Privacy Policy

1. Scope and data we process

This policy applies to the Clipboard+ extension, the Clipboard+ for desktop desktop app, the mobile apps, the website, the cloud service, and the developer API operated by Aperca LLC.

Local Mode: Clipboard content stays in browser or device storage and is not sent to Clipboard+ servers.

Cloud Sync and accounts: When you opt in, we process your email address, password hash, the clipboard items you save for sync, snippets, settings, and basic service/security logs such as request time, path, status, IP-derived network information, and request identifier. Synced clipboard items are limited to text and links; images and audio are never uploaded to Clipboard+ servers.

Desktop clipboard history: Nothing is captured until you turn clipboard history on. Your history is stored on your computer and leaves it only if you connect a Clipboard+ account, and then only text and links. Items that a password manager marks as secret, and copied text that looks like an API key, access token, or private key, are skipped and never stored or synced. Delete all clipboard data erases the local history so the deleted text cannot be recovered from the database file.

Desktop dictation: Voice dictation is transcribed on your computer by default, and the recording is deleted once it has been transcribed. If a transcription fails, the recording stays on your computer so you can retry or discard it. If you connect your own transcription provider (such as OpenAI or Groq), your audio is sent directly to that provider under their terms; your provider key is saved only on your computer, readable only by your user account, and is only ever sent to the service it was entered for. The optional Make concise feature sends a transcript to the text AI service you configure, and only after you allow it.

Image text (OCR): OCR runs on your device, and temporary image captures are deleted automatically.

Desktop diagnostics: The desktop app can send anonymous crash reports and usage statistics. This is on by default and shown with an off switch on the first setup screen; nothing is sent before you have seen that screen. You can turn it off at any time in Settings → Privacy (or by setting DO_NOT_TRACK=1). Usage statistics contain a random identifier created for this installation, fixed event names, the features you chose, and bounded counts or durations. Crash reports contain the error type and the locations in the app's own code where it happened, plus the app version and operating system. Neither ever contains clipboard contents, transcripts, audio, file names or paths, email addresses, or keys. Usage statistics are checked by our server against a fixed list of allowed events before being passed to Google Analytics; crash reports go to Sentry. These providers see the connecting IP address and may derive an approximate location from it; we do not use it to identify you.

Developer API: We store API-key metadata, permissions, prefix, cryptographic hash, creation/expiration time, and last-used time. Raw keys are displayed once and are not stored.

2. How We Use Data

We use data to provide sync and API features, authenticate users, secure and troubleshoot the service, enforce limits, communicate essential account information, and comply with law. We do not sell personal information or use clipboard content for advertising or model training.

3. Data Storage

Cloud data is stored in a hosted PostgreSQL database. Connections use transport encryption, passwords are hashed, and personal API keys are stored as one-way hashes. No internet service can guarantee absolute security, so avoid saving highly sensitive secrets in clipboard history.

4. Data Retention

Synced content is retained according to your retention settings and while your account is active. Revoked-key metadata and limited security logs may be retained for fraud prevention and operational integrity. Desktop history, recordings, and settings stay on your computer until you delete them; uninstalling the app keeps them unless you remove them too. Diagnostics are kept by Sentry and Google Analytics under their retention settings. Account deletion removes active account data from production systems, subject to short-lived backups and legal obligations.

5. Third-Party Services

• Hosting and database providers — infrastructure and storage.
• Sentry — error and performance monitoring for the extension, apps (including desktop crash reports when diagnostics are on), website, and API. Events are scrubbed before sending, default collection of personally identifiable information is disabled, and synced clipboard content is not included.
• Resend — transactional email such as password resets.
• Google — optional sign-in. If you sign in with Google, Google handles the authentication under its own terms.
• Google Analytics and Microsoft Clarity — website usage analytics only when configured; these providers may use cookies or similar technologies. Google Analytics also receives the desktop app's anonymous usage statistics when diagnostics are on. They do not receive synced clipboard content from us.

6. Your Rights

You can access and manage synced data, revoke API keys, disable Cloud Sync, and delete your account through the product. Depending on where you live, you may also have rights to correction, portability, restriction, objection, or appeal. Contact us to exercise a right. Desktop diagnostics use a random identifier that is not linked to your account, so we generally cannot match them to you; turning diagnostics off stops them, and deleting the telemetry-id file in the app's settings folder gives the installation a new identifier. We do not knowingly collect data from children under 13.

7. International processing and legal disclosures

Our providers may process data in the United States and other countries. We disclose information only to service providers working for us, when you direct us, during a business transaction, or when reasonably required by law or to protect rights and safety.

8. Changes

We may update this policy as the service evolves. We will update the date above and provide additional notice when required.

9. Contact

For privacy requests or questions, contact Aperca LLC through apercallc.com.