FILENAME: privacy_policy.txt LAST_UPDATED: 2026-05-02 OWNER: Alchetrix (OPC) Private Limited ============================================================================ APTSELECT PRIVACY POLICY ============================================================================ 1. SCOPE ---------------- This Privacy Policy applies to two distinct interactions you have with us: A. The aptselect Desktop Application ("The Software") B. The https://aptselect.com Website and Landing Pages ("The Website") 2. PART A: THE DESKTOP APPLICATION (LOCAL-FIRST) ------------------------------------------------- Our philosophy for the software is simple: You own your data. A. No Personal Data Collection The Software does NOT collect, store, or transmit your prompts, API keys, or AI completion history to us. This data resides strictly in a local SQLite database on your physical machine. B. No Behavioral Tracking or Analytics The Software does NOT contain third-party analytics SDKs (e.g., Google Analytics, Microsoft Clarity, Mixpanel). We do not track which buttons you click inside the app or inspect your workflows. C. Local Storage Your data is stored in the following local directories: - Windows: %APPDATA%\aptselect\ - macOS: ~/Library/Application Support/aptselect/ - Linux: ~/.config/aptselect/ D. Required Network Operations & Diagnostic Data While we do not collect behavioral telemetry, the Software requires basic internet connectivity for routine operational functions. On startup, the Software automatically connects to our servers to: 1. Fetch the latest supported AI model registry (llm_registry.json). 2. Check for application updates (via Electron-Updater). During these requests, we log minimal diagnostic data (your Operating System and App Version) to help us prioritize development efforts. To count active users without tracking individuals, your IP address is processed into an anonymized, daily hash. We do not store your actual IP address in our database, and we never use this data to profile your behavior. E. Third-Party AI Providers To function, the Software transmits your prompts, configurations, and API keys directly to the Third-Party AI Providers you choose to configure (e.g., OpenAI, Anthropic, Google). - We do not intercept, proxy, or store this data on our servers. - The transmission and processing of this data are governed strictly by the Privacy Policies and Terms of Service of the respective AI providers. - We strongly recommend reviewing the privacy practices of any AI provider before entering your API key into the Software. 3. PART B: THE WEBSITE (ANALYTICS & MARKETING) ----------------------------------------------- When you visit our website, standard web technologies are used to measure performance. We only load these scripts if you provide explicit consent via our privacy banner. A. Web Analytics (Google Analytics 4) We use GA4 to understand traffic sources and visitor counts. This collects anonymized data such as: - Your IP address (anonymized) - Browser type and Operating System - Pages visited and duration of stay B. Behavior Analysis (Microsoft Clarity) We use Microsoft Clarity to improve website usability via heatmaps and session replays. - Clarity captures how you move your mouse, click, and scroll. - All sensitive input (emails, passwords) is strictly masked and never recorded. C. Marketing Pixels (Meta / Reddit) We may use tracking pixels to measure ad effectiveness. These tools use cookies to track visits resulting from an advertisement. D. Waitlist & Forms (Tally.so) Data entered into forms (Name, Email) is stored securely by Tally and used strictly for waitlist updates. We do not sell this data. E. Infrastructure & Security (Cloudflare) Our website routing (DNS) and software downloads (R2 Storage) are powered by Cloudflare. To provide CDN delivery, SSL, and DDoS protection, Cloudflare processes standard web request data, including your IP address, when you visit the site or download the application. This is strictly for security and network performance, not tracking. 4. THIRD-PARTY DATA PROCESSORS ------------------------------ Please note that this list applies strictly to our Website infrastructure. For your Desktop Application, your data processors are the Third-Party AI Providers (e.g., OpenAI, Anthropic, Google) whose API keys you actively choose to configure. Please review their respective policies: - Google Analytics (Traffic Analysis) - Microsoft Clarity (User Behavior Analysis) - Tally.so (Form Submission) - Cloudflare (DNS, CDN, and R2 Object Storage) 5. YOUR RIGHTS (DPDP ACT 2023) ------------------------------ As a "Data Principal" under Indian law, you have the right to: - Access a summary of personal data we hold (e.g., waitlist email). - Correct or erase your personal data. - Withdraw your consent for tracking at any time. 6. UPDATES ----------- We may update this protocol to reflect changes in law. Updates are effective immediately upon posting to this URL.