Privacy policy

1. Who we are

RAAD is made by Raad Group, LLC, a limited liability company organized in [state to be confirmed], with its address at [address to be confirmed] ("Raad", "we", "us"). This policy covers the RAAD app for Mac and this website, raad.app.

For the personal data described below that we receive and decide how to use, we are the controller. Questions, requests and complaints go to help@raad.app.

2. What stays on your Mac

RAAD is a clipboard manager, so it handles a lot of sensitive material. All of it is kept on your Mac and none of it is sent to us.

• Your clipboard history: text, rich text, links, colors, images and files, with their source app and time.
• Everything derived from it: the search index, the on-device semantic search data, and text recognized inside images.
• Your pinboards, favorites, snippets and settings.
• Backups you create, which are encrypted and stored where you put them.

We have no account system, so we have nothing to attach that data to even if we wanted to. You can delete any clip, or your whole history, from inside the app, and removing the app and its data folder removes the rest.

RAAD tries not to record things it should not. It ignores copies from common password managers, ignores anything an app marks as concealed or transient, and detects and strips API keys and tokens before they are written to disk. No detector is perfect, so do not rely on it as your only protection.

3. What the app sends to us or to others

Apart from your clipboard content, which is never sent, the app communicates as follows.

A few other features involve other companies or your own system, and you should know about them.

• Universal Clipboard. If you copy on an iPhone or iPad and paste on your Mac, Apple moves that data between your devices. RAAD can capture what arrives, and this is on by default. You can turn it off in Settings, Privacy.
• Keychain. RAAD stores your license and the date your free trial started in the macOS Keychain. If you use iCloud Keychain, Apple may sync those items between your Macs.
• Accessibility. macOS asks you to grant this so RAAD can read the frontmost app and page for source information and support paste and hotkeys. If you turn on snippet abbreviations, RAAD also watches what you type so it can spot an abbreviation. It keeps only the last few characters, in memory, and it is never stored or sent.
• Browser tabs. Reading the address of a browser tab through Apple Events is off by default. If you turn it on, macOS shows its own permission prompt for each browser.
• Touch ID. Locking a pinboard uses the macOS authentication system. RAAD never receives your fingerprint data.
• AI tools. If you turn on the MCP server and connect an AI client, that client can read the clips RAAD allows it to. RAAD does not send them anywhere, but the client passes what it reads to its model, and that may be a cloud service run by another company. That is your choice and their terms apply. See the AI page for details.

4. This website

• Hosting and logs. Our host receives standard request data, such as your IP address, browser and the pages you request, to serve the site and keep it secure.
• Analytics. We use Vercel Web Analytics for aggregate statistics: page views, referrers, and coarse details such as country, browser and device type. It does not use cookies or follow you around the web.
• Cookies. We do not set cookies for tracking or advertising. Our payment provider, Paddle, supplies the script that shows our plans and runs the checkout. It loads on any page that shows prices, including the home page and the pricing page, and it may use cookies and similar technology under its own policy.
• Downloads. The download button sends you to the release file, which is hosted on GitHub. GitHub sees your IP address when you download.
• Release notes list. If you give us your email address to hear about releases, we store it so we can write to you, and nothing else. To be removed, email us.
• Recovering a license key. If you enter your email address to recover a key, we look it up with our payment provider and, if there is a match, email the key to that address. The page shows the same response either way, so it cannot be used to find out who has a license.
• Email and support. If you write to us, we keep the message and your address so we can reply and help.

5. Payments

Paddle is the merchant of record for purchases made on this website. You pay Paddle, and Paddle handles your payment details, tax and refunds. We never see or store your card or bank details. Paddle acts as an independent controller of the data it needs to process your order, so its own privacy policy applies to that data.

From Paddle we receive the details we need to give you a license: a customer identifier, what you bought, the status of your subscription, and records of the purchase events Paddle sends us. We use your email address, which we get from Paddle, only to send your license key and to answer you.

6. Who helps us run RAAD

These companies process personal data for us or provide the services described above. We choose them carefully and give them only what they need.

We do not sell your personal data, and we do not share it for advertising.

7. Why we use it, and our legal basis

If the law of your country requires us to have a legal basis to use your personal data, this is ours.

• To give you a license and honor it (checking a key, emailing it, keeping records): performance of our contract with you.
• To keep RAAD and the website secure and working, to fix crashes and to understand which features are used: our legitimate interest in running and improving a reliable product. You can object, and the settings above let you stop the app-side collection.
• To answer your messages and feedback: our legitimate interest, and your consent for anything optional you choose to include.
• To write to you about releases: your consent, which you can withdraw at any time.
• To keep tax and accounting records where the law requires it: legal obligation. Paddle handles most of this for purchases.

8. Where data goes

Our providers may process data in the United States and in other countries, and you may be in a different one. Where the law requires it, we rely on safeguards such as the standard contractual clauses approved by the European Commission, or on the provider participating in a recognized data transfer framework.

9. How long we keep it

• License records: while your license exists, and afterwards for [retention license to be confirmed].
• Feedback reports: [retention feedback to be confirmed].
• Release notes list: until you ask to be removed.
• Usage and crash data: [retention telemetry to be confirmed], according to the settings we use with those providers.
• Emails you send us: as long as needed to help you and to keep a record of it.
• Payment and tax records: held by Paddle under its own policy and the law.

When data is no longer needed for its purpose and the law does not require us to keep it, we delete it.

10. How we protect it

The most effective protection is that your clipboard content never reaches us. For what we do hold, we store only a hash of your license key, we limit who can reach our systems, and we use the security features of the services above. On your Mac, the history is stored in an encrypted local store, and the optional MCP server never returns sensitive, deleted or sealed clips. No system is perfectly secure, and we cannot promise otherwise.

To report a vulnerability, see our security policy.

11. Your choices and rights

Depending on where you live, you may have the right to:

• know what personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent you gave us; and
• complain to your local data protection authority.

If you are a California resident, you also have the rights of access, deletion, correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising, so there is nothing to opt out of, and we will not treat you differently for using any of these rights.

To use a right, email help@raad.app and tell us what you want. We may ask for something that lets us find you in our records, such as the email address on your purchase. We will reply within 30 days. Many things you can do yourself: the app settings turn off usage data, crash reports and link previews, and you can delete your history in the app.

Because your clipboard history is only on your Mac, we cannot access, export or delete it for you. That is by design.

12. Children

RAAD is not aimed at children, and we do not knowingly collect personal data from anyone under 13, or under 16 where the law sets a higher age. If you think a child has sent us personal data, tell us and we will delete it.

13. Changes and contact

We will post any change to this policy on this page and update the date at the top. If a change is significant, we will say so in the app or in the release notes.

Questions about this policy: help@raad.app.