Privacy Policy

ShellYard is a service operated by AmIUp ("AmIUp", "we", "us"). This policy describes the data we collect and how we use it.

What we collect

When you sign in we receive your email address, name, and (optionally) profile picture from your identity provider. We do not receive your password.

The desktop app syncs secrets — credential passwords, API tokens, OAuth client secrets, SSH private keys, and HTTP environment variables marked as secret — to DynamoDB, envelope-encrypted with AWS KMS in our AWS account. Resource metadata (connection names, hosts, ports, folder structure, documents, IPAM data, HTTP request URLs and headers) is stored server-side at rest under DynamoDB's encryption-at-rest, but is not envelope-wrapped — our application code reads it in the clear.

Because the KMS keys live in our AWS account, this is not zero-knowledge encryption: with administrative access to that account we could decrypt your secrets. On Team and Enterprise, each Shared Space gets its own customer-managed KMS key — rotating or deleting it cryptographically erases that Space's secrets even if backups exist.

What we do not collect

We do not collect the contents of your terminal sessions, RDP frames, or web admin traffic. Magellan only receives data you explicitly share with it, and prompts go directly from your client to your chosen AI provider — never through us.

Subprocessors

Amazon Web Services (Cognito, DynamoDB, KMS, CloudFront, S3) and Paddle. A complete list will be maintained alongside our SOC 2 program.

Billing & payments

Paddle.com Market Limited is the merchant of record for all paid subscriptions on shellyard.com. When you purchase a plan, your payment details (card number, billing address, tax identifiers) are collected and processed directly by Paddle under Paddle's privacy notice. AmIUp receives only a transaction record — your subscription tier, billing email, and a Paddle customer identifier — which we use to provision and manage your account. We do not see, store, or process your payment card details.

Contact

Questions about this policy: privacy@shellyard.com.