Privacy Policy
This Privacy Policy explains how Synquic ("we", "us") handles information in connection with the Axiom command-line interface and the optional Axiom account service ("Axiom"). By using Axiom you agree to this policy.
1. What Axiom is
Axiom is a command-line tool that runs on your own computer. Most of what Axiom does happens locally and never reaches our servers. The optional Axiom account adds a hosted service that stores your developer credentials, encrypted, so you can use them from more than one machine.
2. Information we collect
- Account information. If you create an Axiom account, we store your email address and a one-way hashed (bcrypt) form of your password. We never store your password in plain text.
- Credentials you choose to upload. If you use the credential vault, the files you upload (for example App Store Connect keys, signing certificates, or Google service-account files) are encrypted before they are written to disk and stored only in that encrypted form.
- Audit and operational logs. We record security-relevant events, such as sign-ins and credential access, together with timestamps, to protect your account.
- Install registration. On startup the CLI registers an anonymous, randomly generated device identifier along with the platform, operating system and version. We use this to count installs, to deliver update notices, and to block abusive devices. It contains no personal information and is not linked to your identity. You can turn it off entirely by setting AXIOM_NO_TELEMETRY=1.
Credentials you keep only on your own machine (for example in your operating system keychain) are never sent to us.
3. How your credentials are protected
- Stored credentials are encrypted at rest using AES-256-GCM.
- Passwords are hashed with bcrypt and are not recoverable.
- All traffic between the CLI and our servers uses HTTPS (TLS).
- Access to a credential requires your authenticated session token.
4. How we use information
We use the information above only to operate Axiom: to authenticate you, to store and return the credentials you asked us to keep, and to secure the service. We do not sell your information, and we do not use your uploaded credentials for any purpose other than returning them to you.
5. Third parties
Axiom talks directly to the services you ask it to, such as Apple's App Store Connect and Google Play. Your use of those services is governed by their own terms and privacy policies. We use infrastructure providers to host the account service; they process data on our behalf under their own security commitments.
6. Data retention and deletion
We keep your account data and stored credentials until you delete them or close your account. You can delete any stored credential at any time with axiom creds rm, and deletion removes the encrypted record from our systems.
7. Your choices
You can use the Axiom CLI entirely without an account, in which case we hold no information about you. If you have an account, you can delete individual credentials, log out, or request account deletion.
8. Changes
We may update this policy. Material changes will be reflected by the "last updated" date above.
9. Contact
Questions about this policy or your data: privacy@synquic.com.