Privacy policy

The company responsible for this service is shenas ai, Inc., a Delaware corporation. For postal correspondence about this policy, use our registered agent:

• Email: [email protected]
• Postal: shenas ai, Inc., c/o Legalinc Corporate Services Inc. (Registered Agent), 131 Continental Drive, Suite 305, Newark, DE 19713, United States, Attn: Privacy.

We use our Delaware registered-agent address as the public mailing address for privacy correspondence so that mail to "shenas ai, Inc., Attn: Privacy" reaches us through a stable corporate channel rather than a residential address.

We have not yet engaged an Article 27 representative in the Union. If you are an EEA or UK resident and need to contact a representative directly, please contact[email protected] in the meantime, and complain to your local supervisory authority via §7 if needed.

In European law terms, we are the data controller for the data described in this policy. That means we decide what data is collected and what it is used for, and we are accountable for those decisions.

This policy applies to the Shenas centralised services:

• The Shenas account at auth.shenas.net, which is your single sign-on to the two services below.
• The community chat at matrix.shenas.net, where Shenas users and developers talk to each other.
• The device registry, which records the shenas devices you register against your account. It holds no network addresses and no message contents; see §3.3.
• The marketing site at shenas.ai.
• Customer support correspondence you send us.

This policy does not apply to:

• Your shenas data. shenas runs on your hardware. It sources data from the services you connect, stores it on your hardware, and uses it for analytics on your behalf. None of that is sent to us. The data on your node is governed by your own choices and by any disclosures the shenas software shows you at the time you grant a third-party connection.
• The open-source Shenas project at shenas.org. The OSS project does not, by itself, collect personal data from end users.
• Third-party services your shenas node sources data from (Strava, Google, Spotify, Withings, Garmin, and others). Those services have their own privacy policies and process your data under those policies, not ours.

3.1 Your Shenas account

We hold:

• Your email address, used to identify you and to send security and account messages.
• Your chosen display name for community chat.
• A salted hash of your password (never the password itself). If you sign in via a third-party identity provider, we hold the linkage but not their credentials.
• Multi-factor authentication enrolments if you enable them (the registered factor, not the secrets you keep on your device).
• Sign-in event records — a record of each successful sign-in to your account (when it happened, and whether it signed you in, linked an existing account, or created a new one), kept for security and to help you spot abuse of your account.

The account itself — your email address, display name, password hash and multi-factor enrolments — is stored at auth.shenas.net. The sign-in event records are stored in the Shenas application's own datastore.

3.2 Community chat (matrix.shenas.net)

The community chat is a Matrix server. When you participate, we hold:

• The messages you send in public rooms and in private rooms you participate in.
• Room and channel membership — which rooms you are in.
• Presence and typing indicators while you are connected.
• Display name and avatar you set for chat.

Matrix is a federated protocol. If you join a room that includes users on other Matrix servers, your messages reach those servers as part of the protocol. We cannot retract messages from other servers; you can ask them directly, and we can help with the request.

3.3 The device registry

When you register a shenas device against your Shenas account, we hold one record for it:

• A device identity record — the public key you generated on the device, the device name you chose (which defaults to a randomly generated, non-identifying string like "calm-ridge-47"), the device type (laptop, desktop, mobile, server), and the time we last saw the device.

That is the whole record. We do not hold network addresses for your devices, any record of which of your devices has synced with which, or any message your devices exchange. Devices that sync today do so directly, over connections that do not pass through us, and each one is configured with its peers on the device itself.

What we have built and not switched on. Apeer directory would hold, for each of your devices, the network addresses it can currently be reached on, so your other devices could find it without you copying an address by hand. It is written, it is switched off in the deployed service, and it holds nothing today. It is built to hold current addresses only, expiring within the hour, with no record of which device contacted which. The same is true of arelay that would carry traffic between two of your devices that cannot reach each other directly: not deployed, holding nothing. We will update this policy before either one is turned on.

Who can see your device records. You, via your own Shenas account, and Shenas operators investigating an abuse or operational incident — including through an internal support view that lists registered devices across accounts. That view shows device records only: no addresses, and no record of which devices sync with each other. Your device records are not visible to other Shenas users.

3.4 Marketing site (shenas.ai)

The marketing site is mostly static. We log basic web-server access (request URL, response code, broad geographic region from the IP address) for operational reasons and to spot abuse. We do not use third-party analytics or advertising trackers. Cookies are covered in§13.

3.5 Customer support correspondence

Anything you send us by email, in-product message, or other channel — including attachments — we hold for as long as we need to resolve your issue (see §5).

3.6 What Shenas servers do NOT hold

To be explicit, because it is the point of the architecture:

• No data your shenas node has sourced from third-party services. Not your Google Calendar, not your Gmail, not your Strava activities, not your Withings weight, not your Garmin heart rate, not your Spotify history, none of it. Your node sources it directly from each service and analyses it on your hardware; we never see it.
• No copy of anything your devices send each other, because none of it reaches us. We operate no relay: your devices sync directly, over connections that do not pass through our servers. We hold neither the contents nor a record that an exchange happened.
• No backups of your shenas data.

If we ever change that — for example, if we offer an optional cloud backup service in the future — we will update this policy, ask you to opt in before the change takes effect for you, and describe the new processing in detail.

We keep your data only as long as we have a reason to.

• Account data — for as long as your account exists, plus 30 days after deletion to allow recovery from accidental deletion.
• Community chat messages in public rooms — kept for as long as the room exists, so that scrollback is available to other members. You can request deletion of your own messages at any time; we will action it in our local store, and we will pass the redaction request to other federated servers (we cannot guarantee they will honour it, but we will try, and we will tell you what happened).
• Community chat messages in private rooms — kept for as long as the room exists. Same deletion path as above.
• Device identity records (public key, device name, type, last-seen) — kept while the device is registered; deleted when you deregister the device.
• Sign-in event records and security audit logs — 13 months, then deleted, unless we are required to keep them longer by law.
• Support correspondence — 24 months from the last reply, then deleted.
• Web-server access logs (marketing site) — 30 days, then deleted.
• Billing and tax records (if you are on a paid plan) — for the period required by United States federal and Delaware state tax law (typically 7 years).
• Backups of the data above — backups roll off on their own schedule (no more than 35 days). When you delete data, it is gone from active systems immediately and from backups within 35 days.
• Marketing suppression token — if you opt out of our marketing email, we keep a one-way hashed token (no name, no email address, no message content) so that we never email you again. We keep it even when you ask us to erase your other data, and we use it for nothing else.

If a legal order requires us to preserve specific data for longer, we do so for the scope of the order and no longer.

If you are in the EEA, the UK, or another jurisdiction with similar law, you have the following rights, no matter what the product UI offers:

• Access — ask us what data we hold about you, and get a copy (GDPR Article 15).
• Rectification — ask us to correct data that is wrong (Article 16).
• Erasure — ask us to delete your data ("right to be forgotten") (Article 17).
• Restriction — ask us to stop using your data while we resolve a question about it (Article 18).
• Portability — get your data in a machine-readable format, or have us send it directly to another service (Article 20).
• Object — object to processing we do under legitimate interests (Article 21).
• Withdraw consent — for anything we do under consent, change your mind at any time (Article 7(3)). Withdrawal does not affect what we did before you withdrew, but stops anything ongoing.
• Not be subject to automated decisions — we do not make automated decisions about you that produce legal or similarly significant effects (Article 22). If we ever do, we will tell you and you will have the right to a human review.

These rights apply to the data Shenas holds, as listed in§3. Because Shenas does not hold the data on your shenas node, an access or erasure request to us will not retrieve or delete it. To exercise those rights against the data on your shenas node, use shenas directly.

To exercise any of these rights with respect to Shenas-held data, email[email protected]. We will reply within 30 days. If the request is complex, we may extend by up to 60 more days and tell you why.

