Draft · needs legal review
Privacy policy
Last updated: TODO
Who we are
ChatShift is made by KV CACHE SIA, Latvia. Registration number and address: TODO.
Your chats never reach us
The ChatShift app runs on your Mac. Your messages, media, contacts, backup key and backup passwords are processed only on your computer and are not sent to us or to anyone else. We therefore do not have access to them.
Working files, including decrypted data, are stored in a folder you choose on your Mac, readable only by your user account. The app offers to delete this folder when you finish. Your 64-digit key and iPhone backup password are kept in memory only and are not written to disk or logs.
Purchases
Payments and licence keys are handled by Lemon Squeezy, which sells ChatShift to you as the merchant of record. When you buy, Lemon Squeezy processes your name, email address, billing country and payment details under its own privacy policy (lemonsqueezy.com/privacy). We receive the order details we need to support you (such as your email address, the order and the licence key); we never see your full card details. TODO: legal basis and how long order records are kept.
Licence checks and updates
The app contacts api.lemonsqueezy.com only to activate and validate your licence key. It sends the licence key and your Mac's computer name (so you can recognise the activation in your Lemon Squeezy order). Nothing else is sent: no chats, contacts, phone details or usage data. To check for updates, the app downloads https://chatshift.io/appcast.xml about once a day (it asks you first; you can turn this off in About ChatShift). That request carries only what any web request does: your IP address and the app's version.
This website
This website uses no analytics, no advertising trackers and no third-party scripts. The site is served through Cloudflare from our own server. TODO: confirm server and Cloudflare logs (IP address, retention period).
If you write to us, we use your email address and message only to answer you. TODO: retention period.
Your rights
Under the GDPR you may ask for access to, correction or deletion of personal data we hold about you, and object to or restrict its processing. You can also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija). TODO: verify wording.