Privacy Policy

Last updated: June 10, 2026

1. Who We Are

OwnClip ("we," "us," "our") is a privacy-first screen recording and editing tool available as a native macOS application. This Privacy Policy explains how we collect, use, share, and protect information when you use the OwnClip macOS application, the hosted video viewer at view.ownclip.io, our server-side infrastructure, and the ownclip.io website (collectively, the "Service").

For purposes of data protection law, OwnClip is the data controller for the personal data described in this policy. For payment-related data, Lemon Squeezy acts as an independent data controller (see Section 5).

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information Collected by Our Payment Processor

When you purchase OwnClip Pro, payment is processed by Lemon Squeezy (lemonsqueezy.com), which acts as our Merchant of Record. Lemon Squeezy collects and processes the following data directly from you at checkout:

We do not have access to your full credit card number, CVV, or payment credentials. Lemon Squeezy may share limited order information with us (email address, order ID, license/purchase status) to facilitate license key delivery and customer support. Lemon Squeezy's handling of your payment data is governed by their Privacy Policy.

2.3 Information Processed and Stored Locally

All recordings, webcam video, audio, AI effects (camera blur, noise removal, transcription), editing operations, and user-generated metadata are processed and stored entirely on your Mac. This data is never sent to any server, including ours. All AI processing runs locally on your device using Apple's native frameworks (Vision, Speech, Core ML, Metal) — no audio, video, or text data is transmitted to any external AI service.

Locally stored data (recordings, projects, settings) persists in the application's data directory until you delete it or uninstall the application.

2.4 Information Stored Server-Side

The Service uses secure cloud infrastructure (operated by Google) for authentication, feature gating, sharing, and analytics. The following data is stored on our servers:

None of the above includes your recordings, screenshots, transcriptions, or any media content. Your content remains on your device and/or your Google Drive account.

2.5 Analytics and Error Reporting

To improve product quality and stability, the OwnClip macOS application collects usage data and error reports via our own first-party analytics infrastructure (hosted on our Google Cloud servers). The application does not embed any third-party analytics or advertising SDKs, and we do not sell analytics data to anyone. (Our website at ownclip.io uses Google Analytics separately — see Section 8.2.)

If you are signed in, your anonymized user ID may be associated with analytics events for license tier enrichment (e.g., to understand feature usage across free vs. paid tiers). This data does not include: the content of your recordings, screenshots, or transcriptions; or your screen activity or application usage outside OwnClip.

Aggregated daily statistics (counts only, no individual data) are retained indefinitely for product improvement.

Legal basis (GDPR): Legitimate interest in improving the Service. You may opt out of analytics collection in the application settings without affecting functionality.

2.6 Information We Do Not Collect

We do not collect or have access to:

• The content of your recordings, screenshots, or transcriptions
• Your screen activity or application usage outside OwnClip
• Keystroke or input data
• Cookies for advertising or retargeting purposes
• Data from other applications on your Mac

3. How We Use Information

We do not use your personal data for targeted advertising or selling to third parties. We may use anonymized or aggregated data for product analytics and improvement.

4. Google Drive Integration

When you choose to upload a recording or screenshot to Google Drive:

• The file is uploaded directly from your Mac to your own Google Drive account. We are not an intermediary.
• Files are stored in an "OwnClip" folder that you own and control.
• Metadata (title, duration, comments, rating) is stored alongside each video in your Drive.
• Shareable links (view.ownclip.io) point to files in your Google Drive; we do not host, cache, or inspect any video or screenshot content.
• When you enable sharing, our server-side service sets "anyone with link = reader" permission on the Drive file. When you disable sharing, the permission is revoked. You can also manage Drive permissions directly through Google Drive.
• OwnClip requests the minimum required permission scope — access only to files created by OwnClip. We cannot access your other Drive files.

You can revoke OwnClip's access to your Google Drive at any time via Google Account Permissions. Revoking access does not delete files already in your Drive.

