Draft under review. These terms are not yet in effect, and bracketed items are still to be filled in. Nothing is for sale until checkout opens.
Effective date: [EFFECTIVE DATE] · Last updated: [LAST UPDATED DATE]
This policy explains what personal information [SELLER LEGAL NAME] ("we", "us") collects when you visit iramccune.com, buy HomeButler, or use our support services, and what the HomeButler box itself sends over the internet.
The short version: HomeButler is built so that your photos, files, videos, recordings, voice commands, AI chats and smart-home data stay on your own box. We don't have a copy and can't see them. We only collect what we need to sell, ship and support your purchase. We do not sell your personal information, and we do not share it for cross-context behavioural (targeted) advertising.
By default, everything HomeButler manages — photos (Immich), files and calendars (Nextcloud), media (Jellyfin), camera images and recordings, Home Assistant history, voice commands and transcripts, AI conversations with the local models, and passwords and keys you enter — is stored and processed on your box. We do not collect it, and it is not sent to us.
You control this data and are responsible for it, including backups and for any people (family, guests, household staff) whose images or voices are captured. See the Terms of Sale, Sections 9 and 14.
The only times we may see data on your box are during a remote-support session you switch on (Section 2.4).
Plan status, billing history, renewal and cancellation dates, and communication preferences.
What you tell us in emails, calls, texts or in-app requests, including diagnostic output you choose to send (for example butler doctor results). Please don't send passwords, API keys or photos of people unless we ask for them for the specific problem. [If you record support calls, say so here and at the start of each call: "Calls may be recorded for quality and training. [Two-party-consent states require you to announce this.]"]
When you switch on support access (for example with butler support on), we connect through Tailscale using a temporary, time-limited support account. We keep a session log: date, start and end time, the staff member, the commands we ran or changes we made, and the outcome. During a session we may see data on your box; we access only what's reasonably needed to fix the problem, and we do not copy your photos, files, recordings or other personal content off the box unless you ask us to (for example, to examine a corrupted file), in which case we delete it when the issue is closed.
The box sends us only two things, both to iramccune.com over an encrypted connection:
butler status and butler doctor, with anything that looks like a key, token or password blanked out). No photos, files, camera pictures, chat history or settings are sent.You can turn both off by clearing SUPPORT_URL in the box's settings file; requests then stay on the box until you email them to us.
When a replaced box comes back to us, we erase every drive in it without looking at what's on it, and keep no copy. We record only the serial number, the date it arrived, its condition (with photos if it is damaged) and that it was erased. Back up anything you want to keep before you send a box back; if a box can't be erased because it is damaged, we destroy the drive.
If you join our mailing list, we use your email to send product news. Every message has an unsubscribe link. Order, security and billing emails are sent regardless.
We share personal information only with:
We do not sell personal information, and we do not "share" it for cross-context behavioural advertising (as those terms are defined in the California Consumer Privacy Act and similar laws). We have not done so in the past 12 months. Because of this, we do not offer a "Do Not Sell or Share" link; if that changes, we will update this policy first and add one. We honour Global Privacy Control (GPC) browser signals as an opt-out request.
The box contacts outside services only for features you set up:
| What | When | Who receives data |
|---|---|---|
| Remote access (Tailscale) | If you enable remote access or support access | Tailscale's coordination servers receive device names, IP addresses and keys needed to connect your devices. Your traffic between devices is end-to-end encrypted. Tailscale's privacy policy applies. |
| Smart-home and camera integrations | If you link a vendor (e.g. Ring, Nest, Eufy, Ecobee) | That vendor's cloud, under its privacy policy. HomeButler stores the login on your box. |
| Third-party AI providers (e.g. Anthropic, OpenAI, Google) | Only if you link your own account or API key | The prompts, transcripts and smart-home context you or your automations send. That provider's terms and privacy policy apply. The local AI sends nothing out. |
| Push notifications | If you install the Home Assistant app and turn on notifications | Notification text passes through Apple (APNs) or Google (Firebase) push services [and the Home Assistant / Nabu Casa relay — VERIFY]. |
| Weather, drive times, other web data | If you add those features | The service queried (e.g. a weather provider; Waze for drive times) receives the request and your box's IP address and the locations you configured. |
| Downloading software | During setup, when you install or update apps, add AI models, or run update commands | Container registries and project sites (e.g. GitHub, Docker Hub, ollama.com) receive your IP address and what was downloaded. |
| Registration and support requests (iramccune.com) | Registration until the box is approved; support requests only when you send one | Us. See Section 2.5 for exactly what is sent. |
| Skills (iramccune.com and the skill's own sources) | Only when you install a skill | Our website logs the download; the skill's own image registry receives your IP address and what was downloaded. |
| HomeButler releases | Only when you choose to download a new release or rollback image from our website | Our website logs the download (Section 2.6). |
| Downloads add-on | Only if you enable it | Your VPN provider and the sources you add. |
| Cloud backup | Only if you set it up | Your backup provider; we recommend client-side encryption. |
Apart from the registration check-in and the support requests you choose to send (Section 2.5), HomeButler does not send us telemetry, usage statistics, crash reports or your content. [If you ever add opt-in telemetry, describe it here before shipping.] Individual third-party apps may have their own optional analytics settings; [VERIFY each app's default — e.g. Home Assistant analytics are opt-in].
