Privacy Policy

Effective August 27, 2026 · Controller: Nathaniel Villa · nate.villa246@gmail.com

  • License activation. The App generates a random installation identifier on your Mac. Our server stores a one-way hash of it, not the identifier itself, along with your license status and plan limits. To limit abuse, activation requests are rate-limited using a one-way keyed hash of your IP address; your raw IP address is not stored.
  • Usage metering. To operate fair-use limits, our server records monthly transcription request counts, audio-byte totals, prompt request counts, and token counts per license, never the recording or content of your text.
  • Audio you choose to transcribe. While you hold the hotkey, the App records your microphone. On release, that recording passes through our Worker to Groq, LLC for transcription. We process it in memory and do not store it in D1, R2, or Worker logs. Groq’s handling of API customer data is described in its privacy policy and terms.
  • Text you choose to process. Prompt text and selected Vault note excerpts pass through our proxy to Cerebras Systems, Inc. We do not log or retain that content on our servers. Cerebras’ handling of inference data is described in its privacy policy.
  • Purchases. If you buy a paid license, our payment processor (Stripe) collects your payment details. We never see your full card number. We receive your email address, purchase details, and license key.
  • Update checks. The App periodically checks our update feed for new versions (the standard Sparkle mechanism), which discloses your IP address and app/OS version to our server as part of the ordinary web request. No system-profile information is sent.
  • Waitlist (closed). While ArcInput had a waitlist at arcvew.com, we stored the email address entered, the platform selected, when the signup happened, and where it came from (a campaign tag from the link followed and the referring site’s hostname). The waitlist is closed now that ArcInput is downloadable, and we keep those addresses only to contact signups about ArcInput availability and launch pricing. They are not shared for advertising, and no IP address is stored with them. Reply to any such email, or write to us, and we will remove your address.
  • Website. We count visits, page views, traffic-source categories and download or checkout clicks to understand how the site is used. A timestamp and source category in session storage distinguish visits within a browser tab, expiring after 30 minutes of inactivity. We store only daily aggregate counts, with no names, email addresses, IP addresses, full referring URLs or visitor identifiers in these analytics. We do not use analytics or advertising cookies. Visits are estimates, not unique people.

What we do not collect: background audio; saved copies of your recordings or transcripts on our infrastructure; keystrokes; contacts; or browsing history. Vault mode accesses only the selected note excerpts needed for the request.

To provide, secure, and improve the Services: license activation and anti-abuse, usage metering, transcribing audio and processing text on your instruction, delivering updates, support, and complying with law. We do not sell personal information and do not share it for cross-context behavioral advertising.

  • Groq, LLC.: speech-to-text processing (see Groq’s privacy policy)
  • Cerebras Systems, Inc.: prompt shaping and text processing (see Cerebras’ privacy policy)
  • Cloudflare, Inc.: hosting and proxy infrastructure for our website and license services (see Cloudflare’s privacy policy)
  • Stripe, Inc.: payment processing for paid licenses (see Stripe’s privacy policy)
  • Authorities where required by law, and a successor entity in a business transfer.

License records are kept while your license is active, plus as long as needed for tax and legal purposes. Usage counts are kept as aggregate monthly totals. ArcInput does not retain recordings, transcripts, prompt text, or generated responses on its infrastructure. You can request deletion of account and license records at any time (see Your rights). Third-party providers process request content under their own service terms and data controls.

All app-to-server communication uses transport encryption (TLS), stored identifiers are one-way hashed, and access to production systems is restricted. No method is 100% secure, and we cannot guarantee absolute security.

Depending on where you live (for example, California under the CCPA, or the EU/UK under the GDPR), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Contact nate.villa246@gmail.com and we will respond within the legally required period. We will not discriminate against you for exercising your rights. For EU/UK users: our legal bases are contract performance (providing the App), legitimate interests (security and anti-abuse), and consent where required; you may lodge a complaint with your supervisory authority.

ArcInput is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

We will post any changes on this page with a new effective date, and we will provide notice of material changes in the App or by email where appropriate.

Contact: nate.villa246@gmail.com