Data practices
How Palomino stores, retains, and lets you control your image vault and analytics.
What we store
Device encryption keys, tunnel event logs, VPN node sync metadata, and billing records. We do not train models on your traffic.
Where it lives
Workspace data is stored in isolated Supabase rows per org. VPN configs are delivered only to authenticated device owners.
Retention by plan
Activity retention follows your tier. Device keys remain until you revoke them.
Your controls
Revoke devices, rotate API keys, and cancel subscriptions through the billing portal at any time.