Privacy Policy

Last updated: 16 August 2026

Isomux LLC ("we") runs Hosted Isomux: we rent a server for you, set it up with isomux, and serve it at yourname.isomux.app. This policy covers that service and the isomux.com website. It does not cover isomux the open-source program itself, which collects no data at all: no telemetry, no statistics, nothing sent to us or anyone else.

What we collect

At signup: your name and email address, from the Google account you sign in with. The office name you pick - it becomes your web address, and addresses with HTTPS certificates land in public certificate logs, so pick a name you don't mind strangers seeing. Your browser creates a server administrator key. We receive its public half and install it on your server so you can access it with the private half. The private key is not sent to us. After setup, we keep a record that lets us confirm which public key was installed, but not the public key itself. For safety reasons, Isomux agents and the built-in terminal cannot act as a privileged user. Only you can do so with the administrator key.

Payment: Stripe handles the card. We never see or store card numbers. From Stripe we keep your subscription status, your plan, and your invoice history.

Setup records: a structured record of setup steps, with the time and outcome. It does not store raw commands or command output.

Support: whatever you send us when you ask for help.

What we cannot see

Nothing inside your office passes through us. Your conversations, your files, your agents' work, and the Claude and ChatGPT credentials you sign in with from inside it never reach our systems, and once our setup key is removed we have no way into the running office either. The one exception is the rescue route in the next section, which happens only if you ask for it in writing.

We hold an SSH key to your server while we set it up. If you confirm from your office that you are in, we remove the key, prove the removal by requiring a reconnect attempt to fail, and destroy our copy. If you do not confirm, the server makes the key unusable seven days after signup and removes it during cleanup. You can also confirm the result yourself if you added your own SSH key at signup.

What we can still do, because we rent the server

We hold the account at the server provider, so we keep the controls any renter keeps: reboot, power off, reinstall (which erases the disk), and the provider's rescue console, which can reach the disk. We do not open the rescue console unless you ask us to in writing about a specific problem; we record what we do, and the access ends with the problem. The terms of service state this in full.

Who else handles your data

If we change any of these, this list changes with it, with the same notice as any other change to this policy.

How long we keep it

Your server: it runs through the period you paid for. At the end of that period, it is powered off and access stops. After 14 days, we ask the provider to delete it as soon as the provider permits. The provider controls the exact deletion time.

If payment fails: Stripe retries first. If the retries run out, we power the server off, but we do not automatically delete it on a fixed schedule. Service resumes if payment succeeds.

Your account: deleted when you ask. The setup log: retained with no scheduled deletion. The record of any rescue incident you asked us to handle: kept, as evidence that we did what we said.

Support messages: kept indefinitely, deleted when you ask.

Billing records: kept as long as tax and accounting law requires.

Backups

Isomux keeps seven daily backups on your server. You can keep external copies for additional protection.

The isomux.com website

The site counts page visits with Google Analytics and Vercel Web Analytics, which record the page, where you came from, your rough location and your device type. Vercel's documentation states that it sets no third-party cookies and that the data cannot identify individual visitors. The chat widget sends your messages to Anthropic to write the answer, and also relays the conversation, your IP address, your browser string, and the page you were on to a private channel we read, so we can see what people are asking. Do not type anything private into it. Transcripts are kept indefinitely, deleted when you ask.

Your data

Write to llc@isomux.com to ask what we hold about you, to correct it, or to have it deleted.

Changes

If we change this policy we will say so on this page and email you before the change takes effect.