Effective October 14, 2026 · Applies to AgentPanes for mobile and Mac, its optional mobile notification helper, and agentpanes.com
Who operates AgentPanes
AgentPanes is operated by Aditya Sharma. For privacy questions or requests, contact support@agentpanes.com.
Your SSH connections
The app connects from your device to SSH hosts you choose. Hostnames, usernames, authentication information, agent/session metadata and terminal input/output are used to provide those connections. Terminal sessions are not routed through an AgentPanes application server. If you use Tailscale or another network service, that service handles network traffic under its own terms and privacy policy.
Information on your device
Saved host profiles, pinned host keys, integration permissions and terminal preferences are stored on your device. Saved authentication secrets are protected using platform secure storage: the iOS and macOS Keychain, or Android Keystore-backed storage. Agent and terminal information is processed locally for display. You can edit/remove host profiles and revoke remembered integration permissions in the app.
App lock uses the platform’s authentication facilities. AgentPanes does not receive your biometric templates or device passcode.
AgentPanes for Mac
The Mac app connects directly to the SSH hosts you choose. Its activity notifications are generated locally while the app observes your machines. The Mac build does not use the optional mobile notification relay or Firebase SDK. The Firebase and relay disclosures below describe the mobile builds.
Terminal text is processed in memory for display and accessibility. It is not sent to AgentPanes services. App lock hides protected terminal content.
On macOS 26 or later, optional English dictation uses Apple's on-device speech recognition after microphone permission. The system may need to download language assets. You can review recognized text before sending it to your remote terminal.
If you choose to send a Mac support report, your email identity, report text and optional app/macOS versions reach support through your chosen email app. Reports are not sent automatically. The support-provider and retention sections below also apply to Mac reports. Review your message and remove private information.
What stays out of our services
AgentPanes does not include advertising or an analytics SDK that tracks how you use the app. Without optional notifications, it does not upload agent replies, host inventories or terminal contents to our services. SSH passwords and private-key files are not sent to the notification service. Bug-report logs are not attached automatically. Apple and Google may separately provide diagnostics or store analytics according to your platform settings and their policies.
Firebase’s delivery libraries can send technical SDK diagnostics to Google, such as counts of dropped transport events and the size of a local event cache, to monitor and improve the libraries. The bundled GoogleDataTransport privacy manifest declares these diagnostics as analytics not linked to you and not used for tracking. This is separate from agent reply previews and does not enable Google Analytics for Firebase in AgentPanes.
Optional notifications and reply previews
Notifications are off by default and may not be available in every app build. Enabling them is separate from SSH access: you approve a machine and phone in the app, then run its pairing command on that machine. You do not need this helper for normal SSH or agent access.
The helper reads existing Herdr/tmux metadata and supported agents’ local activity records under the selected SSH user. It does not install agent hooks or change agent sessions. When a new supported activity event is observed, a preview-enabled pairing can send the agent type (such as Codex, Claude or Hermes), your saved machine label, an opaque session identifier, the event type and time, and a short excerpt of the agent’s reply, up to 180 Unicode code points. The machine label can include a hostname if you saved one as its name. The helper selects assistant reply text, excluding user messages, reasoning blocks and tool output; it does not upload full transcripts. A reply can still contain secrets or confidential work. Do not enable previews for work you cannot share with the delivery providers.
Delivery also uses the phone’s push-registration token, random pairing/subscription identifiers, authentication tokens or their hashes, and helper heartbeat/error information. These identify the destination and allow pairing, delivery, retry and revocation. They are used to operate and secure notifications, not for advertising, profiling or model training by AgentPanes.
Notification data passes from the helper through our Cloudflare service and Google Firebase Cloud Messaging. iOS delivery also uses Apple Push Notification service. Transport is encrypted using HTTPS/TLS, but notification content is not end-to-end encrypted: the delivery services process it. Notifications can appear on your lock screen. Your operating-system settings control how much is shown. Cloudflare, Google and Apple may also process technical connection and delivery information under their own policies.
Notification retention and removal
The helper keeps private pairing/configuration files and pending notification state on your machine. A pending reply excerpt can remain there while delivery is being retried, until the relay accepts the event or the pairing is removed/revoked and observed by the helper. The installer’s removal command deletes its local pairing and state files.
In the relay’s active database, reply excerpts are cleared after the push provider accepts delivery or when you disable that phone’s pairing. Provider acceptance does not guarantee that the phone displayed the notification. Undelivered events stop being eligible for delivery after 24 hours; the daily cleanup clears their excerpts, normally within 48 hours of creation. Event metadata is retained for up to seven days plus the daily cleanup interval. Queue messages contain opaque identifiers, not reply excerpts. Providers, infrastructure backups and your phone may retain data according to their own retention processes.
Pairing records persist until disabled and may retain opaque identifiers, authentication hashes and operational timestamps afterward to support revocation and prevent replay. Disabling clears the relay’s active push token and machine label for that pairing and stops new delivery even if the machine is offline. The helper can remain installed for other paired phones. Removing a host profile or uninstalling the mobile app is not a substitute for revoking notifications first. Contact support to request deletion of retained service data; never email your pairing code or authentication token.
Older status-only pairings stay status-only when the helper is updated. Reply previews require the app’s explicit preview consent. Updates do not silently grant additional data access. Installation and removal scope is described in Help.
When you contact support
If you choose to send a bug report or email, we receive your email address and the information you send, including any optional app/OS versions or attachments. Please review it and remove secrets and confidential work first.
Support email is processed through Cloudflare Email Service and our private mail system. Messages and attachments may be stored in Cloudflare D1/R2 and forwarded to a Gmail inbox so we can read and respond. These providers process that information to deliver and operate support. We use it to investigate the request, reply, improve reliability and prevent abuse—not for advertising.
Website visits
This website is hosted by Cloudflare. We do not set advertising/analytics cookies or load third-party tracking scripts. Cloudflare processes technical information such as IP addresses, request data and security events to deliver and protect the website. A mailto link opens your chosen email application; it does not submit a form in the background.
Retention and your choices
We keep support correspondence as needed to resolve issues, maintain support history and meet applicable obligations. Contact us to request access, correction or deletion of information you sent, or to ask about retention. We may need to verify that a request relates to your information, and may retain information where required by law or for legitimate security reasons. Deleting a host in the app does not delete emails you separately sent to support or data on your server.
Service providers and international processing
Cloudflare, Google, Apple and your chosen infrastructure providers may process information in countries other than your own. We do not sell personal information. We may disclose information where required by applicable law or to address security, fraud or abuse.
Children and changes
AgentPanes is a developer tool, not a service directed at children. Contact us if you believe a child has supplied personal information to support. We may update this policy as the product changes; the effective date above identifies this version.