{title}
+Last updated: {lastUpdated}
+Last updated: {lastUpdated}
++ Paseo is local-first. Installing or using the open-source software does not send us your + code, prompts, files, terminal output, or agent conversations. This policy explains the + separate data boundaries for local Paseo, the optional official relay, the hosted Paseo Hub, + and paseo.sh. +
-- Paseo is a self-hosted tool for managing coding agents. Your code and data stay on your - machine. + Mohamed Boudra Ziani is the data controller for personal data processed through the + official Paseo website, relay, and hosted Hub. Independently self-hosted daemons, Hubs, + and relays are controlled by their operators and are not covered by this policy.
+Nothing. Paseo runs on your machine and doesn't send us any data.
-+ Paseo runs on your machines. It does not send us analytics, telemetry, advertising + identifiers, or crash reports. +
++ Packaged desktop apps check GitHub Releases for updates. GitHub receives the ordinary + network information needed to answer that request under its own privacy policy. +
++ Agents such as Claude Code, Codex, and OpenCode communicate with their providers using + credentials on your machine. Paseo does not manage or intercept those provider API calls. +
+- If you use the optional encrypted relay to connect your phone to your daemon, the relay - sees: -
-- Your phone and daemon encrypt relay payloads end-to-end with NaCl box encryption - (Curve25519 plus XSalsa20-Poly1305). The relay only carries the ciphertext. -
-The relay is optional. To connect your client and daemon, it processes:
++ Your client and daemon encrypt application traffic end-to-end with NaCl box encryption. + The relay carries ciphertext and cannot read your code, prompts, terminal output, or agent + conversations. Payloads exist in relay memory only while being forwarded. We do not store + message contents. Infrastructure may retain limited operational logs and aggregate metrics + for security, capacity planning, and troubleshooting. +
+- We don't use analytics, tracking pixels, cookies, or ads. The app doesn't - phone home. -
-When you create or use a hosted Hub account, we process:
++ Your repositories, local files, and agent-provider credentials remain on your + infrastructure unless a workflow explicitly sends information to Hub or a connected + service. Hub does not provide AI inference. +
+- Paseo wraps agent providers like Claude Code, Codex, and OpenCode. Those tools - communicate with their own APIs (Anthropic, OpenAI, etc.) using your credentials. Paseo - doesn't manage or intercept those API calls. -
-- If you use voice features with cloud providers (OpenAI speech), your voice data is sent - to those services according to their privacy policies. -
-+ Paseo controls account, billing, security, and service-operation data. When an + organization uses Hub to process personal data in its workflows, that organization decides + why the data is processed and Paseo processes it on the organization's behalf. +
+We don't have your data to sell. Paseo is self-hosted and local-first.
-We process data to:
++ The legal bases are performance of our contract with you, our legitimate interests in + operating and protecting the services, and compliance with legal obligations. +
+- If you have questions about privacy, open an issue on{" "} - - GitHub - - . -
-+ We use Fly.io for hosted infrastructure, Stripe for subscriptions and payments, and GitHub + for software releases and connected GitHub features. Slack, Discord, Linear, and other + services receive data only when you choose to connect or use them. +
++ Some providers may process data outside the European Economic Area. Where required, we use + appropriate contractual safeguards for those transfers. +
++ We do not sell personal data, share it with advertisers, or use it to train AI models. +
+Last updated: February 2025
-+ We keep account and organization data while your account remains active. We retain + operational, workflow, and audit records while needed to provide and protect the service. + Billing records may be kept for legally required accounting and tax periods. Short-lived + authorization codes and sessions expire automatically. +
++ You can request account deletion by emailing us. Some records may remain where the law + requires it or where they form part of another organization's legitimate audit + history. +
++ The marketing website does not use analytics or advertising cookies. Hub uses only the + session and security cookies needed to sign you in and operate your account. +
++ Depending on applicable law, you may request access, correction, deletion, restriction, + objection, or portability of your personal data. Email{" "} + hello@moboudra.com. You may also complain to the{" "} + + Spanish Data Protection Agency + + . +
