Commandless Privacy Policy

Summary

Commandless is a desktop application for administering your own servers with the help of AI agents. It runs on your computer. Garda Studio does not operate a service that receives your server data, and the app has no analytics, telemetry, advertising or tracking.

Data leaves your computer only to reach the servers you connect, the AI services you choose, and Garda Studio when you send a problem report or sign in to activate a license.

Who is responsible

Commandless is published by Dmytro Shubchynskyi under the trading name Garda Studio. Privacy questions can be sent to support@garda-studio.com.

Data stored on your device

The app keeps its data in the application data folder of your operating system user account, or in the CommandlessData folder next to the portable executable. It contains:

• server profiles: names, host names, user names, ports, allowed paths and trusted host keys;
• credentials such as SSH passwords, private keys, passphrases, API keys and tokens. They are encrypted with your operating system’s protected storage and are never shown in the main window or written to logs;
• a redacted, hash-linked audit log of the actions taken, agent task history, context sources you save, and settings;
• terminal output while a session is open.

This data is not sent to Garda Studio.

Your servers and AI services

• Servers. Commandless connects only to the servers you configure, over SSH, SFTP or the other connectors you enable, and sends the commands and file changes you approve.
• API models. When you use the built-in API agent, your request, the server context the app prepares (such as the server name, access mode, tool descriptions and command output the agent asks to read) and the conversation are sent to the provider and endpoint you configured, for example an OpenAI-compatible service, Anthropic or a local Ollama server. That provider’s terms and privacy policy apply.
• Command-line agents. Agents such as Claude Code or Codex run in the built-in terminal under your own accounts with those vendors. Whatever an agent reads through the Commandless tools is sent by that agent to its vendor under the vendor’s terms.
• Google second opinion. If you press the Google button next to a staged command, your browser opens a Google search for that command text.

Problem reports

Only when you choose Send report, Commandless sends your description, the app version, the platform, an optional reply email and the codes of recent errors. Server data, credentials and terminal output are not attached. Storage and retention are described in the Garda Studio website privacy notice.

Account and licenses

The free edition needs no account. If you sign in to activate a paid edition, the account service at account.garda-studio.com processes the identity provided by the sign-in service you choose (for example Google or GitHub), your license assignments and a public key generated for this installation. No hardware identifiers are collected.

Updates and app stores

The Microsoft Store edition is updated by the Microsoft Store. The direct-download edition checks the public GitHub release feed for signed updates; like any web request this reveals your IP address to GitHub. If you install Commandless from an app store, the store operator may process installation, purchase and diagnostic information under its own privacy policy.

Retention and deletion

Local data stays on your device until you delete it. Remove profiles and credentials in the app, or uninstall the app and delete its data folder. For the portable version, delete its folder.

Children

Commandless is a professional tool and is not directed to children under 13.

Contact

Questions about this policy can be sent to support@garda-studio.com. We will update this page when the app’s data handling changes.