Privacy Policy

RedactFirst and this website are published by Omnibus, Ltd (“we”, “us”), the controller of the personal data described here. Our full details are in the legal notice. For any privacy question write to privacy [at] redactfirst.app.

• Documents you open in RedactFirst are processed only on your computer. They are never uploaded to us or anyone else.
• The app has no account, no analytics and no advertising. It sends error reports that contain no files or document contents; apart from crash reports, you can turn them off.
• The app connects to the internet only to check a license key, to send error reports and, if you allow it, to download signed rule templates.
• This website uses analytics only after you allow it, and never when your browser sends Global Privacy Control.
• We do not sell or share personal information, and we do not use it for advertising.

Opening, reading, text recognition, name finding, redaction, checks and reports all happen on your computer. Settings, rule sets, history and your trial start date are stored in the app's own preferences on your computer and are never sent to us.

License checks. When you activate a key, the app sends your license key and a randomly generated device label, such as “Mac 3f9a”, to our license provider, Lemon Squeezy. It does not send your computer’s network name. Lemon Squeezy replies with an activation ID and the email address the license was bought with. About once every seven days the app confirms the key is still valid. Lemon Squeezy also receives your IP address, as with any connection.

Template updates. If you have a license and leave “Get template updates” on, the app downloads a public, signed file from our website at most once a day. The request carries no cookie, identifier or information about your documents; our server sees your IP address and the time, like any web server.

To find and fix bugs, the app sends error reports to Sentry, a service of Functional Software, Inc. (USA) that processes them for us as our service provider. A report contains the type of error and its message, with file paths, quoted text, your home folder and user name removed; the stack trace, which shows where in the app's code the error happened; the app version; the operating system and its version; the computer model and processor architecture; a random identifier for this installation of the app; and the IP address of your computer, which Sentry receives with every report, as with any internet request, and may store with it.

Crash reports are always sent: crashes, unexpected errors the app cannot handle, and errors it marks as critical. Other reports, such as handled errors and log messages that help us fix problems, are sent only while Settings > Privacy & data > Send diagnostics is on. It is on by default, and you can turn it off at any time; the change takes effect at once.

Error reports never contain your files, the content of your documents, the texts you redact, license keys, or your name or email address. Before a report is sent, file and folder paths and quoted text in error messages are replaced, and your home folder and user name are removed.

We rely on our legitimate interests in keeping the app stable and secure (GDPR Art. 6(1)(f)). Crash reports are needed to fix crashes; you can object to the other reports by turning Send diagnostics off. Reports are transferred to the United States under Sentry's data processing terms, which include the Standard Contractual Clauses. Sentry keeps reports for 90 days, its default retention period, and then deletes them.

Hosting and logs. The site is hosted by Vercel. Its servers process your IP address, browser type and requested pages to deliver the site and keep it secure (legitimate interest). These logs are kept for a short period by Vercel and are not used to identify you.

Analytics, only with consent. If you accept analytics, we use Vercel Web Analytics and Speed Insights, which count visits and measure performance without cookies, and, where enabled, Google Analytics. You can withdraw consent at any time through “Your privacy choices” in the footer. See the cookie policy.

When you write to us through the contact form, we store your name, email address, optional organization, topic and message so that we can answer you (legitimate interest, or steps before a contract if you ask about buying). Messages are stored in a Cloudflare D1 database. To block spam, the form uses Cloudflare Turnstile, which processes technical signals from your browser and your IP address; it does not use them for advertising.

We keep messages for up to 24 months after our last exchange, then delete them, unless we need them longer to handle a legal claim. Please do not paste the content of sensitive documents into the form.

Licenses are sold by Lemon Squeezy, which acts as our reseller and merchant of record. Lemon Squeezy collects your payment and billing details as an independent controller under its own privacy policy; we receive your name, email address, country and order details to deliver and support your license. Purchases through the Mac App Store or Microsoft Store are handled by Apple or Microsoft under their own policies. We keep order records as long as tax and accounting law requires.

Lemon Squeezy is a Stripe company. Card payments are processed on Stripe’s infrastructure, with Stripe acting for Lemon Squeezy. We never receive your card details.

We use these providers, each bound to process data only for us or under its own policy:

• Vercel Inc. (USA): website hosting, logs, cookieless analytics
• Cloudflare, Inc. (USA): contact form storage (D1) and spam protection (Turnstile)
• Lemon Squeezy (USA): sales, tax, license keys (independent controller)
• Functional Software, Inc. (Sentry, USA): error reports from the app (processor)
• Google LLC (USA): Google Analytics, only if enabled and only with your consent

Some providers are in the United States. Transfers from the EU, UK and Switzerland rely on the EU-US Data Privacy Framework and its UK and Swiss extensions where the provider is certified, and otherwise on Standard Contractual Clauses. Data about Canadian residents may be processed outside Canada and may be accessible to authorities there.

Depending on where you live you can access, correct, delete or export your personal information, object to or restrict its use, and withdraw consent. Details for your region:

• European Union, EEA, UK and Switzerland: see the GDPR page
• United States, including California: see the US privacy notice
• Canada, including Quebec: see the Canada privacy page

GDPR · US privacy notice · Canada. Write to privacy [at] redactfirst.app; we do not charge for requests.

RedactFirst and this website are for work and are not directed at children under 16. We do not knowingly collect personal information from children.

Connections to this site, the license service, template updates and error reports use HTTPS. Access to contact messages is limited to the people who answer them. Read more on the security page.

If we change what the app sends or this site collects, we update this policy and its date, and describe app changes in the release notes.