Privacy Policy

Effective date: June 22, 2026

Coldspire LLC ("Coldspire", "we", "us", and "our") operates Conduish, including the website, desktop app, API, account system, sync service, and billing features. This Privacy Policy explains what we collect, why we collect it, and your choices.

What Conduish Does

Conduish is an SSH-focused desktop app for managing hosts, keys, vault-backed configuration, terminal workflows, and cross-device sync. The cloud service provides accounts, authentication, encrypted vault sync, profile settings, subscriptions, and service emails. SSH sessions run from your device, not through our servers as a hosted SSH proxy.

Information We Collect

We collect the information needed to run Conduish:

  • Account and authentication information, such as email address, username, account timestamps, email verification, password reset state, OPAQUE password authentication records, and key-derivation parameters. We do not store your plaintext password.
  • Device, session, and security information, such as device name, fingerprint, operating system, app version, device signing public key, sessions, user agent, IP address, request metadata, rate-limit signals, and security events.
  • Vault sync information, including encrypted vault data, encrypted vault names, wrapped vault keys, memberships, roles, storage usage, and sync metadata. We are not designed to read your encrypted vault contents. Some operational metadata needed for sync, access control, limits, and conflict handling is not end-to-end encrypted.
  • Profile and two-factor information, such as avatar color, optional uploaded avatar image, encrypted TOTP secret, and related verification state.
  • Billing information, such as Stripe customer, subscription, invoice, checkout, renewal, cancellation, tax, and limited payment method details. Stripe processes full card and payment details.
  • Website information, including essential authentication cookies and standard server logs. We do not currently use analytics or advertising tracking cookies.

How We Use Information

We use information to provide and secure Conduish; authenticate accounts, sessions, and devices; sync encrypted vault data; manage subscriptions, trials, invoices, and billing; send service emails through Plunk; detect abuse; enforce our terms; meet legal obligations; and respond to requests.

How We Share Information

We do not sell your personal information.

We share information only as needed with providers that help operate Conduish, including Stripe for payments, Plunk for service emails, and hosting, storage, security, and infrastructure providers. We may also disclose information if required by law, to protect Conduish or users, to investigate abuse or security issues, or as part of a company transaction.

Retention and Deletion

We keep personal information only as long as needed to provide Conduish, meet legal and accounting obligations, resolve disputes, enforce agreements, prevent abuse, and maintain security. When you delete your account, we delete or de-identify your data where practical, except for information we need to retain for legal, billing, security, backup, or fraud prevention purposes.

Security

We use reasonable measures to protect Conduish, including HTTPS, hashed session tokens, device signatures, encrypted TOTP secrets, and encrypted vault sync data. No method of transmission or storage is perfectly secure. You are responsible for protecting your devices, SSH credentials, recovery materials, and account access.

Your Choices

You can update profile information, manage active sessions, manage two-factor authentication, update avatars, and manage billing settings where those features are available in the dashboard. You can request access, correction, export, or deletion by contacting us. You can disable cookies in your browser, but essential authentication features may stop working.

Children

Conduish is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide notice through the website, dashboard, email, or another reasonable method.

Contact

Questions about this Privacy Policy can be sent to contact@coldspire.com or mailed to Coldspire LLC, 5900 Balcones Drive STE 100, Austin, TX 78731, US.