What we collect
| Category | Specifically | Why |
|---|---|---|
| Account | Email address, hashed password | Sign-in, license delivery, support |
| Purchase | PayPal-provided transaction ID, amount, currency, country, payer email | Process payment, show purchase history |
| License usage | Anonymized machine fingerprint (one-way hash of a Windows machine identifier), hostname (best-effort), app version, IP-derived country at activation | Validate the license, enforce the 1-device limit, fraud visibility |
| Support tickets | Subject, body, timestamps, your account ID | Respond to your dashboard support requests |
| Server logs | Request paths, status codes, IP address, timestamps | Operate the service, debug failures |
| Errors | Stack traces, app version, OS version (no recording content, no file paths from your machine other than RECLION’s own logs) | Fix bugs |
What we do not collect
- Your screen recordings, screenshots, or audio. Ever. They never leave your machine.
- Your screen contents or what’s open on your computer.
- Behavioral telemetry. No analytics events, no clickstreams, no time-on-page tracking.
- Marketing-cookie data. We don’t run third-party marketing tags.
Who we share data with (processors)
These processors access only what they need to do their job:
- Supabase (database + authentication), Frankfurt or US region.
- PayPal (payment processing), global. PayPal handles your card and bank info; we never see it.
- Resend (transactional email), US.
- Vercel (hosting), global edge.
- Sentry (error tracking, optional), US/EU.
We do not sell or rent your data. Ever.
Cookies
A single authentication session cookie (issued by Supabase) when you sign in. It expires when you sign out. No tracking, analytics, or advertising cookies.
Data retention
- Account data: kept while your account exists.
- After you delete your account (
/dashboard/account→ Delete Account): personal data purged within 30 days from active systems. Backups roll off within 90 days. - Webhook event payloads (PayPal): retained 12 months for fraud and accounting.
- Support tickets: kept for 12 months after resolution, then archived without personal identifiers.
Your rights
Wherever you live, you can:
- Access the data on your account from
/dashboard. - Correct your email or password from
/dashboard/account. - Export your data: open a support ticket from
/dashboard/support; we’ll send a JSON dump within 30 days. - Delete your account:
/dashboard/account→ Delete Account.
EU/UK: GDPR rights apply (objection, lodging a complaint with your supervisory authority).
California: CCPA rights apply (right to know, delete, non-discrimination).
For any of these, write from your account email so we can verify identity.
International transfers
Data may be processed in the US, EU, or wherever our processors operate. We rely on the standard contractual clauses or equivalent protections offered by each processor.
Changes
We’ll update this page when our practices change and bump the Last updated date. Material changes get an email to your account.
Contact
Privacy questions: roar@reclion.com.