Privacy Policy

Last updated: October 10, 2026

This policy explains how Scalæon handles information in connection with Scalaeon products, our websites, purchases, licensing, software updates, and support. It describes our current products and services. Sections addressing particular features apply to products that include those features.

Scalaeon products that process desktop files do so locally. They do not transmit your source-file contents to Scalæon for processing. Online services used for purchases, activation, updates, and support handle separate information, as described below.

1. Information processed locally by Scalaeon products

In Scalaeon products with file-system workspace features, when you select materials for processing, the app can read their names, paths, metadata, and supported file contents to analyze them and help you organize and explore them.

That processing takes place on your computer. Workspace information is stored locally. Depending on the features you use, it includes domains, source references, content-derived analysis, notes, placement history, graph information, and preferences. Placing materials in domains does not move, rename, or edit the original files.

Scalaeon products do not provide cloud storage for your files or workspaces. They do not upload your file collection to an AI service, advertising service, or Scalæon server. Our desktop apps do not send product-usage analytics or automatically upload diagnostic reports.

You control where you save your workspaces. If you choose a folder managed by a cloud storage or backup service, that service may synchronize it under your own settings and its policies. Opening an original file in another application also places its subsequent handling under that application’s control.

Optional agent connections

Where Scalaeon products include an optional connection that lets an external agent work with the app, that connection is disabled by default and communicates on your own computer.

When you enable and authorize an agent, it can receive relevant application information, such as domain names, file names and paths, metadata, notes, search results, and content-derived analysis. Permissions to change placements are separate.

An external agent may use an online AI provider or other service, depending on how you configure it. That processing is governed by the agent’s settings and provider policies. Local processing by Scalaeon products does not mean that an independently connected agent is also entirely local.

2. Purchases and payment information

We use Lemon Squeezy as our merchant of record for checkout, payment processing, receipts, and license delivery. Free trial and feedback-program keys are also delivered through Lemon Squeezy.

Our current Scalaeon products do not require a Scalæon account. However, the hosted checkout or key-delivery process requests an email address. Paid checkout can also request your name, billing address, payment details, and tax information where applicable.

Lemon Squeezy and its payment providers, including Stripe or PayPal where used, process payment information. Scalæon does not collect or store your full payment-card number or card security code.

We can access purchase and licensing records needed to administer sales and support customers. These can include your contact information, order reference, purchased product, transaction date, amount, tax, payment or refund status, and license information. Our internal sales reporting also processes order records to produce aggregate sales and refund statistics.

Lemon Squeezy handles information under its Privacy Policy and Buyer Terms.

3. License activation and recovery

Scalaeon products do not send your computer’s actual system identifier to Lemon Squeezy. For products that use license-key activation, the app generates a separate, product-specific identifier on your computer and sends that derived identifier for activation.

The process works as follows:

1. The app reads the computer’s system identifier locally.

2. It combines that value with a product-specific label and applies a one-way cryptographic hash.

3. It sends the resulting app-generated identifier, together with the license key you enter, to Lemon Squeezy’s licensing service. The original system identifier stays on your computer.

The derived identifier consistently represents that computer, allowing Lemon Squeezy to distinguish activations and enforce the license’s computer limit. It is associated with your license, so we treat it as an identifier rather than anonymous data.

Activation registers the computer against a license key that has already been issued. It does not use your computer’s system identifier to generate the customer’s license key. Recovery can also send the existing activation identifier.

Activation does not send your source files, workspace contents, or file collection to Lemon Squeezy.

Products using this activation flow store a local license record using macOS Keychain or Windows Credential Manager. This record includes a hash of the license key, the derived computer identifier, activation information, license type, and applicable timing information. It is separate from your workspaces and can remain after the app is reinstalled.

After successful activation, routine license checks take place locally. Ordinary use does not require recurring online license validation. Explicit activation and recovery operations require a connection.

4. Websites, downloads, and updates

Our websites, documentation, demo media, downloads, and update files are delivered through Cloudflare, including Cloudflare Pages and R2.

When your browser or a Scalaeon product requests these resources, the delivery infrastructure processes ordinary request information. This can include:

• Your IP address and request time.

• The requested page or file.

• Browser or client information, operating system, and user agent.

• Referring page information, if supplied.

• Response status, errors, caching information, and approximate location derived from an IP address.

We use hosting and network statistics to understand traffic, maintain availability, and investigate delivery or security problems. These are distinct from telemetry about what you do inside Scalaeon products. See Cloudflare’s Privacy Policy.

Software updates

Updater-enabled Scalaeon products check public update metadata when the app starts. You can also check manually. The app may request a small recovery notice used when a normal update cannot safely proceed.

