EU & UK privacy rights

The controller is Omnibus, Ltd; see the legal notice for the address. Contact for all data protection matters: privacy [at] redactfirst.app.

The RedactFirst app processes your documents only on your computer. We never receive them, so for document content you are the only controller, and no data processing agreement with us is needed.

• Answering your contact form messageLegitimate interest (Art. 6(1)(f)), or steps before a contract (Art. 6(1)(b))
• Spam protection on the contact form (Turnstile)Legitimate interest in a secure site (Art. 6(1)(f))
• Delivering and supporting a license you boughtContract (Art. 6(1)(b))
• Keeping order and tax recordsLegal obligation (Art. 6(1)(c))
• Website hosting and security logsLegitimate interest (Art. 6(1)(f))
• Error reports from the app (Sentry)Legitimate interests in keeping the app stable and secure (Art. 6(1)(f)); crash reports are needed to fix crashes, and you can object to the other reports by turning off Settings > Privacy & data > Send diagnostics
• Website analyticsConsent (Art. 6(1)(a)), which you can withdraw at any time

Where we rely on legitimate interest, you can object at any time and we will stop unless we have compelling grounds. We make no decisions based solely on automated processing, and we do no profiling.

Lemon Squeezy is a Stripe company. Card payments are processed on Stripe’s infrastructure, with Stripe acting for Lemon Squeezy. We never receive your card details.

Sentry (Functional Software, Inc., USA) processes the app's error reports for us as a processor under its data processing terms. A report contains the error type and message (with file paths, quoted text, your home folder and user name removed), the stack trace, the app version, the operating system and its version, the computer model and processor architecture, a random installation identifier and your IP address, which Sentry receives with every report and may store with it. Reports never contain your files, document contents, the texts you redact or license keys.

Crash reports are always sent, because we need them to fix crashes. Other reports are sent only while Settings > Privacy & data > Send diagnostics is on; it is on by default, and turning it off is how you object to them. Reports are transferred to the United States under Sentry's data processing terms with the Standard Contractual Clauses, and Sentry deletes them after 90 days, its default retention period.

• Access: get a copy of the personal data we hold about you (Art. 15)
• Rectification: have inaccurate data corrected (Art. 16)
• Erasure: have data deleted when there is no reason to keep it (Art. 17)
• Restriction: have processing limited while a dispute is resolved (Art. 18)
• Portability: receive data you gave us in a machine-readable format (Art. 20)
• Objection: object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time, without affecting earlier processing (Art. 7(3))

Write to privacy [at] redactfirst.app. We answer within one month, free of charge, and may ask you to confirm your identity, for example by writing from the address you used with us.

Our hosting, form, sales and error-reporting providers are based in the United States. We rely on the EU-US Data Privacy Framework, the UK Extension and the Swiss-US framework where a provider is certified, and on the European Commission's Standard Contractual Clauses (with the UK Addendum) otherwise. You can ask us for a copy of the safeguards. Error reports go to Sentry in the United States under its data processing terms, which include the Standard Contractual Clauses.

• Contact messages: up to 24 months after our last exchange
• Order and license records: as long as tax and accounting law requires
• Consent choice: stored in your browser until you change or clear it
• Error reports: 90 days (Sentry's default retention)
• Analytics: aggregated; Google Analytics data, if enabled, for 14 months

You can complain to the data protection authority where you live or work, or where you think an infringement happened. The European Data Protection Board lists all EU authorities at edpb.europa.eu; in the UK it is the Information Commissioner's Office. We would appreciate the chance to resolve it first.