Privacy Policy

Who we are

CLI Setu is provided by Evyasys (“Evyasys”, “we”, “us”). For the purposes of the EU/UK General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary. For the California Consumer Privacy Act as amended by the CPRA, we are the business responsible for your personal information.

This policy covers the CLI Setu mobile app (Android, on Google Play), the companion CLI you install on your computer, and this website (https://clisetu.com). It does not cover the AI tools you choose to run through your terminal (such as Claude Code, Codex CLI or Gemini CLI) — see Third-party AI tools below.

Information we collect

We try to collect as little as possible, and we design the product so that the most sensitive thing — the content of your terminal sessions — is not something we can read at all.

How we use information

• Operate the relay: authenticate devices, route encrypted packets, and keep sessions in sync across your computer and phone.
• Provide account features: sign-in, device management, settings sync and subscription status.
• Send you push notifications you have asked for, such as an agent waiting for input.
• Diagnose and fix problems using crash reports and diagnostics.
• Respond to support requests and communicate important service updates.
• Detect, prevent and investigate abuse, fraud and security incidents on the relay.
• Process purchases and renewals through Google Play, if you make one.
• Meet legal, tax and regulatory obligations.

Our legal bases

Where GDPR/UK GDPR applies, we rely on the following legal bases:

• Contract — account, pairing, relay operation and subscription features, because we need them to provide the service you asked for.
• Legitimate interests — security monitoring, abuse prevention, crash diagnostics and product improvement, balanced against your rights.
• Consent — any optional marketing communications you opt into, which you can withdraw at any time.
• Legal obligation — retaining certain records where required by law (for example, billing records).

What we never do

• We never sell your personal data, and we do not “share” it for cross-context behavioural advertising as defined under the CCPA/CPRA.
• We never read, log or store the plaintext content of your terminal sessions — it is end-to-end encrypted between your paired devices, and our relay only handles encrypted packets.
• We never use your terminal content, code or session data to train AI models, ours or anyone else's.
• We never send your terminal content or code to any AI provider on your behalf — the AI tools you run talk to their own providers directly from your computer, under your own account.

Your content & responsibility

Because terminal sessions are end-to-end encrypted, we have no visibility into, and no control over, what you type, paste, display or run through CLI Setu. You decide what content passes through your terminal, and you are responsible for not exposing sensitive information — your own or anyone else's — through a session, including other people's personal data, credentials, or confidential material you are not authorized to share. If your work involves other people's personal data (for example, as an employee or contractor), you remain responsible for handling it in line with your own obligations to those individuals and your organization.

Third-party AI tools

CLI Setu does not provide AI models. When you run tools like Claude Code, Codex CLI or Gemini CLI through your terminal, you do so with your own account, subscription or API key, directly with that provider, under that provider's own terms and privacy policy. CLI Setu only relays the encrypted terminal stream between your computer and your phone; it is not a party to, and has no visibility into, your usage of those third-party tools. Please review each provider's privacy terms separately.

Claude, Codex, Gemini and other product names mentioned above are trademarks of their respective owners — see our trademark notice.

This website

https://clisetu.com doesn't use cookies or any kind of visitor tracking, and there's no cookie banner because there's nothing to ask consent for. It stores nothing on your device beyond what your browser itself does when it visits any page — we don't set cookies and the site's own script doesn't write anything to your browser's storage.

• Fonts are loaded from Google Fonts. When a page loads, your browser sends a request directly to Google's servers to fetch the font files, which is subject to Google's own privacy policy.
• Video tutorials embed YouTube using youtube-nocookie.com, and the embed only loads, and only contacts YouTube, once you press play.

Third-party privacy practices

To the maximum extent permitted by applicable law, we are not responsible for the privacy practices of third parties whose products, sites or services you may use alongside CLI Setu, including third-party AI tools and models (see above), the Apple App Store or Google Play, WhatsApp and Meta Platforms, Inc. (if you contact support via WhatsApp), Google Fonts and YouTube (see above), and any external site we link to. Each of those third parties processes data under its own privacy policy, which we encourage you to read; a link to our website is not an endorsement of that party's data practices.

Sharing & processors

We share personal data only with service providers (processors/sub-processors) who help us run CLI Setu, under contracts that require them to protect your data and use it only as we instruct. These fall into the following categories:

• Cloud hosting and infrastructure providers (for the relay, storage and backups).
• Push notification services (Firebase Cloud Messaging).
• Crash reporting and diagnostics providers.
• App store platforms (Google) for purchases, subscription management and app distribution.
• Email and support/helpdesk tools used to manage your support requests.
• WhatsApp (Meta Platforms, Inc.) for support conversations you choose to start with us over WhatsApp, processed under Meta's own terms and privacy policy.

A current, named list of sub-processors is available on request by emailing support@evyasys.com. We may also disclose information where required by law, to enforce our terms of service, or to protect the rights, safety and security of Evyasys, our users or the public.

International transfers

CLI Setu is offered from India, and our service providers may process data in other countries, including the United States and the European Economic Area. Where we transfer personal data internationally, we use appropriate safeguards recognised under applicable law — such as Standard Contractual Clauses, an adequacy decision, or an equivalent mechanism under the GDPR, UK GDPR or the DPDP Act — to protect your data wherever it is processed.

Data retention

• Account information — kept while your account is active, and for a limited period afterwards to allow reactivation and meet legal obligations, then deleted or anonymised.
• Connection metadata — kept for a limited operational window (typically a few months) for security and troubleshooting, then aggregated or deleted.
• Encrypted session content — not retained by us in readable form; where transient encrypted buffering is used to deliver messages, it is cleared once delivered or after a short expiry.
• Crash & diagnostic data — kept only as long as needed to investigate and resolve issues.
• Support communications — kept for a reasonable period to handle follow-ups and for quality review.
• Purchase records — kept as required by tax, accounting and app-store obligations.

How we protect data

Terminal sessions use end-to-end encryption between your paired devices, so session content is unreadable in transit and at rest on our systems. We use device-specific key pairs exchanged during pairing, encrypted connections (TLS) for all network traffic, access controls and monitoring on our infrastructure, and the ability to revoke any device's access instantly from Settings.

That said, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee the absolute security of any data. Securing your own devices, pairing codes and account credentials (see our Terms of Service) is an important part of keeping your sessions safe, and to the maximum extent permitted by applicable law our liability for any security incident is limited as set out in the Limitation of liability section of our Terms of Service, which applies to matters covered by this policy.

Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete (erasure) your personal data, subject to legal exceptions.
• Port your data to another provider in a structured, commonly used format.
• Object to or restrict certain processing, including processing based on legitimate interests.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.
• Non-discrimination — under the CCPA/CPRA, we will not deny you goods or services, charge different prices, or provide a different level of service for exercising your privacy rights.

Exercising your rights

• In the app: go to Settings → Account → Delete account to permanently delete your account and associated data.
• By email: contact support@evyasys.com for access, correction, portability, objection or any other privacy request. We may need to verify your identity before acting on a request.
• We aim to respond within the timeframe required by applicable law (for example, one month under GDPR, or as specified under the DPDP Act and CCPA/CPRA).

Children's privacy

CLI Setu is not directed to, and may not be used by, children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact support@evyasys.com and we will delete it.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. We will update the “Last updated” date above, and where changes are material we will provide additional notice, such as an in-app notification or email.

Contact & grievance officer

Questions or requests about this policy can be sent to support@evyasys.com.

Grievance Officer (Digital Personal Data Protection Act, 2023): a named Grievance Officer will be published here once designated. Until then, please direct DPDP Act grievances to support@evyasys.com, and we will route them appropriately.