Canada privacy

The person in charge of the protection of personal information is our Privacy Officer, reachable at privacy [at] redactonly.com. Postal address: see the legal notice.

We collect only what we need: your name, email and message when you contact us; order and license details from Lemon Squeezy when you buy; error reports from the app, which contain no files or document contents; if you use team sharing, the account, organization and device information it needs; and, with your consent, website analytics. The full list, purposes and retention periods are in our privacy policy. In personal use, RedactOnly never sends us your documents; they are processed only on your computer. Documents you share with your team reach us only end-to-end encrypted, and we cannot read them.

On macOS, Apple handles payment, your Apple Account, purchase and restoration through the App Store. StoreKit verifies the transaction; verified transaction metadata is stored in the macOS Keychain. Apple processes purchase and account information under its own privacy policy. The Mac app does not activate Lemon Squeezy keys. We receive neither your card details nor your Apple Account password. Apple.

On Windows, Lemon Squeezy is the reseller and merchant of record, acting as an independent controller for payment and billing details. We receive the name, email, country and order details needed to deliver and support the Windows license, and keep order records as tax and accounting law requires. Lemon Squeezy uses Stripe for card payments; we never receive card details. Microsoft Store purchases, when offered, are handled separately by Microsoft. Lemon Squeezy.

To keep the app stable and secure, the app sends error reports to Sentry (Functional Software, Inc., USA), our service provider. A report contains the error type and message (with file paths, quoted text, your home folder and user name removed), the stack trace, the app version, the operating system and its version, the computer model and processor architecture, a random installation identifier and your IP address, which Sentry receives with every report and may store with it. Reports never contain your files, document contents, the texts you redact or license keys.

Crash reports are always sent, because we need them to fix crashes. Other reports are sent only while Settings > Privacy & data > Send diagnostics is on; it is on by default, and you can withdraw your consent to them at any time by turning it off. Sentry stores reports in the United States under its data processing terms, where courts and authorities may access them, and deletes them after 90 days.

We ask for express consent before any analytics runs, and analytics is off by default, as Law 25 requires for technologies that track you. You can withdraw consent at any time through “Your privacy choices” in the footer, subject to legal or contractual restrictions.

You can ask to see the personal information we hold about you, to have it corrected, or, in Quebec, to have it de-indexed or receive it in a structured, commonly used technological format. We answer within 30 days, free of charge.

Our service providers (Vercel, Cloudflare, Lemon Squeezy and Sentry) store and process data in the United States. Before using a provider we assess its safeguards, and our agreements require protection comparable to Canadian law. Information processed in another country may be accessed by its courts and authorities.

We keep a register of confidentiality incidents. If an incident presents a risk of serious harm, we notify the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec, and the people affected, as the law requires.

The RedactOnly app is available in French (Canada). You may write to us in French and we will answer in French.

• Office of the Privacy Commissioner of Canada: priv.gc.ca
• Quebec: Commission d'accès à l'information du Québec (cai.gouv.qc.ca)

Please contact us first; most questions are resolved quickly.