Privacy Policy

Last updated: 3 October 2026

Who controls the data

Trueway operates Trueway Commander. Privacy questions and requests can be sent to hello@trueway.pl.

Categories of personal data

• Account and authentication data. Commander receives the authenticated OAuth identity needed to associate requests with the correct Commander account. Authentication is provided through Auth0. Commander does not receive or store the user's Auth0 password.
• Paired-device data. We process the device identifier, user-provided device name, pairing state, creation and revocation timestamps, and credential-verification data needed to authenticate the local agent. The long-lived device credential is delivered to the local agent and is not returned through MCP output.
• Tool request and result data. Tool names, arguments and results pass through the routing service so a requested operation can reach the selected paired computer and the result can return to ChatGPT. The routing layer does not intentionally persist tool arguments or tool results after the request completes. Files and process state created by a tool remain on the user's own computer according to the requested operation.
• Usage and security metadata. We process monthly tool-call counts, per-tool counts and short-lived rate-limit state to enforce usage limits, protect the service and diagnose failures. Hosting providers may also process ordinary network and security metadata required to operate and protect the service.

Purposes of processing

We use this data to authenticate users and agents, pair and revoke devices, route tool requests to the correct computer, return requested results, enforce usage limits, maintain service security, diagnose failures, prevent abuse and respond to support or privacy requests.

Recipients and service providers

• OpenAI / ChatGPT. Sends the user's requested tool call and receives the corresponding result.
• Auth0. Provides authentication and authorization services.
• Cloudflare. Provides hosting, routing, storage and security infrastructure for Commander.
• The user's paired computer. Receives the tool request routed to that paired device and returns the result.

Trueway does not sell Commander personal data and does not use it for targeted advertising.

Retention

• Temporary pairing requests. Expire after 10 minutes by default and are hard-capped at 30 minutes. Expired pairing state is scheduled for cleanup after expiry.
• Active paired-device records. Are retained while a device remains paired so it can reconnect and be revoked.
• Revocation, usage and security records. Are retained while the Commander account remains active when needed to enforce limits, prevent replay or abuse, investigate incidents and maintain service integrity.
• Verified deletion requests. Data controlled by Trueway is removed within 30 days after a verified deletion request unless a longer period is required by law or is necessary to resolve an active security, fraud or abuse matter.

User controls

Users can revoke a paired device, which invalidates its credential and disconnects its active Commander session. Users can contact hello@trueway.pl to request access, correction or deletion of Commander application data.

Credentials and restricted data

Commander is not designed to collect passwords, API keys, MFA or OTP codes, payment-card data, government identifiers or protected health information through its tools. Users should not request Commander to harvest or disclose authentication secrets. Pairing codes are short-lived and are used only for a user-initiated pairing flow.

Security

Commander validates OAuth authorization, scope and device ownership before routing operations. Device credentials can be revoked. The local agent runs with the permissions of the signed-in operating-system user, so users remain responsible for the computers they pair and the commands they authorize.

Changes

We may update this policy as Commander changes. The current version and its update date will remain published at this URL.