Privacy Policy — Real Redact
Who we are: Shabu Pty Ltd (ACN 605 154 345 / ABN 78 605 154 345), Queensland, Australia (“we”, “us”, “Shabu”).
Website: realredact.app.
Effective date: 5 June 2026.
Contact: hello@realredact.app.
1. Summary
The Real Redact desktop application processes documents locally on your device and makes no outbound network connections. We do not receive your documents, redactions, OCR text, telemetry, analytics, crash reports, usage data, or licence activation events from the app.
The website, purchase flow, email signup, and support channels are separate from the desktop app and involve limited personal information, described below.
2. The Desktop App
The Real Redact desktop app:
- does not send your documents to us;
- does not send your redactions, OCR text, detection results, previews, or output files to us;
- does not send analytics, telemetry, or crash reports to us;
- does not phone home for licence activation;
- validates licence keys offline on your device using public-key cryptography; and
- stores trial usage only locally on your device, in your operating system’s secure credential store where available.
If you choose to email us for support and attach a document, screenshot, log, receipt, or other information, we will receive and handle what you choose to send.
3. Website, Purchase, Email, and Support Data
We may collect or receive the following personal information outside the desktop app:
- Email signup: your email address if you sign up for updates.
- Purchase: your email address, purchase record, licence details, country or tax location, and limited payment metadata from Stripe. We do not receive or store your full card number.
- Support: your email address and the contents of any message, attachment, screenshot, log, or document you send us.
- Website analytics: aggregate page-view, referral-source, and download counts measured on our own server from request/hosting logs — no analytics cookies and no third-party tracking scripts.
- Hosting logs: technical request data processed by our hosting provider, such as IP address, user agent, requested URL, timestamps, and basic security logs.
We do not use third-party advertising cookies or analytics tracking scripts. We do not sell your personal information.
4. How We Use Personal Information
We use personal information to:
- send product updates if you signed up for them;
- deliver licence keys and purchase receipts;
- process payments, refunds, tax, fraud checks, and accounting records;
- provide support;
- operate, secure, debug, and improve the website and purchase flow;
- comply with legal obligations; and
- send important product, legal, security, or administrative notices.
5. Service Providers
We use service providers to operate the website, email, purchase, and support workflows. These may include:
- Stripe for payment processing, tax handling where applicable, purchase records, receipts, and refunds;
- Resend for mailing-list management and email delivery; and
- Netlify for website hosting, serverless functions, hosting logs, and privacy-respecting server-side website analytics.
These providers process information for us or in connection with our services. They may process information in countries other than your own.
We may also disclose information if required by law, to enforce our rights, to prevent fraud or abuse, to professional advisers, or in connection with a business sale, merger, acquisition, financing, restructure, or similar transaction.
6. Retention
We keep personal information only for as long as reasonably needed for the purposes above.
Email signup data is kept until you unsubscribe or ask us to delete it, unless we need to keep a limited record to honour your unsubscribe request or comply with law.
Purchase, licence, refund, accounting, and tax records may be kept for as long as needed to support your licence, process refunds, resolve disputes, prevent fraud, and meet legal and tax obligations.
Support emails are kept for as long as needed to respond, maintain business records, and understand product issues. If you send us a sensitive document by email, you can ask us to delete it after the support issue is handled unless we need to keep it for legal reasons.
7. Security and Data Breaches
We use reasonable technical and organisational measures to protect the limited personal information we hold. No method of transmission or storage is completely secure.
Because the desktop app does not send documents to us, a breach of our website, email, payment, or hosting systems should not expose documents processed only inside the app. If you voluntarily send us documents or other sensitive support material, that material is handled as support data.
Where the Privacy Act 1988 (Cth), the Notifiable Data Breaches scheme, or another applicable law requires notification of a data breach, we will notify affected people and regulators as required.
8. Your Choices and Rights
You can unsubscribe from marketing emails using the unsubscribe link in the email or by emailing hello@realredact.app.
You can ask us to access, correct, or delete personal information we hold about you, subject to legal and operational limits. To make a request, email hello@realredact.app.
Depending on where you live, you may have additional rights under privacy laws such as the Australian Privacy Act, GDPR, UK GDPR, CCPA/CPRA, or other local laws.
9. Children
Real Redact is not directed to children. We do not knowingly collect personal information from children.
10. Changes
We may update this Privacy Policy from time to time. The current version will be posted on realredact.app or made available with the Software. Material changes will not apply retroactively unless required by law or unless the change is clearly beneficial to you.
11. Contact
Shabu Pty Ltd
hello@realredact.app