Effective date: 30 September 2026
Serlink is an SSH terminal and SFTP workspace. The app does not require a Serlink account. This policy describes the app's current data handling.
Your local workspace
Host profiles, credential material, snippets and workspace records are stored in an encrypted local vault. Device-local secrets use the operating system's secure storage. Optional biometric unlock protects a random device key; the vault passphrase is not saved by that feature. Serlink does not receive biometric templates.
Terminal data is used to display your remote session. Downloaded files and exported plaintext metadata are stored where you select them; those files are not covered by vault encryption. Protect your exported files separately. Locking the vault prevents new credential access but does not disconnect already-established SSH/SFTP sessions or transfers.
Servers and optional sync
When you connect, authentication data, commands and files are sent to your chosen SSH/SFTP server. The server operator can process that data under its own policies. The app does not relay those connections through a Serlink-operated service.
iCloud sync uses Apple's CloudKit private database. WebDAV sync uses an endpoint you configure. Sync uploads encrypted vault snapshots and operational object metadata; the app's vault keys are not uploaded by the sync service. Apple or your WebDAV operator may process service and connection metadata under their policies. Disabling sync stops future app sync; it does not erase existing remote copies.
Diagnostics and external agents
Serlink has no advertising or analytics SDK and does not automatically upload diagnostic logs to its developer. Diagnostic exports are local, redact sensitive connection information and omit terminal output. If you send an export to support, review the files and remove anything private first.
The optional MCP endpoint permits an external agent to use explicitly authorized sessions. Serlink does not include an AI model or automatically send session data to an AI provider. An agent you authorize may transmit data according to that agent's configuration and provider policies.
Control, retention and deletion
You control host records, credentials, snippets, backups, exported files, sync destinations and agent authorizations. Local records remain until you delete or reset them. Remote data and backups have separate lifetimes: use the remote-data controls or your provider to delete them, and remove exports and backups separately. Keep recovery keys safe; the developer cannot recover an unknown vault passphrase without your recovery key.
Contact and updates
For privacy questions, use the contact published on the support page. This policy will be updated if the app's data handling changes.
This website and support
This website at serlink.alkinum.com serves static pages and product images. Documentation search runs in your browser. It contains no analytics, advertising pixels, account system, remote font requests or support form. The host still receives requests for pages and assets and may process network metadata to deliver and secure the service. Your theme preference is saved in browser local storage; clearing site data removes it.
Emailing support@serlink.alkinum.com sends the address, message and attachments you choose to our support mailbox and its mail providers. We use them to answer your request. Keep credentials and recovery material out of support messages. To ask about or request deletion of support information, email the same address.
GitHub links lead to an external service governed by its own policy. GitHub issues are public; use email for private security or privacy reports.