PRIVACY POLICY

1. Commitment to Privacy

Otherside is designed under the principle of privacy by design. Our goal is to provide developers with a powerful terminal assistant without compromising the security, integrity, or confidentiality of your source code and credentials.

2. End-to-End Encryption (E2EE)

All communications between your local terminal (Otherside CLI) and the companion mobile app are fully encrypted end-to-end (E2EE) using keys generated locally on your own devices (X25519 for key exchange and XChaCha20-Poly1305 for symmetric encryption with HKDF-SHA256).

The Otherside backend (hosted on Supabase) acts solely as a traffic broker. The backend does not store, decrypt, or have access to your private keys or the plaintext content of chat messages, terminal commands, or AI responses.

3. Data We Collect

We collect the minimum amount of data necessary to provide and secure the service:

• Authentication Information: When signing in to the mobile companion app, you may authenticate using Google or Apple. We only collect your unique user identifier (ID), name, and email address provided by the OAuth provider for account management and security.
• Connection Metadata: We temporarily store encrypted session IDs and public pairing keys in our database to allow your devices to locate each other and establish a secure tunnel.
• Zero Code Telemetry: Otherside does not collect, store, or transmit your source code, executed terminal commands, or local environment data to our servers or third parties (except to the LLM providers you configure directly in the CLI).

4. LLM Providers Integration

The Otherside CLI makes direct API calls to the LLM providers you configure (such as Anthropic, OpenAI, DeepSeek, or local servers). The transmission of data between your machine and these APIs is subject to the individual privacy policies and terms of service of each respective provider.

5. Data Retention

Session metadata expires and is automatically pruned from our backend database on a regular basis. We do not store permanent message histories or session logs on our broker servers. Local chat history and logs remain exclusively on your own devices.

6. Your Rights

You have the right to request the deletion of your account and all associated metadata at any time. Since we do not retain message history or keys on our servers, deleting your account permanently removes all authentication and pairing records from the broker database.

7. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please open an issue in the official GitHub repository or contact us via email associated with othersidecli.com.