++ We use access controls, encrypted transport, and limited service permissions. No online + service can guarantee absolute security. Read Paseo's{" "} + + security model + {" "} + or report a vulnerability privately to{" "} + hello@moboudra.com. +
++ The official services are for professional developers and are not directed at children + under 16. +
++ We will update this page and its date when our services or data practices materially + change. +
++ These Terms govern the official services operated at paseo.sh, relay.paseo.sh, and + hub.paseo.sh. By using the official relay or hosted Hub, you agree to them. Our{" "} + Privacy Policy explains how those services process data. +
+ ++ Paseo is open-source software licensed under the Apache License 2.0. You can install, + modify, and self-host it under that license without purchasing Paseo Hub or using the + official relay. +
++ These Terms do not replace or restrict the open-source license. They apply only to + services operated by Paseo. A self-hosted Hub or relay is operated by whoever hosts it. +
++ The relay is an optional service that connects Paseo clients to your daemon without + requiring you to expose the daemon directly. Traffic is encrypted end-to-end between your + client and daemon. The relay carries encrypted data but cannot read its contents. +
++ The relay is subject to reasonable and fair use. We may limit bandwidth, connection + volume, or abusive traffic when necessary to keep it reliable and secure. +
++ Hub lets you connect daemons, configure workflows, receive events from connected services, + and instruct agents running on your infrastructure. Hub does not provide AI inference. +
+You are responsible for:
++ You keep ownership of your prompts, workflow configuration, code, messages, and outputs. + You give Paseo only the permission needed to receive, transmit, store, and process that + content to operate the services you request. +
+We do not sell your content, use it for advertising, or use it to train AI models.
++ Keep your account credentials secure. Organization owners and administrators are + responsible for invitations, permissions, connected services, and activity performed by + their members. If you use Hub for an organization, you confirm that you are authorized to + act for it and to process the data sent through its workflows. +
+You must not use the services to:
++ Current prices, taxes, billing periods, and seat calculations are shown before purchase. + Trial terms are shown when you start a trial. A no-card trial ends unless you add a valid + payment method before it expires. +
++ Paid subscriptions renew automatically for the billing period shown at checkout until + canceled. You can manage payment methods, invoices, and cancellation through the billing + portal. Cancellation normally takes effect at the end of the current paid period. Payments + are non-refundable except where the law requires otherwise. +
++ Stripe processes payments. Paseo does not store complete payment-card details. Nothing in + these Terms removes cancellation, refund, withdrawal, or other rights given to you by + applicable consumer law. +
++ Paseo can connect to services such as GitHub, Slack, Discord, Linear, Anthropic, and + OpenAI. Those services have their own terms and privacy policies. Paseo is not responsible + for their availability, output, or handling of data. +
++ We work to keep the official relay and Hub available, but do not promise uninterrupted + service or a service level unless we agree one in writing. We may change features, + introduce reasonable limits, or suspend access when needed for security, abuse prevention, + legal compliance, or operation of the service. +
++ Where practical, we will give reasonable notice before a change that materially reduces a + paid service. +
++ You may stop using the services or cancel your subscription at any time. We may suspend + access for non-payment, serious abuse, security threats, or a material breach of these + Terms. Where practical, we will explain the reason and allow you to correct it. +
++ Software and automated agents can make mistakes. Review important actions and maintain + appropriate backups. +
++ To the extent permitted by law, the official services are provided as available and + without implied warranties. Paseo is not liable for indirect or consequential losses + caused by agent output, third-party services, or your workflow configuration. Our total + liability relating to a paid service will not exceed the amount you paid for it during the + preceding 12 months. +
+Nothing here limits liability or statutory rights that cannot legally be limited.
++ These Terms are governed by Spanish law. If you are a consumer, you keep the mandatory + protections and court rights provided by the law where you live. +
++ We may update these Terms as the services change. We will announce material changes + through the service or by email where appropriate. Questions can be sent to{" "} + hello@moboudra.com. +
+