Privacy Policy

1. Controller and contact

The data controller is Rasmus Nørgaard, Denmark. Operator details are available under Legal information. Privacy requests can be sent to [email protected].

2. Local files and AI processing

Free duplicate scanning works locally and does not use hosted AI. For a paid AI request, Indexborn first prepares a bounded text and metadata extract on your Windows device. The original file is not uploaded. Items flagged by the local privacy checks are held for review instead of being sent automatically. These checks cannot guarantee that every sensitive detail is detected. Image or PDF previews are included only if you explicitly enable that setting; private metadata such as GPS and EXIF is excluded, but previews can still show private information visible in the image or PDF page. The native Windows app sends permitted prepared evidence and naming settings directly to OpenAI using your own API key. Indexborn's license server does not receive your OpenAI API key, file evidence, or AI response. The key is stored protected on your Windows PC, separately from normal settings and diagnostic exports.

3. Licence data

To activate a licence, the app sends the licence key, a random installation identifier, and signed device proof. Later validation sends the signed session lease and device proof instead of resending the licence key. The identifier is generated for the installation and is not a hardware fingerprint. The licence seat stores the random installation identifier, installation public key, Indexborn licence reference, and update time needed to enforce one active Windows PC. The service also keeps limited payment and delivery records. It does not store full payment card details or original files. Indexborn issues and manages licence status using verified payment and subscription records from Stripe.

For licence delivery and recovery, the service keeps your original checkout email address encrypted, a protected mailbox lookup reference, licence and payment references, delivery status, and a limited email-provider receipt. The raw licence code is not stored in the delivery database. Recovery sends only to the original purchase mailbox and does not disclose whether an address has purchased a licence. Your licence code is private: it can authorize app activation and access to billing management.

4. Payment and service providers

Stripe processes checkout, payment details, receipts, refunds, subscriptions, and related fraud-prevention data for the seller. The seller remains responsible for applicable VAT and issues Indexborn licence keys. We never receive or store full payment card details. Cloudflare hosts the website, licence gateway, transactional licence delivery, release information, and downloads and may process normal security and traffic data such as IP address, time, requested URL, and user agent. OpenAI processes the bounded evidence required to produce the requested AI result under your own OpenAI API account. Indexborn requests that OpenAI does not store API responses for later retrieval; provider security and legally required processing may still apply.

5. Telemetry, support, and retention

Indexborn contains no behavioural application telemetry. File evidence is sent only to perform an AI action you start, not for analytics. Local recovery records can contain extracted evidence, suggested filenames and folders on your own PC; they are not uploaded to the Indexborn license service. Your API key is excluded from logs, local recovery records, diagnostic exports, and browser storage. Website traffic totals and Stripe sales statistics may be used without adding file-content tracking to the app. If you contact support, we process the message and details you choose to provide. Providers and the seller retain records only as needed for service, security, support, accounting, tax, and legal obligations.

Under our manual retention policy, we retain active licence data while the licence is being used. We review inactive licence and delivery data monthly and delete it at the monthly review after 12 months of inactivity, unless an open dispute or mandatory record-retention obligation requires it to be kept. This is a manual operator procedure, not an automatic deletion schedule or live-record TTL.

Removing live licence-delivery records does not immediately remove provider recovery copies. Cloudflare's SQLite-backed licence storage supports recovery history for up to 30 days. This recovery window is not a live-record retention limit. Live licence and delivery records are not automatically deleted after 30 days; there is currently no automatic expiry for those live records. Previously delivered email and Stripe's own payment records are handled separately.

6. Security and your rights

Licence leases and updater installers are cryptographically signed. Release manifests are served over HTTPS and checked against the verified release identity; the updater signature covers installer bytes, not manifest metadata. Secrets are kept outside public source and release artifacts. Depending on applicable law, you may request access, correction, deletion, restriction, objection, or data portability and may complain to your data-protection authority. Some order records must be retained despite a deletion request where law requires it.