue delay.
You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We’d appreciate the chance to put things right first.
Children
TermRoad is for people aged 18 and over. We don’t knowingly collect data from children. If you think a child has given us their details, email support@termroad.com and we’ll delete them.
Changes to this policy
If we change this policy, we’ll update the date at the top. If a change materially affects how we use your data, we’ll tell account holders by email before it takes effect.