Account and device data
We process the authenticated user identity plus the identifier and name of a paired device so operations are routed to the correct owner and computer.
The device token authenticates the local agent and can be revoked. It should never be sent to support or published.
Project operations
Tool calls, their arguments and results transit the routing service so the request can reach the paired computer and the result can return to the conversation.
Commander does not sell personal data. Minimal operational metadata may be retained for security, diagnostics and abuse prevention.
User control
A device can be revoked, invalidating its token and disconnecting the active session. The agent runs with the permissions of the signed-in operating-system user.
Questions about access, correction or deletion can be sent to hello@trueway.pl. Last updated: 15 September 2026.