Privacy Policy

Infra Companion is a free, open-source desktop SSH client. It is local-first: your hosts, credentials, SSH keys and settings live on your own computer, inside a vault encrypted with a master password only you know.

Data the app stores

• Everything you enter (hosts, groups, SSH keys, passwords, snippets, notes) is stored only on your computer, encrypted at rest in a local vault.
• Optional integrations you configure (for example an AI provider API key or a cloud provider token) are stored encrypted inside the same local vault and are used only to call the service you configured them for.

Google user data (optional Google Drive sync)

If — and only if — you enable Sync via Google Drive, the app asks for these Google permissions:

• drive.file — lets the app create and update only the files it created itself. Infra Companion uses it for exactly one file, infra-companion-vault.blob, stored in your own Google Drive. The app cannot see, read or list any other file in your Drive.
• openid and email — used solely to display which Google account is connected inside the app. Your email address is stored locally on your machine and is never transmitted anywhere else.

The synced file is encrypted end-to-end on your machine with a sync passphrase that only you know, before it is uploaded. Neither Google nor the developer can decrypt it. The developer never receives the file, the passphrase, or your OAuth tokens: the app talks directly to Google's API from your computer, and the OAuth refresh token is stored encrypted inside your local vault.

Data sharing

None. No data is shared with, sold to, or transferred to any third party. The only network calls the app makes are the ones you configure it to make (your own SSH servers, your chosen sync location, update checks against GitHub Releases, and optional integrations you enable).

Data retention & deletion

• Local data: delete the vault from within the app, or uninstall the app and remove its data folder. It was never anywhere else.
• Google Drive sync: click Disconnect in the app (this also revokes the OAuth token), delete infra-companion-vault.blob from your Google Drive, and — at any time — revoke the app's access at myaccount.google.com → Security → Third-party access.

Limited Use disclosure

Infra Companion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to this policy

Any change to this policy is published on this page, with the effective date above, and is visible in the site's public git history.

Contact

Questions about this policy or the app's data handling: open an issue on GitHub.