Privacy Policy

Privacy information for Commander.

Last updated: July 27, 2026

Commander is a desktop application. It is designed to manage files on your own computer and on remote systems you configure.

Information Commander handles

Commander may process file names, paths, metadata, file contents, remote connection details, plugin metadata and cleanup/search results locally on your device as part of normal app features.

Commander does not store credentials or other sensitive information on our servers. Secrets remain local to your device and are stored in the operating system’s keyring or secrets manager, depending on the platform. They are not stored in website forms by this site.

AI Assistant

The optional AI Review in Smart Clean is the one feature that sends file information off your device, and only when you turn it on. It is disabled until you choose a provider and add your own API key under Settings → AI Assistant.

When you run a review, Commander sends only the names, sizes and cleanup categories of the scanned items — never file contents — to the AI provider you configured, and receives a delete-safety rating in return. The request goes directly from your device to that provider; it does not pass through our servers. Data sent this way is then handled under that provider’s own privacy policy and terms. Choosing a local or self-hosted OpenAI-compatible endpoint keeps the request on your own machine or network.

Your API key is stored locally in the operating system’s keyring or secrets manager where available, and is never sent to our servers.

Nearby Share transfers files directly between computers running Commander on your local network. Files are never uploaded to our servers and never pass through a relay; they travel over a direct connection between the two devices, and the transfer metadata and file contents are encrypted and authenticated end to end.

While Nearby Share is discoverable, Commander answers discovery on the local network with the device name you set and its public device key. File names, sizes and contents are never sent on that discovery channel. The device’s private key is stored in the operating system’s keyring or secrets manager.

Nearby Share does not read your address book, phone numbers, email addresses or Apple, Microsoft and Google accounts. A “known device” is only a Commander public key that you chose to remember when accepting a transfer, and forgetting a device deletes that key from your installation.

Updates and plugin catalog

Commander and this website may request public release metadata, download manifests and plugin catalogs from the Commander download server. These requests are used to show available downloads, release notes, updates and plugins.

Payments and licenses

If you purchase a Commander license, payment and billing information is processed by the payment provider. The information available to the developer is limited to what is needed to verify, support and manage the license or transaction.

Website logs

Like most websites and static hosting providers, this site and its hosting/CDN providers may receive standard technical logs such as IP address, user agent, requested URL, referrer and timestamp. These logs are used for security, operation, debugging and analytics provided by the hosting infrastructure.

Plugin submissions

If you submit a plugin or request custom plugin development through the website, the submitted name, email address, repository URL, project information and plugin details are processed and stored by the site hosting provider so the submission can be reviewed and discussed with you. Do not include credentials, private keys or other secrets. Accepted plugin metadata and public repositories may be published in Commander’s plugin catalog.

Feature requests and bug reports

If you submit a feature request or bug report, the submitted contact details, Commander and operating-system versions, workflow description, reproduction steps, expected and actual results, and any optional links are processed and stored by the site hosting provider so the feedback can be reviewed and discussed with you. Do not submit passwords, access tokens, private keys, private file paths or personal data in descriptions, diagnostics, logs, screenshots or linked files.

No sale of personal data

Personal information is not sold. Commander does not require an account to use the app.

Your choices

You can avoid configuring remote connections, leave the AI Assistant unconfigured or remove its API key, set Nearby Share visibility to “No one” or forget a remembered device, uninstall plugins, delete saved connection profiles from the app, cancel update checks where the app provides that control, and uninstall Commander.

Contact

Privacy questions can be sent to enver@bisevac.com.