LEGAL & PRIVACY COMPLIANCE

Privacy Policy

Last updated: October 3, 2026 | Effective Date: August 16, 2026

Executive Summary: Fleet Manager is an agentless, mobile-first operations tool for managing remote VPS servers directly over SSH. Your SSH keys and server passwords NEVER leave your device. All sensitive credentials are stored exclusively in hardware-backed secure storage (Android KeyStore / iOS Keychain).

1. Who We Are

Fleet Manager is developed and operated by StateCraft (Developer: Zcross091), building independent, developer-first operations tools.

If you have any questions or data requests regarding this Privacy Policy, you can reach our team directly at:

Developer Support Email: support@statecraft.dev
Alternative Contact: robinw091@gmail.com
Official Repository: github.com/Zcross091/VPS-Fleet-Agent

2. Information We Collect and Process

A. User Account Information

When you create an account, we collect your email address and a cryptographic hash of your password. Authentication is powered by Supabase Auth. We never see or store your raw plaintext password.

B. Subscription & Licensing Data

We store whether your account is in an active trial period or paid subscription, along with the subscription expiration timestamp, to manage access to pro features. Payment processing is handled exclusively through Google Play Billing. We never collect or store your payment card numbers, bank details, or billing addresses.

C. VPS Connection Profiles (Stored Locally on Device ONLY)

🔒 100% Zero-Cloud Credential Architecture:

When you add a VPS connection (IP address/hostname, SSH port, username, private key, or password), this data is saved strictly locally on your device using encrypted storage:

Android: Hardware-backed Android KeyStore / AES-256 encrypted SharedPreferences.
iOS: Hardware-backed Apple Keychain.

None of your SSH private keys, passwords, or server addresses are ever transmitted to or stored on our servers. The app establishes a direct, encrypted SSH2 socket from your mobile phone to your VPS over port 22.

3. What We Do NOT Collect

Zero Server Data Harvesting: We do not log, read, or collect the contents of your remote files, databases, or project repositories.
Zero Remote Command Logging: Commands executed in the terminal or PM2 process manager are sent directly to your server and are not tracked by us.
No Third-Party Advertising SDKs: We do not include AdMob, Facebook SDK, or marketing tracking beacons.
No Data Selling or Brokering: We do not sell, rent, or trade your personal data to third parties under any circumstances.

4. Third-Party Services

We integrate with trusted enterprise infrastructure providers strictly for core application functionality:

Supabase Inc. (Authentication & Profile Database) — Stores user account credentials with Row-Level Security (RLS). Privacy policy: supabase.com/privacy.
Google Play In-App Billing (Subscription Management) — Handles all financial transactions and receipt verification. Privacy policy: policies.google.com/privacy.

5. Data Retention & Account Deletion Policy

We retain your account profile (email and subscription status) for as long as your account is active.

How to Delete Your Data:

You have the right to request immediate deletion of your account and all associated profile records at any time. To request deletion:

Send an email from your registered email address to support@statecraft.dev or robinw091@gmail.com with the subject "Account Deletion Request".
All account data and Supabase profile records will be permanently purged within 48 hours.
To delete local VPS keys, simply delete the server card from inside the Fleet Manager mobile app or uninstall the app to wipe the local KeyStore vault.

6. Security Safeguards

We implement rigorous industry-standard administrative, technical, and physical safeguards:

Encrypted HTTPS/TLS 1.3 transport for all API communication with Supabase.
PostgreSQL Row Level Security (RLS) policies ensuring users can only read their own profile row.
Hardware-isolated cryptographic storage for all SSH credentials on mobile devices.

7. Children's Privacy

Fleet Manager is intended for developers, system administrators, and bot operators. It is not directed to children under the age of 13. We do not knowingly collect personal identifiable information from children under 13.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect product enhancements or legal compliance updates. Any changes will be posted on this page with an updated revision date.

9. Contact Us

If you have any questions, concerns, or feedback regarding this Privacy Policy, please contact us:

Email: support@statecraft.dev / robinw091@gmail.com
Developer: StateCraft (Zcross091)
Location: Lucknow, India