You can ask us to access, correct or delete the personal information we hold about you, or to stop marketing emails, by contacting [PRIVACY EMAIL]. We will respond within 45 days.
In the past 12 months we collected these categories of personal information: identifiers (name, email, address, IP address); customer records (phone, payment-card type and last four digits); commercial information (purchases, plan history, box serial numbers); internet activity (site logs [and analytics]); audio/visual information only if you send it in support or we view it during a remote-support session; and inferences — none. We collect it from you, your devices, and our service providers, for the purposes in Section 3, and disclose it for business purposes to the service providers in Section 4. We do not collect or use sensitive personal information to infer characteristics about you. Retention is described in Section 8.
You have the right to: know what we collect, use and disclose; access and receive a copy; correct inaccurate information; delete it (subject to legal exceptions); opt out of sale or sharing (we don't sell or share); limit use of sensitive personal information (we don't use it for purposes that require this); and not be discriminated against for exercising your rights.
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Nebraska, Rhode Island and others as they take effect — have similar rights: to confirm whether we process your data, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling with significant effects. We do not sell personal data, use it for targeted advertising, or profile you.
Email [PRIVACY EMAIL] or write to [ADDRESS] [or use the form at [PRIVACY REQUEST URL]]. We will verify your identity by matching information we already hold (for example, your order number and email). An authorized agent may act for you with your signed permission. If we deny your request, you may appeal by replying to our decision with "Appeal" in the subject line; we will respond within the time required by your state's law (generally 45–60 days). If you're not satisfied with the appeal, you may contact your state Attorney General.
Our website and products are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 where state law sets that age). Purchasers must be 18 or older. If you believe a child has given us personal information, contact [PRIVACY EMAIL] and we will delete it. HomeButler may store photos or recordings of your children on your own box; that data is under your control, not ours.
| Data | Kept for |
|---|---|
| Orders, invoices, tax records | [7] years (tax and accounting law) |
| Licence keys and purchase history | As long as your licence is active, plus [3] years |
| HomeButler Care billing and cancellation records | Life of the plan plus [3] years (to show auto-renewal consent and cancellation) |
| Box registration (token, hostname, version) | While the box is registered, plus [3] years |
| Data on returned boxes | Not kept: erased on arrival (Section 2.7) |
| Support tickets | [3] years after the ticket closes |
| Remote-support session logs | [3] years |
| Website server logs | [90] days |
| Marketing list | Until you unsubscribe |
We delete or de-identify data when it's no longer needed.
We use reasonable administrative, technical and physical safeguards, including encrypted connections (HTTPS), access controls, multi-factor authentication on our admin and support accounts, and a payment processor that is PCI-DSS compliant. Support staff access to customer boxes uses time-limited accounts that the customer switches on, and is logged. No system is perfectly secure; if a breach affects your personal information, we will notify you as required by law.
We and our service providers process data in the United States. We sell only to U.S. customers.
We will post any changes here with a new "Last updated" date and email you about material changes before they take effect.
[SELLER LEGAL NAME] [ADDRESS] Privacy email: [PRIVACY EMAIL] Phone: [SUPPORT PHONE]