You can also complain to a supervisory authority. Because shenas ai, Inc. is established in the United States (Delaware) and does not currently have an EU establishment, there isno single EU lead supervisory authority for our processing under the GDPR's one-stop-shop rule. You can complain to the supervisory authority in your own EU country; the full list is atedpb.europa.eu/about-edpb/about-edpb/members_en. In the United Kingdom you can complain to the Information Commissioner's Office atico.org.uk.

Residents of California and other US states with similar laws

If you are a California resident, you have similar rights under the California Consumer Privacy Act / California Privacy Rights Act: to know, to access, to delete, to correct, to opt out of sale or share (we do not sell or share your personal information), and not to be retaliated against for exercising those rights. To exercise them, email[email protected].

We do not "sell" personal information under California law. We do not "share" it for cross-context behavioural advertising.

Residents of other US states with comprehensive privacy laws (currently including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and a growing list) have similar rights. The same email address is the place to send the request.

These commitments cover both the small amount of data Shenas servers hold and, where we have a way to enforce it, the architecture choices that keep your shenas data off our servers in the first place.

• We do not train artificial-intelligence or machine-learning models on your data. Not on chat messages, not on discovery metadata, not on anything else we hold. We do not train models on shenas data either, because we do not have it.
• We do not sell your personal data. No exceptions.
• We do not share your personal data for advertising. Not cross-context behavioural advertising, not contextual ad targeting, none of it.
• We do not analyse the data we hold for marketing or customer-insight reports we sell to third parties.
• We do not profile you for advertising purposes anywhere.
• We do not silently expand what we collect. If we decide we need to add a new processing activity that affects you, we will update this policy, give you advance notice, and where European law requires it, ask for your consent before the change takes effect.

If you find a place where our practice does not match this list, write to us. That is a bug, not a policy.

• All connections to Shenas services use TLS 1.2 or better. Data Shenas servers hold is encrypted at rest (AES-256 or equivalent).
• Authentication is handled by a dedicated identity service (Kanidm at auth.shenas.net) that supports strong second factors.
• Access to production systems is limited to a small number of named operators, governed by least privilege, and audited.
• Your devices sync directly with each other. We operate no relay that holds or forwards their traffic, so there is no buffered payload for an operator to read or for a breach to expose (see §3.3).
• We test our defences and patch promptly. We do not claim that any system is unbreakable; nothing on the internet is.

If something does happen — a breach that puts your Shenas-held data at risk — we will tell you. European law gives us 72 hours from awareness to notify the supervisory authority of a personal-data breach; we will also notify you directly without undue delay when the breach is likely to result in a high risk to your rights and freedoms. We will say what happened, what data was affected, what we have done, and what you should do.

A breach of your shenas node is something we cannot detect for you, because we are not in the path. The shenas software is built to help you secure that node; please do not skip the parts of the documentation that explain how.

To report a security vulnerability in Shenas services, seegithub.com/shenas-org/shenas/security/advisories/newor email[email protected].

The marketing site at shenas.ai uses onlystrictly necessary cookies — the cookies the site needs to load, route requests, and remember whether you accepted this notice. We do not use advertising cookies, tracking pixels, or third-party analytics on the marketing site.

The community chat and account services store a session token after you sign in. That is what lets you stay signed in. No third-party trackers run inside our services.

If the marketing site starts using non-essential cookies in the future, we will publish a separate cookies notice and ask you to accept them before they run.

For anything in this policy, including exercising your rights:

• Email: [email protected]
• Post: shenas ai, Inc., c/o Legalinc Corporate Services Inc. (Registered Agent), 131 Continental Drive, Suite 305, Newark, DE 19713, United States, Attn: Privacy.
• Security disclosures: [email protected] or GitHub private advisory.
• In the EEA / UK, our Article 27 representative: We have not yet engaged an Article 27 representative in the Union; in the meantime, please contact [email protected] or your local supervisory authority (see §7).

We aim to reply within five working days, and always within 30 days for formal requests under the rights listed in§7.