Privacy Policy
Last updated: October 28, 2026
1. Introduction
CommandGate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CommandGate desktop application and related services.
By using CommandGate, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Information You Provide
- Account credentials and authentication tokens
- Natural language prompts and queries you submit to the agent (processed in real time)
- Account information (email address) if you register for hosted access
- Billing information processed by our payment processor if you subscribe to a paid plan
Information Collected Automatically
- What a check reads from your computer (command results). When you run a check, these are sent to our hosted AI service together with your description so it can work out the diagnosis. The app says so next to the Run button before your first check.
- Command execution logs stored locally on your machine
- Usage metrics tracked in a local database on your device (query count, session duration)
- Application error logs for debugging purposes
Important: CommandGate does not transmit prompts or credentials through product telemetry. Desktop usage statistics are on by default and can be turned off at any time in the app's Settings. They cover which screens and buttons are used, errors and timings, never what you type, your files or command results. Masked app screen recordings are also on by default for new installs: all text and typing are hidden and media is blocked. You can turn recordings off in Settings or turn off usage statistics. Crash reports with private details removed are also on by default and can be turned off in Settings > Privacy.
3. How We Use Your Information
- To provide and maintain the CommandGate service
- To process your descriptions and check results through the hosted diagnostics service
- To execute system diagnostic commands on your local machine as directed by the AI agent
- To manage your account and subscriptions when hosted access or billing is enabled
- To improve the application based on usage patterns linked to a random ID, or to your user ID when signed in (not your name or email), unless you turn usage statistics off
- To provide customer support
4. Data Storage & Security
- Authentication credentials are stored securely on your device and are never transmitted to unauthorized parties
- Command execution history and diagnostic results are stored in a local database on your device
- Application configuration is stored locally in your operating system's standard application data directory
- If you use our hosted service, account data is protected using industry-standard encryption at rest and in transit
Data Retention
Hosted-service data is retained only as long as needed, then purged automatically:
- Usage metering records (token counts, model, cost, timing — never prompt content): up to 13 months, for billing history and dispute resolution
- Account export/deletion receipts: 90 days, for abuse prevention
- Tamper-evident audit events: 24 months, to preserve the integrity chain
- Diagnostic history on your device: stored locally and under your control; remove it by clearing history in the app or uninstalling
Deleting your account removes identifying account data, settings, and sync data immediately. Non-content usage metering records are detached from your identity and retained for up to 13 months for billing history, dispute resolution, and abuse prevention. Payment records held by our payment processor follow financial-record retention requirements.
5. Third-Party Services
CommandGate uses other companies to run parts of the service. Each one gets only what it needs for its job:
- AI model providers: when you run a check, your description and what the check reads from your computer are sent through our hosted service to AI model providers, so CommandGate can produce the diagnosis and the fix steps.
- Payment processor: handles payments, card details, billing address and sales tax. We do not store your credit card information.
- Sign-in provider: manages your email address, name and sign-in sessions.
- Error monitoring: crash and error reports from the app and our hosted service, with prompts, keys and personal details removed. The website may also send error reports and masked session replays.
- Usage statistics: which screens and buttons are used, errors and timings, from the app unless you turn it off. Website analytics also measure visits, interactions and performance as described below.
- Hosting: our hosted service, its database, its logs, its encrypted backups and this website run on cloud hosting providers.
- Downloads and updates: installers and app updates come from a public release host. The update check sends your app version and system type.
You can ask for the current list of these companies, and business customers for a data processing agreement, at support@commandgate.ai.
6. Your Rights
GDPR (European Economic Area)
If you are a resident of the EEA, you have the right to access, rectify, or delete your personal data; restrict or object to processing; data portability; and the right to withdraw consent at any time.
CCPA (California)
If you are a California resident, you have the right to know what personal data is collected; request deletion of your data; opt out of the sale of personal data (we do not sell personal data); and non-discrimination for exercising your rights.
Self-Serve Export & Deletion
Hosted-account holders can export their stored data (account, usage metering, synced preferences) and permanently delete their account from the dashboard at any time. Deletion is immediate and idempotent; a minimal receipt is kept briefly for abuse prevention and then purged.
To exercise any of these rights, please contact us at support@commandgate.ai.
8. Children's Privacy
CommandGate is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this page periodically for any changes.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us: