Who is responsible
Palphi LLC, based in Ohio, United States, operates Palshell and is responsible for personal information we process for our website, product licensing and support. Contact support@palphi.com for privacy questions or requests.
This notice covers Palshell services, not every website, device, AI provider or portal you choose to connect. Those destinations process information under their own policies.
Your local workspace
Palshell is local-first. Saved workspace records, settings and non-secret connection metadata are generally kept on your device. Stored credentials use the platform credential store: Windows Credential Manager or macOS Keychain. Some working content, such as comparison inputs, is held in memory.
Local-first does not mean that nothing leaves your device. Connections contact the destinations you choose. AI assistance can send prompts and selected or bounded session context to your configured provider. Exports and support attachments can also disclose information when you choose to share them.
We do not automatically receive your local workspace contents merely because you create a connection or open a workspace. Keep your operating-system account secure, review exports and AI context, and avoid sharing secrets. The security page explains these boundaries.
Information we process
- Website requests: hosting and delivery systems process technical request information, such as IP addresses, requested URLs, browser or device information, timestamps and security or error metadata, to deliver and protect the website.
- Purchase and license records: when paid licensing is available, order identifiers, purchased edition and plan, payment or subscription status, activation records, device identifiers needed for license enforcement and verification timestamps are processed to issue and validate licenses.
- Support: your email address, messages, order references and attachments you voluntarily provide. Recovery support also verifies ownership of the original completed order and its billing email before releasing access.
- Security sessions: purchase or recovery functionality uses limited session and anti-abuse records to protect access to license delivery. Session expiration does not necessarily mean every related business record is immediately deleted.
Enter payment details only in the authorized checkout. Do not email complete card details, passwords, private keys, API secrets or license keys. Support may need non-secret order references, but an email address or order identifier alone is not proof of license ownership.
Why we use information
We use information to deliver the website, fulfill and verify licenses, enforce device limits, provide support and recovery, process refund or cancellation requests, prevent fraud and abuse, diagnose service problems, meet legal obligations and establish or defend legal claims.
Where applicable data-protection law requires a legal basis, processing may be necessary to perform a contract, comply with a legal obligation, pursue legitimate interests in security and reliable operation, or act on your consent where consent is required. The applicable basis depends on the purpose and your jurisdiction.
The current public marketing site contains no advertising trackers or product-analytics integration.
Service providers and connected destinations
Our service providers process information needed to operate Palshell services. These include OpenAI Sites and Cloudflare for website hosting or delivery, Cloudflare for licensing infrastructure, and Google Workspace for the public support mailbox. Provider infrastructure and staff may process information in the United States or other countries where they operate.
Paddle processes checkout, billing, tax and payment information as merchant of record under its Privacy Notice. We receive transaction and entitlement information needed for fulfillment and support; do not submit card information to Palshell support.
Optional AI requests are sent to the provider or endpoint you configure, such as OpenAI, Anthropic, Microsoft 365 Copilot, a local Ollama service or an OpenAI-compatible endpoint. Provider retention, training, account and regional settings are governed by that provider’s terms and your account configuration—not by a blanket Palshell promise. See AI provider documentation.
SSH, APIs, RDP and web portals communicate with their configured destinations. Remote services may collect connection or account information independently. We may also disclose information where legally required, to protect rights or security, or as part of a lawful business transfer subject to applicable safeguards.
Cookies and browser storage
The marketing site stores your chosen light or dark appearance in browser local storage. You can remove that preference using your browser’s site-data controls.
When checkout, confirmation or recovery functions are enabled, essential cookies and session records protect license delivery and request integrity. Paddle may use its own checkout technologies under its policies. Blocking essential storage can prevent those features from working.
We do not add advertising or analytics cookies to the current marketing site. If we later introduce optional tracking that requires consent, we will update the notice and obtain the required consent before enabling it.
Retention and security
We retain information for as long as reasonably needed for its purpose, including active licensing, support, accounting, tax, security and legal obligations. The period depends on the record, the relationship and applicable requirements. We do not promise that all records disappear immediately after cancellation or a browser session expires.
Local workspace retention is primarily under your control. Deleting local app data does not automatically erase transaction, licensing or support records held by us or a provider; contact support for a request concerning those records.
We use safeguards appropriate to the service, including encrypted transport and restricted access to sensitive service data. No system is completely secure. Protect your device, provider accounts and license information, and send only the minimum information needed for support.
Your choices and privacy rights
You can choose whether to use AI assistance and connected services, review the content you send, manage local workspace data and clear browser site data. Those choices may limit features that depend on a connection or session.
Depending on your location and applicable law, you may have rights to request access, correction, deletion or a portable copy of personal information, restrict or object to certain processing, withdraw consent or complain to a data-protection authority. Some records must be retained, and rights may be subject to lawful exceptions.
Send requests to support@palphi.com. We may verify your identity before acting, but do not send passwords, license keys or payment-card details. For information independently controlled by Paddle or your chosen provider, use that provider’s privacy contact as well.
Children, changes and contact
Palshell is intended for users managing technical systems and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided it to us, contact support so we can investigate and take appropriate action.
We may update this notice when our practices or legal requirements change. Published revisions will state an effective date, and we will provide additional notice or obtain consent when required. We will not treat a later revision as permission to disregard commitments made when information was collected.
Privacy contact: support@palphi.com, Palphi LLC, Ohio, United States.