Privacy Policy

Circo ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Circo desktop application (the "Application" or "Software") and any associated services (collectively, the "Services").

This policy has been designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act (CPRA), and platform developer policies.

---

1. Compliance Statement and Principles

We adhere to core principles of data protection:

• Data Minimization: We collect only information strictly necessary for application functionality.
• Transparency: Clear explanations of processed data.
• User Control: Respecting rights to access and delete your data.
• Security by Design: Operating system-level encryption for local storage.

2. Information We Collect and Process

2.1 Hardware Fingerprinting (License Validation)

To enforce query limits in Guest and Trial tiers and prevent license abuse, the Software generates a pseudonymous hardware fingerprint using system identifiers (`Win32_ComputerSystemProduct` UUID and serial number). This fingerprint is hashed locally and transmitted over HTTPS.

2.2 Local OS Storage (`safeStorage`)

Authentication tokens are encrypted locally using operating-system protection provided through Electron `safeStorage`. This data remains stored exclusively on your local device.

2.3 Temporary Screen Capture and Visual Search Processing

When you trigger visual search, the cropped image region is temporarily transmitted via secure HTTPS to visual search APIs to return results. Circo captures only after a user-triggered action, such as the configured shortcut, floating pill or tray control. Screen captures are not persistently stored on disk or company servers.

3. Third-Party Sub-processors

Sub-processor	Purpose	Location
Google Cloud / Firebase	Telemetry and Firestore licensing backend	United States
Google Lens API	Visual search query processing	Global
Stripe / Paddle	Subscription payment processing	Global

4. Contact Us

For privacy inquiries, contact our Data Protection Officer:

Circo Privacy Desk
Email: contact@trycirco.com