Google API Services User Data Policy

OwnClip requests the following Google OAuth scopes, each used only for the purpose described and never sold, transferred, or used for advertising or for training generalized AI/ML models:

You can revoke either scope at any time. Inside the app: Settings → Account → Sign Out for Drive, or Go Live → Disconnect for YouTube. Outside the app: Google Account Permissions. Revocation through the app contacts oauth2.googleapis.com/revoke so OwnClip is removed from your third-party-apps list immediately.

Live Broadcasting (Go Live) — Twitch & Custom RTMP

The Go Live feature (Studio tier) can broadcast to YouTube (see above), Twitch, and custom RTMP destinations:

• Twitch: You authenticate with your Twitch account via OAuth. The authorization callback is relayed through our server and then handed to the app to complete sign-in; we do not store your Twitch content or broadcast data. Your use of Twitch is governed by Twitch's Privacy Notice.
• Custom RTMP: You supply the server URL and stream key for any destination you choose; that destination's own privacy policy applies.
• In all cases, your video and audio stream directly from your Mac to the destination's ingestion endpoint over RTMP and never pass through OwnClip servers. We do not see, record, or store what you broadcast.

You can disconnect a broadcast account at any time from Go Live → Disconnect in the app.

5. Payment Processing & Lemon Squeezy

OwnClip Pro and Studio are one-time purchases (not subscriptions), handled by Lemon Squeezy, which acts as our Merchant of Record. When you make a purchase:

• You transact directly with Lemon Squeezy, not with OwnClip
• Lemon Squeezy collects and processes your payment information under their own Privacy Policy
• Lemon Squeezy handles sales tax, VAT, and GST compliance globally
• We receive limited information from Lemon Squeezy (email address, order ID, license/purchase status) solely to deliver your license key and provide customer support
• We never receive, see, or store your credit card number, CVV, bank account details, or other payment credentials
• Receipts and invoices are provided through Lemon Squeezy's customer portal

For data protection purposes, Lemon Squeezy acts as an independent data controller for the payment and billing data it collects. We encourage you to review Lemon Squeezy's Privacy Policy before making a purchase.

6. macOS Permissions and Local Data

The OwnClip macOS application may request the following system permissions, all managed by macOS and revocable at any time in System Settings > Privacy & Security:

• Screen Recording: Required to capture your screen, windows, and selected regions. OwnClip uses Apple's ScreenCaptureKit framework. Screen content is processed and stored entirely on your Mac.
• Camera: Required for webcam overlay during recordings. Camera video is processed locally and never transmitted.
• Microphone: Required for audio narration in recordings. Audio is processed locally and never transmitted.
• Speech Recognition: Required for on-device transcription. OwnClip enforces on-device processing only — no audio is sent to Apple's servers or any third party.

No permissions are used for advertising or tracking. The application does not access data from other applications, your filesystem outside its own data directory, or any system resources beyond the permissions listed above.

6.1 Auto-Updates

The application uses the Sparkle framework to check for software updates. During update checks, your IP address, macOS version, and application version are sent to our software update feed, which is hosted on GitHub Releases. No other personal data is transmitted during update checks. You can disable automatic update checks in the application settings.

6.2 Local Storage

Recordings, edit projects, settings, and cached data are stored in the application's local data directory on your Mac. This data persists until you delete it or uninstall the application. We do not have access to or visibility into locally stored data.

7. Third-Party Services

We do not use advertising networks or retargeting services that profile users for marketing purposes. In-app analytics are limited to first-party usage statistics and error reporting as described in Section 2.5; the only third-party analytics we use is Google Analytics on the ownclip.io website (see Section 8.2).

8. Cookies and Tracking Technologies

8.1 Application

The OwnClip macOS application does not use cookies, browser tracking, or advertising identifiers. Analytics data collected by the application is limited to product improvement as described in Section 2.5.

8.2 Website (ownclip.io)

The ownclip.io website uses Google Analytics to understand aggregate site usage (page views, referral source, approximate region). Google Analytics sets its own analytics cookies and processes standard web data, including your IP address, under Google's Privacy Policy. The website also loads Google Fonts. We do not use advertising, retargeting, or cross-site tracking cookies. You can block these cookies through your browser settings or a content blocker, and we honor Do Not Track signals where technically feasible (see Section 8.3). This applies to the website only — the macOS application uses no cookies or web tracking.

