Privacy Policy

March 31, 2026

This Privacy Policy ("Policy") describes how Recut LLC ("Company," "we," "our"), a Delaware limited liability company, collects, uses, and shares personal information when you use the carryOn software and website (the "Service").

1. Information We Collect

a. Personal Information:

When you sign in to the Service, we collect personal information you provide through your chosen authentication provider, such as your email address and profile name. We support sign-in via Google, GitHub, and Microsoft.

2. How We Use Your Information

a. Provide and Maintain the Service:

To deliver, maintain, and improve the Service's functionality, including terminal session persistence, device management, and remote access.

b. Communicate with Users:

To respond to inquiries, provide support, and send important notices about the Service.

c. Legal Compliance:

To comply with applicable laws, regulations, and legal processes.

3. Information Sharing

a. Third-Party Service Providers:

We may share information with third-party service providers to facilitate the Service. These providers are contractually obligated to protect your data and comply with applicable data protection laws.

b. Legal Requirements:

We may disclose information to comply with applicable laws or respond to legal requests.

4. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

5. Your Choices

a. Access and Update:

You can request access to or correction of your personal information by contacting us.

b. Account Deletion:

You can request deletion of your account and associated data by contacting us.

6. Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, protecting your personal data from unauthorized access, alteration, disclosure, or destruction. Terminal session data is end-to-end encrypted and cannot be read by our servers.

7. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under this age.

8. GDPR Compliance

a. Legal Basis for Processing:

We process your personal data based on the following legal grounds:

  • Consent: We will obtain your explicit consent to collect your personal data when required by GDPR.
  • Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

b. Your Rights Under GDPR:

Under GDPR, you have the following rights:

  • The right to access your personal data.
  • The right to rectify inaccurate or incomplete data.
  • The right to erasure ("right to be forgotten").
  • The right to restrict processing.
  • The right to data portability.
  • The right to object to processing.
  • The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

9. Changes to This Policy

We may update this Policy to reflect changes in our data practices. We will notify users of any material changes.

10. Contact Us

For questions or concerns about this Policy, please contact us at legal@carryon.dev.