privacy policy
the short version
we collect the minimum needed to run a paid server for you: your email, your payment (via stripe, we don't see your card), and a log of what your agent asks your box to do.
what's on your box is yours. we don't read it, mine it, sell it, or train anything on it. we look only to keep the service running, deal with abuse reports, or when the law makes us.
no ad trackers, no analytics scripts, no third-party cookies. one session cookie on sub.software so you stay signed in. none at all on sub.computer.
1. who's responsible
sub is operated by Peter Sugihara, an individual doing business as sub. for anything about your data, email privacy@sub.software.
2. what we collect and why
- your email address. to sign you in, reset your password, bill you, and tell you about your service (incidents, renewals, changes to these policies). we don't send marketing email unless you ask for it.
- your password, scrambled. we store a one-way hash of it, never the password itself, and nobody at sub can read it.
- payment details. handled entirely by stripe. we receive your name, the last four digits of your card, and your billing country and postcode, so we can show you your invoices and collect the right tax. we never see or store your full card number.
- your box name and domains. the name you pick under sub.computer and any custom domains you connect, so we can point them at your box and issue certificates.
- an audit log of agent actions. when your agent asks sub to do something (run a command, take a snapshot, serve a site), we record what it asked, when, and whether it worked. this is how you can see what your agent did, and how we investigate problems and abuse. it can include the text of commands your agent ran.
- technical logs. ip addresses, timestamps, and request details for sub.software and the mcp endpoint, kept briefly for security and debugging.
- support conversations. if you email us, we keep the thread so we can help you.
3. what's on your box
the files, databases, sites, and services on your box are your data. we store and snapshot them so your box works, and may keep off-box backup copies for disaster recovery. we access box contents only:
- to carry out what your agent asked,
- to keep the box running (setup, upgrades, snapshots, restores, diagnosing an outage),
- to investigate a specific abuse report or a threat to other customers or our providers,
- when we're legally required to.
we don't sell it, use it for advertising, or use it to train models. if you give your agent access to other people's personal data, you're responsible for having the right to process it; sub is your infrastructure provider, not a party to that.
4. who we share data with
only the providers we need to run sub, and only what they need:
- contabo hosts the virtual server your box runs on. your box's disk lives in their us datacenter.
- ovhcloud hosts the sub control plane (accounts, tokens, audit log).
- cloudflare provides dns for sub.computer names and object storage for off-box backups.
- stripe processes payments.
- brevo delivers our password-reset and service emails.
we don't share your data with anyone else, except if the law requires it or to protect the safety of the service or other people. if we're compelled to hand over data, we'll tell you unless we're legally prohibited from doing so.
5. how long we keep things
- your box is wiped 7 days after your subscription ends. once wiped, its contents are gone from the box and its local snapshots. off-box backups are deleted within 30 days.
- account records and the audit log are kept while you have an account and for 90 days after, then deleted, except where we need to keep something longer for billing, tax, or a legal dispute.
- technical logs are kept for up to 30 days.
- invoices are kept for as long as tax law requires.
6. security
everything between you, your agent, and sub is encrypted in transit. each box has its own key. access to boxes and the control plane is limited to what's needed to run the service and is logged. we're a small operation and won't pretend to be a bank, but we take this seriously and will tell you promptly if we learn of a breach affecting your data.
7. cookies
sub.software sets one cookie, sub_session, to keep you signed in. that's it. sub.computer sets no cookies at all. we run no analytics or advertising trackers on either.
8. your rights
you can ask us for a copy of the account data we hold about you, ask us to correct it, or ask us to delete your account and everything with it. email privacy@sub.software and we'll do it within 30 days. you can also cancel and delete your account yourself from sub.software. if you're in a place with specific privacy laws (the eu, uk, california, and others), you may have additional rights, and we'll honour them.
9. children
sub isn't for anyone under 18. we don't knowingly collect data from children; if you think we have, tell us and we'll delete it.
10. changes
if we change this policy in a way that matters, we'll email you before it takes effect. the current version lives at sub.computer/privacy.