8.3 Do Not Track

We respect Do Not Track (DNT) browser signals where technically feasible.

9. Data Retention

• Local data (recordings, projects, settings): Persists in the application's data directory until you delete it or uninstall the application.
• Google Drive uploads: Persist in your Drive until you delete them.
• Google OAuth tokens: Revocable at any time via Google Account Permissions.
• Authentication profile: UID, email, display name — retained until account deletion. Request deletion at info@inuxo.com.
• User record (license/purchase status, installation IDs, last login): Retained in our cloud database until account deletion.
• Share metadata: Retained in our cloud database until you disable or delete the share, or until account deletion.
• Branding settings and logo: Retained in our cloud infrastructure until you delete them or until account deletion.
• Analytics events: Raw events automatically deleted after 90 days. Error reports deleted after 30 days. Aggregated daily statistics (counts only) retained indefinitely. You can opt out in application settings.
• License cache: Locally cached feature/tier data expires after 7 days (hard TTL), refreshed approximately every 24 hours.
• Payment & billing data: Retained by Lemon Squeezy per their retention policy.
• Support emails: Retained as long as needed to resolve your inquiry. Request deletion at info@inuxo.com.

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

• No server-side content processing. We do not operate servers that receive, process, or store your recordings, screenshots, or transcriptions. Our server-side infrastructure handles only authentication, feature gating, analytics, share metadata, and branding — never your media content.
• Local AI processing. All AI and machine learning runs on your Mac using Apple's native frameworks (Vision, Speech Recognition, Core ML, Metal). No audio, video, or text data leaves your device for AI processing.
• Server-side security. All server-side endpoints enforce authentication (JWT verification) for user-specific operations. Database security rules prevent unauthorized access — all writes go through authenticated server-side functions with input validation and sanitization. Lemon Squeezy webhooks are verified via HMAC-SHA256 with timing-safe comparison.
• Rate limiting. All public-facing server endpoints (share resolution, analytics ingestion, social previews) are rate-limited per IP to prevent abuse.
• Input sanitization. Brand logos undergo magic-byte verification and SVG sanitization (script stripping, event handler removal). Share URLs are validated to prevent injection attacks. All text inputs are length-limited.
• Direct uploads. Files go directly from your Mac to Google's servers; we do not intercept, inspect, or log the transfer.
• PCI-DSS compliance. Payment data is handled exclusively by Lemon Squeezy, a PCI-DSS compliant payment processor. We never handle credit card data.
• Encryption in transit. All external connections use TLS/HTTPS encryption.
• Code signing. The application is signed with an Apple Developer certificate and notarized, ensuring integrity and authenticity of the software you install.

11. Data Sharing and Disclosure

We do not sell, rent, trade, or share your personal information with third parties for their commercial or marketing purposes. We will never monetize your data.

We may share limited information only in these circumstances:

• With Google Cloud Platform: User authentication data, license/purchase status, share metadata, branding settings, and analytics events are stored on Google Cloud infrastructure. Google acts as our data processor under Google Cloud's data processing terms.
• With Lemon Squeezy: We share your user ID and email with Lemon Squeezy to process payments and issue licenses. Lemon Squeezy sends purchase/license events to our server-side infrastructure via webhooks. They are an independent data controller — see Section 5.
• Legal compliance: If required by law, court order, subpoena, or regulatory authority, we may disclose information we have.
• Safety and rights protection: To protect the rights, property, or safety of OwnClip, our users, or the public, to the extent legally permissible.
• Business transfer: In the event of a merger, acquisition, or sale of assets, any personal data we hold (including cloud-stored data) would be transferred to the acquiring entity, which would be bound by this Privacy Policy. We will notify you before such a transfer.

