Privacy Policy

Using PolyOS without an account

When PolyOS checks for updates it sends only its version, update channel and architecture; no name, account or device identifier. Downloads come from GitHub, which, like any website, sees the address that connects to it.

What a Poly Account holds

• You give us: your name, email address, country and password. We store the password and your recovery key only as one-way hashes.
• Your computers: each one’s name, PolyOS version, architecture, update channel, last check-in and approximate location (city and country, worked out from the connection; we don’t store IP addresses). With device information set to Standard or Diagnostic, also its model, processor, memory, storage and graphics.
• Security records: your sign-in sessions (browser type and approximate location) and account activity such as sign-ins, password changes and new devices.
• Poly Sync: the settings you choose to sync.
• Messages you send us through Help & Support.

How we use it

To run Poly Account: signing you in, managing your computers, sending updates and remote actions you ask for, syncing your settings, keeping your account secure and emailing you about your account, security, updates and changes to these terms. We don’t show ads, don’t sell or rent your information, and don’t use tracking cookies. The site uses one cookie, to keep you signed in.

Who helps us

Poly Account runs on Vercel (website and servers) with a Neon database; account emails are sent through Resend; PolyOS downloads are served by GitHub. They process data for us to provide these services.

How long we keep it

Your account information stays until you delete your account. Sign-in sessions end after 30 days of inactivity; records used to slow down password guessing are deleted after a day. Deleting your account removes your details, computers, synced settings and history right away.

Your choices and rights

• See and change your details in Poly Account › Account.
• Choose how much device information is shared in Poly Account › Privacy.
• Choose which emails you get in Poly Account › Notifications (security alerts and important legal notices always go out).
• Download all your data in Poly Account › Privacy, and delete your account in Poly Account › Account.
• Questions or requests: contact us.

Children

Poly Account isn’t meant for children under 13, and we don’t knowingly collect their information. If you believe a child has made an account, contact us and we’ll delete it.

Changes

When this policy changes in an important way, we’ll email you and ask you to review it the next time you sign in, showing what changed.