Privacy Policy

This Privacy Policy explains how Sanulux Software ("we", "us", or "our") collects, uses, and protects your information when you visit this website, create an account, subscribe to a paid plan, or use our desktop applications SanuDesk and SanuVoice (together, the "Services").

By using the Services you agree to this policy. If you do not agree, please do not use the Services.

1. The short version

• The desktop apps run on your own computer. We do not receive your code, files, terminal output, or dictation.
• SanuVoice transcribes speech locally with an offline model: your audio is not uploaded to us.
• On the website we collect only what an account, billing, and basic analytics require.
• We never see or store your full payment card details. Stripe handles payments.
• We do not sell your personal information.

2. Information we collect

Account information

When you create an account we collect your name, email address, and a password (stored only as a secure one-way hash, and we never store it in plain text). We also record the IP address and browser user-agent associated with your account for security and abuse prevention.

Billing information

Paid subscriptions are processed by Stripe. When you subscribe, Stripe collects and processes your payment details directly. We store a Stripe customer and subscription identifier, your plan and its status, and, for your reference, your card's brand and last four digits. We never receive or store your full card number. Stripe's handling of your data is governed by the Stripe Privacy Policy.

Download and server logs

When you download an app, our servers record the file requested, the time, your IP address, user-agent, and referring page. These logs help us measure download volume, curb abuse, and keep the Services reliable. Standard web server logs may record similar technical details for any request.

Analytics and cookies

The website uses a small number of cookies:

• Essential cookies: a session cookie and a CSRF-protection token that keep you signed in and secure forms. The site does not work without these.
• Analytics cookies: in production we use Google Analytics 4 to understand aggregate, anonymized traffic patterns (pages viewed, approximate region, device type). See the Google Privacy Policy.
• Advertising cookies: when we run ads on Reddit, the Reddit Ads pixel records that a visit, signup, or subscription followed one of those ads, so we can tell which campaigns are worth paying for. We do not send Reddit your email address or any other identifier: the pixel is installed without Reddit's optional "Advanced Matching" feature. See the Reddit Privacy Policy.

You can block or delete cookies in your browser settings, and use browser or extension controls to opt out of analytics and advertising trackers.

We also keep our own count of how our blog posts are read: which post was opened, roughly how long the page was open, and how far down it was scrolled. This uses no cookies and stores no IP address: your browser is represented by a one-way daily hash that lets us count readers without being able to identify or follow anyone, and that no longer matches you the next day.

What we do not collect from the desktop apps

SanuDesk and SanuVoice run locally on your machine. Your projects, source code, terminal sessions, Kanban boards, to-do lists, Loops, dictated audio, and transcripts stay on your computer. We do not transmit, receive, or store that content. When you connect the desktop app to your account, only the information needed to verify your plan is exchanged.

3. How we use your information

• To create and maintain your account and authenticate you.
• To provide, bill for, and manage paid subscriptions.
• To deliver app downloads and updates.
• To send essential service emails (for example, password resets and billing receipts).
• To secure the Services, prevent abuse, and enforce our Terms of Service.
• To understand aggregate usage and improve the Services.
• To comply with legal obligations.

4. Third-party AI tools you configure

SanuDesk orchestrates AI coding agents (such as Claude Code and Codex) that you connect using your own accounts and API keys. When you run those agents, your prompts and code are sent from your computer directly to the provider you chose, under that provider's terms and privacy policy, not through us. You are responsible for reviewing and complying with the terms of any third-party tool you use.

5. How we share information

We do not sell your personal information. We share it only with:

• Service providers that operate the Services on our behalf, such as Stripe (payments), Google Analytics (website analytics), Reddit Ads (advertising measurement), and our hosting and email providers, and only as needed to perform their function.
• Legal and safety recipients, when required by law or to protect the rights, property, or safety of our users, the public, or us.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Data retention

We keep account and billing information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Download and server logs are retained for a limited period for security and analytics, then deleted or anonymized. When you close your account, we delete or anonymize your personal information except where we must retain it by law.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update your details from your account page, or contact us at privacy@sanulux.com to make a request. We will respond within the timeframe required by applicable law. You also have the right to complain to your local data protection authority.

8. Security

We use industry-standard measures, including encrypted connections (HTTPS), hashed passwords, and scoped access to systems, to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. International data

We and our service providers may process your information in countries other than your own. Where we transfer data across borders, we take steps to ensure it remains protected in line with this policy and applicable law.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Services after a change takes effect means you accept the updated policy.

12. Contact us

Questions about this policy or your data? Reach us at privacy@sanulux.com, or visit https://sanulux.com. This policy is provided by Sanulux Software, publisher of SanuDesk and SanuVoice.