12. Your Rights

12.1 Under GDPR (EEA/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access (Art. 15): Request information about what personal data we process about you. This includes your authentication profile, license/purchase status, share metadata, branding settings, analytics events associated with your user ID, and any support correspondence.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data. For locally stored data, you control this directly (delete recordings, uninstall the application). For server-side data (authentication profile, user record, share metadata, branding settings, analytics events), contact us at info@inuxo.com. For payment data, contact Lemon Squeezy. For support correspondence, contact us.
• Right to Restriction (Art. 18): Request restriction of processing in certain circumstances.
• Right to Data Portability (Art. 20): Recordings are standard video files (MP4/MOV) stored on your Mac — fully portable and exportable at any time without our involvement.
• Right to Object (Art. 21): Object to processing based on legitimate interests. You may opt out of analytics collection in the application settings.
• Right to Withdraw Consent: Revoke Google OAuth access or uninstall the application at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: Contact your local data protection supervisory authority.

To exercise any of these rights, email info@inuxo.com. We will respond within 30 days (extendable by 60 days for complex requests, with notice).

12.2 Under CCPA/CPRA (California Residents)

If you are a California resident, under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request what personal information we collect, use, and disclose. See Section 2 for a complete list.
• Right to Delete: You may request deletion of personal information we hold.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information as defined by CCPA/CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Categories of personal information collected in the preceding 12 months: Identifiers (email, display name via Google authentication; email if you contact support). Commercial information (license/purchase status, order data via Lemon Squeezy). Internet or electronic network activity (anonymous usage events and error reports via analytics — see Section 2.5). We do not collect biometric data, geolocation data, or inferences for profiling purposes.

12.3 Under LGPD (Brazil), POPIA (South Africa), PIPEDA (Canada), and Other Regulations

Our privacy-by-design architecture (local media processing, minimal data collection, no advertising) is designed to comply with major global data protection frameworks. If you have specific rights under your jurisdiction's data protection law, contact info@inuxo.com and we will accommodate your request in accordance with applicable law.

13. Children's Privacy

OwnClip is not directed to children under 16 (or the applicable age of digital consent in your jurisdiction — 13 in the US under COPPA, 16 in the EU under GDPR). We do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has provided personal information to us (e.g., through support email), please contact info@inuxo.com and we will promptly delete it.

14. International Data Transfers

OwnClip processes media data locally on your Mac, which means your recordings, transcriptions, and screenshots never leave your machine (unless you explicitly upload to Google Drive).

The data transfers that do occur:

• Google Cloud Platform: Authentication data, license/purchase status, share metadata, branding settings, and analytics events are stored on Google Cloud infrastructure. Google provides Standard Contractual Clauses and other transfer mechanisms for GDPR compliance. See Google Cloud Privacy Notice.
• Google Drive uploads: Governed by Google's Privacy Policy and their Standard Contractual Clauses for international transfers.
• Lemon Squeezy payments: Lemon Squeezy processes data in accordance with their privacy policy and applicable data transfer mechanisms.
• Software update checks: Your IP address, macOS version, and application version are sent to our GitHub-hosted update feed during update checks.
• Support emails: Email communications may be processed in the country where our email services are hosted.

We do not independently transfer personal data across borders beyond these necessary interactions with the services listed above.

15. Data Breach Notification

While we do not store user content (recordings, screenshots, transcriptions) on our servers, we do maintain server-side data (authentication profiles, license/purchase status, share metadata, branding settings, and analytics) on Google Cloud infrastructure. If we become aware of a security incident that affects personal data in our possession or on our cloud infrastructure, we will:

• Notify affected users without undue delay (within 72 hours where required by GDPR)
• Notify the relevant supervisory authority where required by law
• Describe the nature of the breach, data affected, and remedial measures taken

For breaches at third-party services (Lemon Squeezy, Google), those providers are responsible for notification under their respective obligations.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes (especially changes to what data we collect or how we use it), we will provide prominent notice through the application, website, or email at least 30 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy. If you disagree with any changes, you should stop using the Service.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, contact us at:

Email (privacy, support, legal): info@inuxo.com

Website: https://ownclip.io

We aim to respond to all privacy-related inquiries within 30 days.