Data we keep
On remotxai servers
Section titled “On remotxai servers”| Data | How long |
|---|---|
| Your account: email, name, the date you signed up. | While the account exists. |
| Your Personal workspace and the computers you enrolled: name, operating system, remotxai version, public keys. | While enrolled. Meant to be removed 30 days after you revoke a computer. That clean-up is not automated yet. |
| Sign-in sessions. | Up to 30 days, ending after 12 hours of no use. |
| Email sign-in links. | Deleted when used, or after 10 minutes. |
| A log of account actions (create, invite, enrol, log out), with ids and no addresses. | 365 days. |
| Usage counters per minute: bytes in and out, frames, connection seconds. Used for billing. | Kept for billing. No deletion period is set yet. |
| Encrypted backups of the database. | 35 days. |
remotxai servers hold no prompts, replies, code, files or secrets. The relay keeps no session data on disk. It holds connection state in memory and forgets it when the connection ends.
Platform logs can hold connection events, for example which computer linked and when. They hold no message content.
Who handles it for us
Section titled “Who handles it for us”- OVH hosts the servers.
- Cloudflare stores the encrypted database backups. They are encrypted before they leave the server.
- Resend delivers sign-in emails, if you use an email link.
- Google confirms your identity, if you sign in with Google. remotxai keeps your Google account’s identifier and email, and no Google tokens.
On your computer
Section titled “On your computer”Everything in ~/.remotxai: the computer’s key, settings, session history, attachments, an audit log of approvals and the secrets you sent for as long as their sessions last.
remotxai data exportwrites a copy of it, leaving out keys and tokens.remotxai data purge --scope sessionsremoves session history. The scopes aresessions,attachments,auditandall. It keeps the computer’s key and the list of paired phones.
On your phone
Section titled “On your phone”The browser stores the key that identifies the phone, the names and fingerprints of your computers, the point you last read in each session, language and theme, and any message you typed and did not send. Clearing the site data removes all of it. You pair again afterwards.