Privacy Policy
This Privacy Policy describes how Grigorii Moskalev (“we”, “us”, “our”), the data controller, processes personal data in connection with the Occlira desktop application, its browser extension and Word add-in, and the website at https://occlira.com. You can reach us at [email protected]. It is written to be clear and honest and is not legal advice.
1. Your files are processed on your device, not by us
All detection and anonymization happen on your computer, including local transcription of audio. The files you open and the personal data inside them are never transmitted to us; we do not receive, store, or have any access to them, and we do not act as a processor of that content. Because of this, there is nothing of that kind for us to collect, export or delete. The specifics of what stays on your device (and how to delete it) are set out in our Data & Privacy Practices.
2. Personal data we collect, and why
The personal data we actually process is limited to the following — and much of it is held by Polar, not by us. For visitors and customers in the EU/EEA, the legal basis under the GDPR is shown in brackets. Our optional browser extension does not add to this — it processes your AI-chat content on your device and sends nothing to us (see §11).
- License & purchase data (mostly held by Polar). Your purchase is made through Polar as Merchant of Record (see §3), and it — not us — collects and holds your payment and billing data. From Polar we receive and process only a limited set of customer data — typically your name, email address, order details and license key — to deliver, manage and support your license. Your license key and its activation/validation records (including a device identifier and the IP address recorded when the app checks the license) are generated and hosted by Polar; we do not run our own payment or license servers. [Performance of a contract; and our legitimate interest in preventing license abuse.]
- Support communications — the content of emails you send us, used only to answer you. [Performance of a contract / our legitimate interest in supporting customers.]
- Website & server data — standard logs (such as IP address and request details) kept by our host to deliver and secure the site. [Our legitimate interest in operating a secure website.]
- Optional diagnostics — crash or usage reports, only if you choose to turn them on or send them. They are designed to contain no documents and no personal data. [Your consent, which you can withdraw at any time.]
3. Payments
Purchases are handled by Polar (Polar Software Inc.) acting as our Merchant of Record. This means Polar is the seller of record — the party you contract with for the purchase — and it processes your payment (card processing is carried out by Stripe), handles applicable tax/VAT, generates and emails your license key, and manages refunds and chargebacks. We never see or store your full card details. Polar collects and processes your payment and billing information as its own controller, under its privacy policy — polar.sh/legal/privacy.
4. This website, analytics & cookies
The website is a static marketing site hosted on Cloudflare Pages; it does not require an account. We use no advertising or cross-site tracking cookies.
For basic, aggregated visitor statistics — such as page views, referral sources and country — we use Plausible Analytics, a privacy-focused, open-source analytics tool. Plausible does not use cookies and does not store IP addresses or any personal data; it does not track you across websites or over time, and all of its metrics are aggregated and anonymous. This data is processed and stored entirely on servers in the EU (Germany) and does not leave the EU. Because no cookies are set and no personal data is collected, no cookie banner or consent is required, and there is nothing in this data that identifies you. You can read how it works in Plausible’s data policy.
The Download button redirects to our public releases page on GitHub to serve the installer.
5. Who we share data with
We keep this list short. We rely on the following providers to run the service:
- Polar (Polar Software Inc.) — payments, tax, and license key generation, delivery and validation (Merchant of Record; seller of record for your purchase; card payments processed by Stripe). Privacy policy.
- Stripe — card payment processing on behalf of Polar (our Merchant of Record). Privacy policy.
- Cloudflare — website hosting and security. Privacy policy.
- Plausible Analytics — privacy-focused, cookie-less website analytics; data is aggregated, anonymous and stored in the EU. Data policy.
- GitHub (Microsoft) — installer hosting, update delivery and the one-time download of a component model; receives your IP address when the app checks for updates or downloads that model. Privacy statement.
- Hugging Face — one-time download of the local AI models; receives your IP address during that download. Privacy policy.
We do not sell your personal data, and we do not share it for advertising.
6. International data transfers
Some providers above are based in, or store data in, the United States or other countries outside the EU/EEA. Where personal data is transferred outside the EU/EEA, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses and/or an adequacy mechanism (for example the EU–US Data Privacy Framework), as offered by the relevant provider.
7. How long we keep data
We keep license and purchase records for as long as your license is active and afterwards as required for tax, accounting and legal purposes. Support emails are kept only as long as needed to help you and for a reasonable period afterwards. Website logs are kept for a short period by our host for security and diagnostics. (Data that lives only on your own device — such as restore mappings — is controlled and deleted by you; see Data & Privacy Practices.)
8. Your rights
If you are in the EU/EEA (and, equivalently, the UK or Switzerland), you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email [email protected] and we will help. Because we hold so little about you — and never your documents — most requests are quick to handle. You also have the right to lodge a complaint with your local data protection authority.
California residents: we do not “sell” or “share” personal information as those terms are used under the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You may exercise your rights using the same contact address.
9. Children
Occlira is a professional tool and is not directed to children. We do not knowingly collect personal data from anyone under 16.
10. Security
Your content is protected first and foremost by never leaving your device. The limited data we do handle is transmitted over encrypted connections (HTTPS/TLS) and held by reputable providers. No method of storage or transmission is perfectly secure, but by design the most sensitive data — your documents and the personal data in them — is never transmitted to us at all.
11. The browser extension (Occlira for Chrome)
Occlira offers an optional browser extension that anonymizes the text and file attachments in your AI chats — on ChatGPT, Claude and Gemini — before you send them. It follows the same principle as the app: your content is anonymized on your own computer and is never sent to us, or to any third party, by the extension.
- What it accesses. The extension activates only on the supported AI chat sites (chatgpt.com / chat.openai.com, claude.ai and gemini.google.com). When you use it, it reads the prompt text and any file attachments in that chat so they can be anonymized. It does not read your browsing history or your activity on other websites.
- Where your content goes. To anonymize, the extension passes that text and those files to the Occlira desktop app running on the same computer, over a local loopback connection (127.0.0.1 / localhost). This never leaves your machine: the extension sends it to no server of ours — we operate none that could receive it — and to no third party. The desktop app performs the detection and anonymization locally and returns the result to the extension, which puts it back in the chat for you to review before you send.
- What it stores. The extension stores only a local pairing token — used to establish a trusted connection to your desktop app so that an arbitrary web page cannot talk to it — together with your local preferences. There is no account, and it does not retain your prompts or files after they are processed.
- What it does not do. The extension does not collect, transmit or sell any personal data, and it uses no analytics or third-party tracking. The Occlira desktop app must be installed and running for the extension to work.
When you then choose to send your (now anonymized) prompt, it is delivered to the AI provider like any normal message, under that provider’s own terms and privacy policy — anonymizing it first is exactly what the extension is for.
The optional Occlira Word add-in works on the same principle: it passes the document text to the Occlira desktop app running on the same computer, over a local loopback connection, for local anonymization — it sends nothing to us or to any third party.
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will provide a more prominent notice.
13. Contact
Data controller: Grigorii Moskalev · [email protected]. See also our Data & Privacy Practices and Terms of Use & License.