Privacy policy
What this covers
This draft describes account information, encrypted workspace storage, connections, sharing, billing, and support on SHAI. Roameo Inc. is responsible for the account and service data described here. Information on servers you connect remains subject to your own organization’s rules and any applicable agreements.
Information used to provide SHAI
- Account and authentication information, including contact details you provide, passkey public credentials, active sessions, and security events.
- Encrypted vault data that can include saved connection settings, private keys, passwords, and workspace preferences. Supported unlock methods operate in your browser; the server stores the encrypted envelope.
- Routing and usage information, such as connection destinations, account and workspace identifiers, traffic totals, connection times, and technical errors needed for routing, quotas, troubleshooting, and abuse prevention.
- Sharing information, including workspace titles, invitations, guest email addresses, access permissions, expiry, and sharing status.
- Billing information, including plan, subscription state, payment-provider references, invoices, and usage allowances when billing is available.
- Support information you submit, and technical or visitor-activity information collected by the support widget.
Connection content and its limits
SSH authentication and SSH encryption run in the browser. A relay routes encrypted SSH traffic and needs destination and connection metadata. That does not mean every SHAI feature is opaque to the service: hosted application previews handle HTTP requests and responses, and information you send to support is available to support personnel and the support provider.
When you share a workspace, authorized guests can see the content you expose and may execute commands or edit files if you grant control. Guests can copy information they can see. Ending access does not erase copies they have already made.
Why information is used
Information is used to operate and secure accounts, synchronize encrypted settings, connect to infrastructure, administer sharing, meter hosted services, handle billing, provide support, and meet legal obligations. Where a privacy law requires a specific legal basis or consent, the applicable basis and choices must be documented before this draft becomes effective.
Service providers and processing locations
Hosting and routing providers, email delivery services, payment providers, and the support provider may process information needed for their functions. SHAI currently embeds Helpr for support. Processing locations, contractual safeguards, any affiliate access to personal information, and a current provider list must be confirmed for the final policy. IP ownership alone does not describe a data-sharing arrangement.
Retention, deletion, and your choices
Use account controls to manage sessions and passkeys, export supported encrypted backups, and revoke sharing access. Contact support for requests concerning access, correction, export, or deletion of personal information. We may need to verify that a request comes from the account holder. Retention and backup-deletion schedules require confirmation for the final policy; this draft does not promise a particular deletion deadline.
Depending on the laws that apply, you may have additional rights, including objection, restriction, portability, or a complaint to a supervisory authority. Nothing in the final policy should limit rights that cannot lawfully be limited.
Browser storage and support
Authentication, preferences, and certain reconnect or recovery features use browser storage. Third-party support has its own data handling. Read the cookie and browser-storage draft for the categories currently identified.
Contact
For a privacy request, contact SHAI support and identify the request as a privacy matter for Roameo Inc. Do not send private keys, recovery passwords, or full payment-card details.