NetMesh/PRIVACY.md

# Netcatty Privacy Policy

Effective date: July 27, 2026

This policy applies to the Netcatty desktop application distributed through
the official Netcatty GitHub repository. It does not cover third-party
websites, services, plugins, command-line agents, or servers that you choose to
use with Netcatty.

## Summary

Netcatty does not operate a centralized user account, advertising, analytics,
or crash-reporting service. The Netcatty maintainers do not automatically
receive your saved hosts, credentials, terminal contents, files, chat history,
or diagnostic logs.

Netcatty stores application data on your device by default. It connects to
external services only when required for a feature you use, including update
checks, remote connections, cloud sync, AI providers, and user-installed or
user-configured integrations.

## Data stored on your device

Depending on the features you use, Netcatty may store:

- hosts, groups, usernames, notes, snippets, terminal settings, and workspace
  state;
- passwords, private keys, passphrases, access tokens, and provider
  credentials;
- terminal, file-transfer, editor, and AI conversation state;
- preferences, update settings, permission decisions, and local diagnostic
  information.

Sensitive fields are protected using operating-system-backed storage where it
is available in the packaged desktop application. You remain responsible for
protecting your device, operating-system account, exported backups, and any
unencrypted files that you create or export.

You can remove local Netcatty data by deleting it in the application or by
uninstalling Netcatty and removing its application-data directory. Data kept
by a third-party service must be removed through that service.

## Network connections and third parties

Netcatty sends data directly to third parties in the following situations:

- **Updates:** Netcatty may contact GitHub to check for and download official
  releases. GitHub receives normal connection information such as your IP
  address and request metadata.
- **Remote access and file transfer:** When you connect through SSH, Telnet,
  serial, Mosh, SFTP, SCP, port forwarding, or related tools, connection data,
  terminal input and output, authentication data, and transferred files are
  exchanged with the destination systems that you select. Private keys remain
  on your device unless you explicitly transfer or export them.
- **Cloud sync:** If you enable sync, Netcatty sends an encrypted vault to the
  provider you choose: GitHub Gist, Google Drive, Microsoft OneDrive, WebDAV,
  or an S3-compatible service. Encryption and decryption occur on your device.
  Authentication and account metadata are exchanged with the selected
  provider.
- **AI and agent features:** If you configure or use an AI provider or coding
  agent, prompts, conversation content, selected terminal or workspace
  context, tool inputs and outputs, and related request metadata may be sent to
  that provider. The exact data and retention rules are controlled by the
  provider and your provider account or configuration.
- **Plugins and custom endpoints:** User-installed plugins, custom AI
  endpoints, proxy servers, WebDAV servers, S3-compatible services, and other
  integrations may process data under their own policies.

These services are not operated by the Netcatty maintainers. Review their
privacy policies and terms before enabling the corresponding feature.

## Diagnostics and support

Netcatty does not automatically upload application logs or crash reports to
the maintainers. If you attach logs, screenshots, configuration, or other
diagnostic material to a GitHub issue, discussion, or support request, that
information is shared by your choice and is governed by the service through
which you submit it. Remove passwords, private keys, access tokens, host
details, and other secrets before sharing diagnostic material.

## Changes to this policy

Material changes to this policy will be published in the Netcatty repository.
The effective date at the top of this document identifies the current version.

## Contact

For privacy questions, open a GitHub discussion or contact
`binaricat.io@gmail.com`.