Privacy in plain language

Minimal data, explicit boundaries.

Delivery form

The production form stores the submitted email address, the optional marketing-consent choice, a source label, a server creation time, and an expiry time. It does not request or store provider credentials, browser cookies, payment details, or app usage data.

Retention and consent

Delivery records expire automatically after 365 days by default. Leaving the marketing box unchecked does not block the app download and does not grant marketing consent. A deletion request should be handled promptly instead of waiting for automatic expiry.

Infrastructure

Digital Research Group hosts the product site in its AWS account. Lead records are encrypted in DynamoDB, protected by account access controls, and unavailable to the routine GitHub deployment role. The static site is delivered from a private S3 origin through CloudFront over HTTPS.

App credentials

The marketing site never asks for an OpenAI or other provider key. The current live connector is OpenAI Platform; its key belongs inside the macOS app and is stored in Keychain. Claude, Gemini, and Grok use manual tracking and do not import browser credentials.

Questions or deletion requests

Contact Digital Research Group through digitalresearchgroup.com. Verify the public contact route is actively monitored before a broad external launch.