Private Recall

Legal

Privacy Policy

Last updated: DRAFT — pending legal review.

1. Who this covers

This policy covers the Private Recall marketing website and the accounts / licensing portal (the “platform”). It is distinct from the privacy behavior of the software products themselves (Recall, Outlook MCP), which run locally on your device and are documented in each product's own materials.

2. What we collect

  • Account: your email address and an identifier from our authentication provider.
  • Billing: subscription and customer identifiers from our payment processor. Card details are handled by the processor — we never see or store them.
  • Entitlement: which products and tiers your account is licensed for, and expiry.
  • Devices / installs: a per-install identifier and a “last seen” timestamp, used to refresh your license and manage your installs.
  • Operational: minimal, privacy-respecting diagnostics and error reports needed to keep the service reliable and secure.

3. What we never collect

We do not collect, receive, or store the content you use our products with: your mail, your medical, financial, or contract documents, any other files you index, or their extracted text or embeddings. The platform is designed so that there is no endpoint that can accept this content. When a client checks its license, it sends its entitlement request only — never your content, credentials, or tokens.

4. How we use what we collect

  • To sell, license, and deliver the software and your license keys.
  • To process payments, renewals, and refunds.
  • To provide support and to keep the service secure and reliable.
  • To send you essential service messages (receipts, license and account notices).

5. Service providers

We rely on a small set of vendors to run the platform — for authentication, payments, database hosting, transactional email, error monitoring, and site hosting. Each receives only the minimum data needed for its function, and none receives your product content (because we never hold it). A current list of subprocessors will be maintained here.

6. Cookies

The marketing site aims to run without tracking cookies. The accounts portal uses cookies strictly necessary to keep you signed in.

7. Retention

We keep account, billing, and entitlement records for as long as your account is active and as required for tax, accounting, and legal obligations, then delete or anonymize them.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your account data. Contact us at [email protected] and we'll help.

9. Changes

We'll post any changes to this policy here and update the “last updated” date.

10. Contact

Questions about privacy? Email [email protected].