Privacy Policy

1. Information we collect

• Account information: email address, account identifier and UID, verification status, access plan, license expiry and account/device authorization records. Our authentication provider processes passwords and verification credentials; our application security logs do not record passwords, security codes or session tokens.
• Device and security information: device public keys and key identifiers, Windows build and architecture, CPU/GPU model, approximate RAM, display count and screen resolution. The launcher sends these details for device authorization and compatibility. Security events can include your IP address, browser/client information, event time and account/device identifiers.
• Payment and referral information: orders, invoices, transaction identifiers, amounts, payment status, plan, discount/referral codes and related earnings or payout requests. A cryptocurrency payout request includes the wallet address and selected network you provide. Blockchain transactions may be publicly visible.
• Content you submit: screenshots, questions, saved instructions and conversation context sent for an AI response, plus support tickets and other messages you send us. Screenshots may contain information about you or other people.
• Usage and preferences: request counts, request-size totals, security/rate-limit records and local appearance or interface preferences. Authorization state and some preferences are also stored on your device.

2. How we use information

We use information to create and protect accounts, verify sign-ins and devices, deliver licensed software and updates, process payments, provide AI responses, enforce usage limits, investigate failures or abuse, answer support requests and meet legal obligations. We use referral information to attribute purchases and administer any applicable referral program.

We do not sell account or device information. We do not use your submitted screenshots or questions to run our own advertising profiles. We disclose information to the providers needed to operate the service as described below.

3. Screenshots and AI processing

When you submit an AI request, its screenshot content, question, instructions and relevant conversation context are sent to our backend and onward to the AI services used to answer it. The current model is Deepseek v4.1 flash 1017, accessed through OpenRouter and the Inference.net US provider endpoint. Model or provider availability can change.

The application proxy records usage metadata rather than saving your screenshots, prompts or AI answers as conversation records in our application database. This does not mean that every third-party provider has zero retention: providers may retain request information for their own operational, safety or legal purposes under their applicable policies and settings.

Only submit information you are authorized to share. Avoid sending passwords, payment details, health records, confidential work or other sensitive material. Review your screen before submitting a capture.

4. Who processes information

Authorized personnel and service providers receive information needed for their roles. Current service categories include:

• Hosting and accounts: Vercel for application hosting and request processing, and Supabase for authentication, database and file storage.
• Email: Resend for verification messages, account security alerts and service communications.
• AI: OpenRouter and the selected model host, currently Inference.net, for submitted AI requests. See OpenRouter’s privacy policy and Inference.net’s privacy policy.
• Payments: the payment processor identified at checkout, currently OxaPay for cryptocurrency invoices. When you choose card checkout, Stripe processes the payment details entered in its checkout. We receive transaction and payment-status information; our application does not collect or store full payment-card numbers.
• Embedded media: YouTube/Google receives browser and connection information when video thumbnails load or you play an embedded demonstration. We use the privacy-enhanced YouTube embed domain for playback, but third-party media is still subject to the provider’s policies.

We may also disclose information when legally required, to protect rights or investigate fraud, or as part of a business transfer subject to applicable privacy obligations. We operate from the United States, and our providers may process information in the United States and other countries.

5. Cookies and local storage

We use session cookies to keep you signed in and protect account actions. A referral cookie can remember a referral code, and local storage can remember your chosen color theme. The launcher stores local preferences and saved authorization; authorization state uses Windows account protection. Third-party media and payment services may use their own cookies or storage.

You can clear or block cookies and local storage using your browser settings, or remove local application data from your device. Doing so may sign you out, remove preferences or prevent account and referral features from working.

6. How long information is kept

• Account, license, active-device, order, referral and financial records are kept while needed to operate the account and meet security, accounting, dispute-resolution or legal obligations.
• Routine security events are scheduled for deletion after 30 days. IP fields in older administrative audit metadata and observations on devices revoked more than 30 days ago are scheduled to be cleared.
• Closed support tickets are scheduled for deletion 180 days after their last update. Email-verification challenge records are scheduled for deletion after two days.

Scheduled cleanup is not instantaneous. Backups, provider logs and records subject to a legal or security hold can have different retention periods. Contact us to request deletion or learn about records associated with your account.

7. Your choices and privacy rights

Depending on the laws that apply to you, you may request access, correction, deletion or a copy of personal information, or object to or restrict certain processing. Email support@hidden.help from your account address with your request. We may verify your identity before acting. Some records must be retained for legal, security or transaction reasons; we will explain applicable limits.

You can choose what to submit to the AI service, stop using the app, clear local data, or contact support about closing an account. Essential security and account messages are part of providing the service. We do not require you to receive promotional marketing to use your paid access.

The service is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

8. Security

We use HTTPS, access controls, account verification and device-authorization safeguards to protect information. Access is limited according to operational needs. No service or transmission method can guarantee complete security, anonymity or invisibility to other software. Keep your sign-in credentials private and report suspected compromise promptly.

9. Changes and contact

We may update this policy as the service or legal requirements change. We will update the date above and provide additional notice of material changes where required. Questions and privacy requests can be sent to hidden.help, United States, at support@hidden.help.

See also our Terms of Service and refund and cancellation policy.