Privacy policy

Data controller

Henry Ramírez Reyes (EI Ramirez Reyes Henry), SIRET 109 718 478 00018. For anything about your data: [email protected].

What the site collects

• Contact form: name, email, subject and message. They are delivered by email and not stored on the site.
• Business quote request: company, number of Macs, name, email and message. As with the contact form, they arrive by email and are not stored on the site.
• Newsletter: your email and the language you want it in, held in our own mailing tool on our own server. Every issue carries an unsubscribe link.
• Toolbox Design account: your email and, if you fill them in, your name, studio, phone, company, country and VAT number. The password is stored hashed, never in clear text; if you sign in with Google, Google gives us your name and email. The same account signs you in to the website, the VC Suite launcher and its apps, and your licences hang from it. We log what happens in the account (sign-ups, sign-ins, downloads), never your IP address.
• Language and theme: stored in your browser and never sent anywhere.
• The site uses no tracking cookies and no analytics tools.

What each application collects

ToolSuite. The app contacts our servers in two cases: to activate and validate the licence — it sends the key, a SHA-256 hash of your Mac's hardware identifiers, never the serial number in clear text, and a readable label such as “MacBook Pro”; for each activation or validation we also record the country it comes from, as reported by Cloudflare, and the app version, never the IP address — and to check for updates, carrying the app and macOS versions with no identifier. What the tools do happens on your Mac: run history and scheduled tasks stay in the application folder and never leave the machine.

ToolSuite, Agent. With Apple's model, the conversation is processed on the Mac. If you choose Claude or ChatGPT, the conversation, its attachments and what the Agent looks up on your Mac go to Anthropic or OpenAI through their official programs, under your own account and their terms. We receive nothing from those chats: they are stored on your Mac.

Sprintle. Your account holds your name, your email and a password, which we store hashed with Argon2id and never in plain text; if you sign in with Google, Google gives us your name and email. We store what you and your team put into Sprintle: workspaces, projects, tasks, comments, tickets, attachments, time records and your profile photo if you upload one, with the history of who changed what and when. We remember your app's language to write your notifications in it, and the name of each device you sign in with, so you can see and close your sessions. We do not store your devices' IP addresses.

Sprintle, notifications. They arrive in the app and, as you choose, by email and as push notifications. For push we store the identifier Apple gives your iPhone, and Apple delivers the message.

Sprintle, AI agents. If you connect Claude, ChatGPT or another agent, or create an API key, that agent reads and changes what you ask it to, with your permissions, and what it reads goes to its provider under its terms. You can revoke each connection at any time from your account.

Sprintle, where it lives. It runs on our own server and is reached through our private network (Tailscale); only the connector for AI agents is public, through Cloudflare. The iOS app has no analytics and no trackers: it keeps your session in the iPhone keychain, and the language and theme on the device itself.

VC Suite. When you sign in, the launcher sends a SHA-256 hash of the Mac's identifier (never the identifier in clear text), its name, model and macOS version, to keep track of the Macs your licence is used on; with business licences, also when each Mac takes and returns a licence. The launcher and the apps are downloaded from our own server.

Portia. The iPhone app keeps its settings, conversations, audit and usage records on the device itself, and the keys of your providers and MCP servers in the iPhone's keychain. Requests to the model go from the iPhone to the provider you choose (Anthropic, OpenAI, OpenRouter or another), with your own key and under its terms: we do not receive them. The app has no analytics and no trackers.

Portia, subscription. Apple charges it on the App Store: we do not receive your personal or payment data.

Portia, Face ID lock. It is local: the iPhone itself checks it, and neither the app nor we receive your biometric data.

Portia, relay. The iPhone and your computers talk through our relay, encrypted end to end, on a virtual private server at OVH in France. The relay only sees encrypted messages it cannot read, each device's public identity and the IP address it connects from; if a device is offline, it keeps its messages for ten minutes at most. We log when each device connects and disconnects, by its shortened identity, never its IP address. Each computer keeps on its own disk what the agent did on it.

Portia, waiting list. If you ask us to let you know when something is available (such as Portia on the App Store), we store your email, the product, the page language, the date and the text you accepted, in our database on our own server. We only use it for that notice.

Portia, support. The emails you send us at [email protected] reach our mailbox and we only use them to answer you.

Shot Tracker, LoreDock, Agents Factory and Project Builder are in development and handle no customer data yet. This policy is extended as each one opens, before anyone is inside.

Purchases

Payments are handled by Stripe as merchant of record: we never see card numbers. We keep your email, the plan purchased, the order reference and a hash of the licence key, so we can reissue a key or process a refund. We do not sell or share this data.

Who processes data for us

• Stripe — licence payments, as merchant of record
• Resend — delivery of contact-form messages
• Cloudflare — site DNS and content delivery; tunnel for Sprintle's AI agent connector
• Google — company email and Sprintle notification email; Sign in with Google on Sprintle, if you choose it
• Apple — Sprintle push notifications on iPhone; Portia subscription payments on the App Store
• OVH — hosting of Portia's relay, in France
• Tailscale — private network through which Sprintle is reached

How long it is kept

• Licences and orders: while the licence is active, then for as long as tax law requires.
• Sprintle: your account, while it exists; a workspace's content, while the workspace exists. Deleting a workspace for good deletes all its content; only the record of who did what remains. Notifications are deleted once you have seen them and they have been delivered, and uploaded files never attached, the next day. To delete your account, write to us.
• Activation log (country and app version): 400 days.
• Newsletter: until you unsubscribe.
• Account and VC Suite: the account for as long as it exists; licences, Macs and orders while the licence is active and, after that, for the period tax law requires.
• Portia: what the iPhone keeps, until you delete it in the app or uninstall it; the relay keeps no message for more than ten minutes; a product's waiting list, until we announce it is available, and then it is deleted; support emails, in the mailbox, for as long as they are useful in answering you.
• Contact messages: in the mailbox, for as long as they are useful in answering you.

Your rights

You can ask for access to your data, its correction, its deletion, its portability, and object to or restrict processing. Write to [email protected]; we answer within a few business days.

If our answer does not satisfy you, you can complain to the CNIL, the French data protection authority.

Contact

[email protected]