Privacy Policy

This Privacy Policy explains what data we collect when you use Cleat — the desktop application and the website at cleat.tools — operated by Zimventures LLC.

The short version

The Cleat desktop application does not phone home. It does not track your usage, does not upload your terminal history, does not record your connections, and does not analyse your behaviour. The only network call Cleat makes to us is the periodic license check to verify your activation is still valid.

The cleat.tools website collects what's necessary to run the site, process your purchase, and respond to support requests. That's it.

What we collect on cleat.tools

Account information

When you purchase a Cleat license, we create an account associated with the email address you provided at checkout. We store your email, an optional display name, and a hashed password (once you set one via the welcome email).

Purchase information

Payments are processed by LemonSqueezy, our merchant of record. We receive (and store) the order number, the purchased tier, your billing email, and a non-sensitive transaction reference. We do not see or store your full card number or other payment credentials.

License-activation data

When the desktop app activates a license, we record a machine fingerprint (a SHA-256 hash of an OS-level machine identifier), an optional human-readable machine name, the platform (macOS / Linux / Windows), the platform version, and the Cleat version. This is the minimum required to enforce the per-license seat count and to show you which machines are activated from your dashboard. The fingerprint cannot be reversed back into your original machine identifier.

Website analytics

We use a privacy-preserving analytics system that records page views without cookies or persistent identifiers. We do not use Google Analytics. We do not sell or share traffic data.

Support tickets

When you open a support ticket — either signed-in or anonymously — we store the messages you send and our replies. Internal triage notes added by staff are never visible to you and are kept only for our records.

What we don't collect

Terminal output, file transfers, or any data from your SSH / SFTP sessions.
Hostnames, IP addresses, or credentials of servers you connect to.
Plugin activity inside the desktop app.
Usage analytics or telemetry from the desktop app of any kind.

Cookies

We use a session cookie to keep you logged in to your account, and a CSRF cookie to protect form submissions. Both are first-party, session-scoped, and necessary for the site to work. We do not use marketing or tracking cookies.

Service providers we share data with

LemonSqueezy — merchant of record, payment processing, tax compliance.
Resend — transactional email delivery (welcome emails, password resets, license keys, refund confirmations, support replies).
Linode (Akamai) — hosting for the cleat.tools website and the binary-distribution bucket.

We do not sell or rent your personal information to anyone.

Your rights

You can:

See and update your account details at /account/settings/.
See your purchase history and download invoices at /account/invoices/.
Manage and deactivate your machine activations at /account/licenses/.
Request export or deletion of your account data by emailing sayhello@cleat.tools. We'll respond within 30 days.

Retention

Account data is retained for as long as your account exists. Purchase records are retained for at least 7 years after the transaction to comply with tax-record requirements. Support tickets are retained indefinitely so we can recall the context if you contact us again, unless you request deletion.

Children

Cleat is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe we have done so in error, email us and we will delete it.

International users

Cleat is operated from the United States. By using cleat.tools, you consent to your data being processed in the United States. If you are located in the EU / UK / California, you have additional rights under GDPR / UK GDPR / CCPA respectively; email sayhello@cleat.tools to exercise them.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced via the email address associated with your account.

Contact

Zimventures LLC. Privacy questions go to sayhello@cleat.tools.