Privacy Policy

1. Introduction

Cloakly, an independent SaaS startup, is the operator of getcloakly.com and the controller of personal data described in this policy. This policy explains how we process personal data when you visit the website, create an account, purchase a subscription, contact support, or use the desktop application.

2. Data We Collect

We collect and process the following types of data:

• Identity Data: Includes email address when you create an account, subscribe, or join our newsletter.
• Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data: Information about how you use our website and application.
• Transaction Data: Includes payment provider, plan, currency, amount, invoice or contract identifier, payment status, subscription status, and billing dates. We do not receive or store your complete payment-card number.
• Communications Data: Includes support messages, refund requests, feedback, and preferences for service or marketing communications.

3. Local Processing and Screen Data

To provide seamless window management and privacy features, Cloakly utilizes standard Windows APIs and techniques such as DLL injection. This allows the application to interact with other windows to apply privacy settings (like preventing screen capture) directly.

We want to be fully transparent with you:

• Cloakly is safe: We only use this technology to hide windows you explicitly choose.
• Zero spying: We do not log keystrokes, record your screen, or read your files.
• Local only: All window management happens on your device. No screen data leaves your machine.

If your antivirus blocks Cloakly, you may need to add it to your allow list or exclusions for full functionality.

4. How We Use Your Data

We use personal data where legally permitted, including to:

• Provide and maintain our service.
• Notify you about service changes.
• Enable interactive features when you choose to use them.
• Provide customer support.
• Create invoices, confirm payments, maintain subscription entitlements, process cancellations, and administer refunds.
• Prevent fraud, abuse, duplicate webhook processing, and unauthorized account access.
• Meet tax, accounting, consumer-protection, and other legal obligations.
• Analyze and improve the product.

5. Legal Bases

Depending on your location and the processing activity, we process personal data to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and product improvement, or act with your consent where consent is required. You may withdraw consent without affecting earlier lawful processing.

6. Service Providers and Recipients

We share only the data needed for a provider to perform its service. Providers may include:

• Supabase: account authentication, profiles, subscription entitlements, and database hosting.
• Lemon Squeezy and Lava.top: checkout, payment processing, subscription management, refunds, and payment notifications.
• Vercel: website hosting, delivery, and operational logs.
• Maileroo: transactional or permitted account email delivery.
• Google: reCAPTCHA, analytics, and abuse prevention where enabled.
• Meta: website measurement and advertising attribution where enabled and legally permitted.

Payment providers process payment credentials under their own privacy notices. We may also disclose information when required by law, to protect legal rights, or in connection with a legitimate business transfer.

7. Cookies and Measurement

The website may use essential storage for authentication and optional analytics or advertising technologies to understand visits and campaign performance. Browser controls and available consent controls can be used to limit non-essential technologies. Blocking essential storage may prevent account features from working.

Desktop app setup analytics. When you go through the desktop app's setup tour before signing in, the app sends us which tour steps you reach, the goal and app categories you pick (for example “Work Chat”), the plan you look at, and simple interaction counts, together with the app version, your platform, and a random identifier created for that installation. It never includes your screen, window titles, or the names of the programs on your computer. We use this to see where people leave the setup so we can improve it. If you later sign in, that installation's setup history is linked to your account. These records are deleted 90 days after the installation was last active, or when you delete your account. You can turn this off at any time under Settings → Security → “Share anonymous usage data”, or from the notice shown during setup; turning it off stops sending and deletes the identifier on your device.

8. Retention

We retain account data while your account is active and for a reasonable period afterward. Transaction and invoice records may be retained as required for accounting, tax, fraud prevention, disputes, and legal compliance. Support records are retained only as long as reasonably needed for the request and related obligations. Data is deleted or anonymized when it is no longer required.

9. International Processing

Our providers may process data in countries other than your own. Where required, we use contractual or other recognized safeguards for international transfers. Payment processing location may also depend on the provider and payment method you select.

10. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to withdraw consent or complain to a data-protection authority. To exercise a right, contact us from the email associated with your account. We may verify your identity before acting on a request.

11. Data Security

We use appropriate technical and organizational safeguards to help prevent unauthorized access, disclosure, alteration, or loss of personal data, and we restrict data access to people who have a legitimate business need.

12. Third-Party Links

Our service may include links to third-party websites. We do not control those sites and are not responsible for their content, privacy policies, or practices.