Privacy Policy for Alcedo
This Privacy Policy explains how Alcedo for macOS ("Alcedo", "the app", "we", "us", or "our") handles information when you use the app.
Alcedo is a remote desktop client for macOS. It allows users to connect to remote desktop environments, including user-configured RDP servers, RD Gateways, Azure Virtual Desktop, Windows 365 Cloud PCs, and Microsoft Entra ID / Azure-based services.
1. Summary
Alcedo is designed to keep your remote desktop data under your control.
We do not operate a proxy or relay for your RDP sessions. Remote desktop traffic is transmitted directly between your Mac and the remote desktop server, RD Gateway, Microsoft service, or other server configured by you or your organization.
We do not use advertising SDKs, tracking SDKs, cross-app tracking, or third-party analytics tools.
We do not sell personal data.
2. Information the App Processes
Depending on the features you use, Alcedo may process the following types of information.
Microsoft / Entra ID Account Information
If you sign in with Microsoft Entra ID / Azure, the app may process account information provided by Microsoft, such as:
- Email address or user principal name
- Display name
- User or account identifier
- Tenant identifier
- Authentication tokens required to access Microsoft services
This information is used only to provide sign-in, Azure Virtual Desktop, Windows 365 Cloud PC, and related Microsoft integration features.
RDP Connection Information
When you create or use remote desktop connections, the app may store or process:
- Server hostname or IP address
- Port
- Username
- Domain
- Connection name
- RD Gateway address
- Workspace or resource names
- Cloud PC names or identifiers
- Recent connections
- Connection history, including connection name, host, username, timestamps, and transferred byte counts
- Trusted server certificate fingerprints
This information is used to let you create, save, organize, and reconnect to remote desktop sessions.
Credentials
If you choose to save credentials, Alcedo may store:
- RDP passwords
- RD Gateway passwords
- Microsoft authentication tokens required for signed-in Microsoft services
RDP and RD Gateway passwords are stored locally in the macOS Keychain. Microsoft authentication tokens are stored using Microsoft Authentication Library (MSAL) token storage and the macOS Keychain where applicable.
You can use the app without saving RDP passwords, although some convenience features may not be available.
Remote Desktop Session Data
During an active remote desktop session, the app may transmit session data between your Mac and the remote server you connect to. This may include:
- Screen content
- Keyboard input
- Mouse input
- Clipboard data, if clipboard redirection is enabled
- Audio playback, if audio redirection is enabled
- Microphone input, if microphone redirection is enabled
- Files or folders, if drive redirection or file transfer features are enabled
- Printer data, if printer redirection is enabled
This data is transmitted directly to the user-configured remote desktop server, RD Gateway, or Microsoft remote desktop service. Terminalworks does not receive, inspect, store, or relay the content of your remote desktop sessions.
Local Logs
The app may write local diagnostic logs using macOS system logging. These logs are stored on your Mac and are used for troubleshooting. They are not automatically uploaded to Terminalworks.
3. Where Information Is Stored
Alcedo stores information locally on your Mac using standard macOS storage mechanisms, including:
- macOS Keychain, for saved credentials and authentication-related secrets
- Microsoft Authentication Library token cache, for Microsoft sign-in tokens
- UserDefaults or local application storage, for connection profiles, recent connections, trusted certificates, workspace/resource information, and app preferences
- User-selected files, if you import or export connection profiles
Some Microsoft access tokens or Microsoft-related account details may be cached locally to support app functionality. Terminalworks recommends protecting your Mac user account with a strong password and keeping macOS security features enabled.
4. Information Sent to Third Parties
Alcedo may communicate with the following services depending on the features you use.
Microsoft Services
If you use Microsoft sign-in, Azure Virtual Desktop, or Windows 365 Cloud PC features, the app communicates with Microsoft services such as:
- Microsoft identity platform / Microsoft Entra ID
- Microsoft Graph
- Azure Virtual Desktop feed services
- Windows 365 Cloud PC services
Microsoft processes information according to Microsoft's own privacy terms and policies.
User-Configured Remote Servers
When you connect to an RDP server, RD Gateway, or RD Web Access feed, the app sends the information needed to establish and maintain the connection to the server you configured or that your organization provides.
This may include connection details, credentials, authentication tokens, clipboard data, redirected files or folders, audio, microphone input, printer data, and remote desktop session traffic, depending on the features you enable.
Terminalworks
Based on the current app design, Alcedo does not upload RDP session contents, saved connections, credentials, analytics, telemetry, or crash reports to Terminalworks servers.
The app may open Terminalworks websites, support pages, documentation pages, or product pages in your browser when you choose those links.
5. Analytics, Tracking, and Advertising
Alcedo does not use:
- Third-party analytics SDKs
- Advertising SDKs
- Attribution SDKs
- App Tracking Transparency tracking
- IDFA
- Cross-app or cross-website tracking
- Data brokers
- Fingerprinting for advertising or tracking
We do not use your data for advertising or tracking.
6. macOS Permissions and Features
Depending on the features you use, Alcedo may rely on macOS permissions or capabilities such as:
- Clipboard access, for clipboard redirection between your Mac and the remote desktop session
- File and folder access, when you select files, import/export connection profiles, or enable redirected folders
- Network access, to connect to Microsoft services and user-configured RDP servers, RD Gateways, or RD Web Access servers
- Printer access, if printer redirection is enabled
- Microphone access, if microphone redirection is enabled
These features are used only to provide remote desktop functionality selected or configured by you.
7. Data Retention
Most information processed by Alcedo is stored locally on your Mac and remains there until you delete it, reset the app, remove saved connections, remove credentials, sign out, clear local data, or uninstall the app.
Saved credentials may remain in the macOS Keychain until removed by the app, by macOS, or manually by the user.
Information processed by Microsoft services or your organization's remote desktop infrastructure is governed by Microsoft's terms or your organization's policies.
8. Data Security
Alcedo uses standard macOS security mechanisms such as the macOS Keychain for stored credentials. Remote desktop connections are encrypted using the security mechanisms supported by the configured RDP server, RD Gateway, Microsoft service, and FreeRDP protocol implementation.
You are responsible for ensuring that the remote servers you connect to are trusted and properly configured.
9. Your Choices
You can control many privacy-related features by choosing whether to:
- Sign in with Microsoft
- Save RDP or RD Gateway passwords
- Save connection profiles
- Enable clipboard redirection
- Enable drive or folder redirection
- Enable microphone or audio redirection
- Enable printer redirection
- Import or export connection profiles
- Delete saved connections, credentials, or local app data
You may also remove stored credentials using macOS Keychain Access.
10. Children's Privacy
Alcedo is intended for professional, business, enterprise, and general remote desktop use. It is not directed to children and does not knowingly collect personal data from children.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and make the revised version available through the app, our website, or the App Store listing.
12. Contact
If you have questions about this Privacy Policy or privacy-related requests, please contact Terminalworks:
- Privacy contact
- [email protected]