These requests do not include your license key, activation identifier, email address, workspace information, or source-file contents. The app compares versions locally. If you choose to download an update, the requested file identifies the relevant release and platform.

Updates are not silently installed. The app offers the update, and you choose whether to download it and then install and restart. Update packages are checked against the app’s trusted signing key.

For Windows products that require WebView2, installation may also contact Microsoft to obtain that runtime if it is missing.

Cookies and browser storage

We do not operate advertising pixels, session-replay tools, or a cross-site behavioral advertising system.

The main website loads Lemon Squeezy’s checkout script to support checkout. Loading that script contacts Lemon Squeezy even before you complete a purchase. Its checkout and payment services use cookies or similar technologies under their own policies.

Our online manual stores your visual-edition preference in your browser’s local storage. You can remove it through your browser’s site-data controls.

5. Support, feedback, and diagnostic reports

If you email contact@scalaeon.com, we receive your email address, name if supplied, message, and any attachments you choose to send. Support correspondence may also contain order information, license information, screenshots, or diagnostics that you voluntarily include.

In Scalaeon products with a diagnostic-reporting feature, that feature prepares an email draft or copies a report for you. It does not automatically send the report. Reports can contain a failure code, technical error details, application and operating-system versions, architecture, timestamps, and related diagnostic information. The reporting code removes file paths from diagnostic detail and does not automatically attach your source files. You can review the report before sending it.

How support messages are processed

Our support mailbox uses Microsoft 365. An internal, self-hosted workflow copies message information into our support records, including the sender, subject, plain-text body, received time, and message reference.

Some messages are sent to the OpenAI API to help categorize support requests, identify product issues, and organize feedback. The information sent includes the sender, subject, and stored plain-text message body. The resulting categories, summaries, and selected excerpts are kept with our internal records.

This workflow helps us review correspondence. It does not automatically send replies or decide license entitlement, refunds, or account access. Attachments are not retrieved by this automated sorting workflow, although attachments you email remain in the mailbox.

OpenAI states that API data is not used for model training by default. Its separate abuse-monitoring retention can still apply; disabling response storage does not eliminate that retention. See OpenAI’s API data controls.

Our internal support systems are hosted on OVHcloud and accessed through private operational tools. Encrypted backups of operational records, which can include support correspondence, are stored in Google Drive. These are backups of our business records, not backups of your local files or workspaces in Scalaeon products.

6. Purposes and sharing

We use the information described in this policy to deliver purchases and license keys, activate and recover licenses, provide downloads and updates, answer support requests, understand reported problems, maintain infrastructure, and keep necessary commercial records.

We share information with the providers needed for those activities. Payment providers also process information for their own payment, fraud-prevention, tax, and legal responsibilities.

We do not sell your personal information or share it for behavioral advertising. We may disclose relevant records where legally required or reasonably necessary to address fraud, security incidents, or legal claims.

Where data-protection law requires a legal basis, our processing relies on performing a purchase or support relationship, complying with legal obligations, and legitimate interests in operating, securing, and improving the service through support and feedback.

7. Retention and security

Your local files, workspaces, preferences, and license records remain under your control on your computer. Removing the app does not necessarily remove saved workspaces or the separate secure license record.

Support email, internal support records, and operational backups currently have no fixed automatic deletion schedule. They remain until removed through operational handling or a privacy request, subject to records we must retain for legal, accounting, security, or dispute purposes. Backup copies may remain after a record is removed from an active system.

Lemon Squeezy and other providers maintain their own retention arrangements for records they control. Hosting and network logs are also subject to the relevant provider’s settings and policies.

We use measures appropriate to the systems involved, including secure operating-system storage for local license records, restricted access to internal tools, and encryption of operational backups. No system can guarantee absolute security.

Our providers may process information outside your country. Local file processing in Scalaeon products is separate from the international infrastructure used for payments, hosting, and support.

8. Your choices and rights

You can use Scalaeon products without sending support reports. Where these features are included, you can decline updates, disable optional agent connections, and manage locally saved workspaces yourself. Browser settings let you manage cookies and local storage, although blocking payment-service technologies may affect checkout.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or obtain a copy of personal information we hold. You may also have a right to complain to your data-protection authority.

Send privacy requests to contact@scalaeon.com. We may need limited information to verify the request and locate relevant records. Please do not send a full payment-card number or private credentials.

We cannot retrieve or delete local files that Scalaeon products have never transmitted to us. Requests concerning records independently controlled by a payment or other provider may also need to be addressed to that provider.

9. Changes and contact

We will publish revisions to this policy with an updated date and provide additional notice where required by law.

For privacy questions or requests, contact Scalæon at contact@scalaeon.com.