Privacy Policy

Privybox is built by Pacentra Consulting Pty Limited (ABN 42 698 840 096), an Australian company based at 156 Victoria Rd, Hawthorn East VIC 3123, Australia ("Pacentra Consulting", "we", "us"). This policy explains what data Privybox collects, why, and what we never collect — for both the desktop app and this website.

The short version

Privybox is built so that your documents never leave your computer. The app processes, embeds, and answers questions about your files entirely on your own device using locally-run AI models (via Ollama). We never see your file names, file content, folder paths, questions, or chat history — there is no server in the loop for any of that, by design, not by policy.

The only data we collect is the small amount needed to run Pro subscriptions, described below.

What the desktop app sends us, and when

The app only talks to our servers in these specific situations:

• Checking for updates. The app periodically asks a public URL for the latest version number, so it can tell you when an update is available. This request carries no personal data or document data.
• Verifying your Pro subscription. If you're on Pro, the app periodically sends your license key and a device fingerprint (a one-way identifier derived from your hardware, used only to tie a license to a device — not to track you) to our license server, which replies with your current tier and subscription expiry.
• Starting or managing a subscription. When you choose to upgrade to Pro or manage an existing subscription, the app opens a secure Stripe-hosted page in your browser. We never see your payment details — see "Payment processing" below.
• Recovering a lost license. If you reinstall the app in a way that loses your local license file, you can enter the email address you used at checkout to recover your Pro status. That email is sent to our license server to look up your license.

Outside of these cases, the app makes no network requests related to your account or data.

What we store on our servers

Our license server (a small backend hosted on Cloudflare) stores only what's needed to run subscriptions and support license recovery:

• Your app-generated license key
• Your subscription tier and expiry date
• A reference to your Stripe customer and subscription record (not your card details — see below)
• A device fingerprint, so a license can be tied to the machine it was issued on
• The email address you used at Stripe Checkout, so you can recover your license if you lose your local install (see above)

We never store your documents, file names, questions, chat content, or any other usage data — the desktop app never sends us any of that in the first place.

Payment processing

All payments are handled directly by Stripe, a PCI-compliant third-party payment processor. When you subscribe to Pro, you enter your card details on a page hosted by Stripe, not by us. We never see, transmit, or store your card number, expiry date, CVC, or billing address — Stripe collects and holds that information under its own privacy policy.

This website

privybox.io is a plain static website. We don't use cookies, analytics scripts, or third-party trackers on it.

Who else sees this data

We don't sell your data or share it with third parties for marketing. The only parties that process data on our behalf are:

• Stripe — payment processing (see above)
• Cloudflare — hosts our website and license server infrastructure

Both are used strictly to operate the service, not to build a profile of you.

How long we keep it

We keep your license and subscription records for as long as your account is active, plus a reasonable period after cancellation in case you resubscribe or need to recover a license. You can ask us to delete your data at any time (see "Your rights" below), subject to any records we're required to retain for tax, accounting, or legal purposes.

International data transfer

Pacentra Consulting is based in Australia. Stripe and Cloudflare operate global infrastructure, so data they process on our behalf may be handled in other countries as part of their standard operations.

Your rights

You can ask us to access, correct, or delete the data we hold about you at any time by emailing support@privybox.io. Because the app itself never uploads your documents, there's nothing to delete on that front beyond what's already described above.

Children's privacy

Privybox is not directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated "Last updated" date.

Contact us

Questions about this policy? Email support@privybox.io.