## Core Principle: Local-First Security

APX Terminal is architected to keep your secrets local. **We do not transmit, sync, or store your SSH Private Keys, Server Passwords, or Connection Details on our servers.** All sensitive data is encrypted using AES-256 and stored locally on your device's filesystem.

## 1. Information We Collect

We only collect the minimal data required to validate your license and provide updates:

- **License Data:** When you activate a license, we collect your License Key and a unique Device Identifier (Instance ID) to prevent license abuse.
- **Email Address:** Collected via our payment processors (Mayar/Lemon Squeezy) to send you the license key and critical update notifications.
- **Update Checks:** The app periodically checks our update server (GitHub Releases) to notify you of new versions. This request includes your current app version and OS type.

## 2. AI Features (BYOK)

If you use the AI Neural Agent features:

- **AI Provider API:** You provide your own API Key ("Bring Your Own Key"). Your API Key is stored locally and encrypted.
- **Data Transmission:** When you ask the AI a question, the query is sent directly from your computer to AI Provider's servers. **It does not pass through APX Terminal's servers.**
- Please refer to AI Provider's Privacy Policy regarding how they handle API data.

## 3. Third-Party Services

We use trusted third-party services for payments and infrastructure:

- **Lemon Squeezy:** Payment processor and Merchant of Record for international orders.
- **Mayar.id:** Payment processor for Indonesian orders.
- **Cloudflare:** Used for DNS, DDoS protection, and Worker-based license validation.

## 4. Data Retention

We retain license activation data indefinitely to allow you to reactivate your software on new devices. You may request the deletion of your personal data by contacting support.

## 5. Contact Us

If you have questions about this privacy policy, please contact us at: [team@apxterminal.com](mailto:team@apxterminal.com)