Privacy policy

Last updated: October 21, 2026

Short version: your conversations, files and keys live on your own computer, not with us. We collect what we need to run the website, the 30-minute demo and the managed computers, and nothing to sell.

1. The self-hosted edition

If you install ShellTeam on your own server, it sends us nothing. There is no telemetry. Three things leave the box only if you use them:

• The installer download. Fetching https://shellteam.sh/install is logged by our web server like any page view (IP address, user agent, time). That is how we count installs.
• The feedback button. When you press send, your message, and anything you chose to attach, goes to our issue tracker.
• Updates. If you turn on automatic updates, the box fetches new versions from GitHub.

Your agents talk directly to Anthropic, OpenAI, Google or whichever provider you sign in to, under your own account and their terms.

2. This website (shellteam.sh)

• Server logs. Our web server records each request: IP address, user agent, referring page, the page asked for, and the time. We use them to count visitors and spot abuse. Logs are rotated and kept for at most a few months.
• No trackers. No analytics script, no advertising pixels, no third-party fonts. If you arrive from a link with a campaign tag, the page keeps it in your browser's session storage so a sign-up can say where it came from.
• The mailing list. If you leave your email to follow the project, it goes to Formspree, our form provider, and to us. You can ask us to remove it at any time.

3. The live demo

To give you a seat, we keep your email address and IP address, and a record of the session (agent transcripts, shell history, cockpit and request logs) copied off the box before it is wiped. We keep it for 30 days to handle abuse reports and to see how the trial is used, then delete it. If you ticked the box to keep your files, the code and pages in your home folder are kept for 7 days so they can be restored onto a computer you buy. The full demo terms are on the demo page.

4. Managed computers

• Account and billing. Your email address, the address you picked (name.shellteam.sh) and your subscription state. Payments go through Stripe; we never see or store your card number.
• The machine. Your computer is a dedicated server rented from Hetzner, in Germany or Finland when capacity allows, otherwise in the US or Singapore. Its DNS name is managed at Porkbun. Everything you and your agents put on it stays on it.
• We do not log in to your box. It holds no SSH key of ours. It reports two things to us so we can fix problems: whether its first install worked (with the tail of the install log if it failed), and every night, whether its update worked and which versions of the coding agents it now runs. Nothing about your files or conversations is in these reports.
• Voice input. Voice notes are sent through our relay to ElevenLabs to be transcribed. We count how many you send, for the monthly allowance; we do not keep the audio.
• Email. We send setup and account emails through Brevo.

When a subscription ends, we delete the server and everything on it within 30 days. Take a copy of anything you want to keep before then.

5. What we never do

• We never sell your data.
• We never read your conversations or files, and never use them to train AI models.
• We never resell your AI plan or see your Claude, ChatGPT or Google password.

6. Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, including your account, demo records and mailing-list entry. Email contact@ormind.ai and we answer within 30 days.

7. Changes

If this policy changes in a way that matters, we update this page and email the owners of managed computers.

Data controller