Privacy policy

Version 0.9, 2026-10-27. Draft: it describes how Shotrev works today and will be reviewed by a lawyer before paid plans go on sale. Text in [brackets] is filled in before then.

In short

Your captures, recordings, markups and files stay on your computer. We never receive them.
The app has no account and sends us no usage data, analytics or crash reports.
We hold personal information only when you write to us, ask for a licence key or (once sales open) buy one: your name, email address, your computer's device code and the details of your purchase.
shotrev.com sets no cookies and runs no tracking analytics.
We do not sell or share your personal information for advertising, and never will.

1. Who we are

Shotrev is a software business based in Ontario, Canada (“Shotrev”, “we”, “us”). Address: [BUSINESS STREET ADDRESS]. Email: support@shotrev.com.

Privacy Officer. Shotrev's Privacy Officer is responsible for the personal information we hold. Write to support@shotrev.com with “Privacy” in the subject.

This policy covers the Shotrev app, the website shotrev.com, support by email, licence keys and purchases. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply to you, Quebec's private-sector privacy law and the EU and UK GDPR.

2. What we do not collect

Shotrev runs on your computer. Captures, recordings, projects, markups, text recognised from your screen, your capture history and your settings are files in your own folders. We have no copy of them and no way to see them. Text recognition uses the recognition built into Windows on your computer. Sending a capture to Outlook, Word or Excel hands it to that application on your computer. The app contains no analytics, advertising or tracking code.

3. What we collect, and why

When you email support: Your name, email address, what you write and anything you attach. Used to answer you and to fix problems you report.
When you ask for a licence key: Your name (or your company's), email address, the plan, and the device code shown in Shotrev's Preferences. The device code is a one-way fingerprint of your computer; it does not contain your name, files or hardware serial numbers. Used to issue the key, renew it, move it to a new computer and prevent key sharing. We keep a record of each key we issue (date, plan, name, device code, key number, lapse date).
When you buy (once sales open): Payment is handled by Stripe. Stripe collects your card details, name, email, billing country and postal code; we never see or store your full card number. We receive the name, email, plan, amount, tax, date and the last four digits and brand of the card. Used to deliver your key, keep tax and accounting records, process refunds and handle disputes.
When you visit shotrev.com: Our host, Cloudflare, processes your IP address, browser details and the pages you request to deliver the site and protect it from attack. If the contact form is switched on, Cloudflare Turnstile checks that a person is sending it using signals from your browser, and the form sends us your name, email, message and IP address (the IP address helps us stop abuse).
When Shotrev checks for updates: If “Keep Shotrev up to date automatically” is on (Preferences), the app asks shotrev.com for the latest release about every six hours. The request passes through Cloudflare, which sees your IP address as with any web request, and the file itself is fetched from GitHub by our server. Shotrev sends no other information. You can turn this off at any time.
When you download Shotrev: The download is served by shotrev.com through Cloudflare, which processes your IP address and browser details to deliver it. Our server fetches the file from GitHub; GitHub does not see your IP address.

Legal bases (EU/UK). Performing our contract with you (keys, purchases, support you ask for); our legitimate interests in keeping the site and keys secure and preventing fraud; legal obligations (tax and accounting records); and your consent for anything optional, such as marketing email, which we will only send if you tick a box to receive it.

4. Who processes it for us

We use a few service providers. They are bound by contract to protect the information and use it only to provide their service (except where noted as acting on their own account):

Cloudflare, Inc. (USA): Website hosting and security, Turnstile, and forwarding of mail sent to support@shotrev.com. Cloudflare does not store the content of forwarded email. It uses Turnstile signals partly on its own account to improve bot detection. Privacy policy
Google LLC (USA): Our support mailbox (Gmail), which stores the email you send us. Privacy policy
GitHub, Inc. (USA): Storage of the release files that shotrev.com serves; it sees our server's requests, not yours. Privacy statement
Stripe (once sales open): Payments. Stripe acts for us to process your payment, and on its own account for fraud prevention and its legal duties. Privacy policy

We do not sell personal information, share it for advertising, or give it to anyone else, except where the law requires it (for example a valid court order) or to a successor if the Shotrev business is transferred, who must keep this policy.

5. Where it is stored

These providers store and process information in the United States and possibly other countries. While it is there it is subject to the laws of those countries and may be accessed by their courts, law-enforcement and national-security authorities. For transfers from the EU and UK, the providers use the European Commission's and UK's approved transfer mechanisms (adequacy decisions or standard contractual clauses).

6. How long we keep it

Purchase, refund and key records: six years after the end of the tax year they relate to, as Canadian tax law requires.
Support email: [24] months after the conversation ends, unless it relates to a key or purchase still on record.
Contact-form messages: [12] months.
Website logs: Cloudflare keeps request logs for a few days.

After that we delete the information or make it anonymous.

7. How we protect it

Only we can sign in to the accounts that hold your information, and they are protected with strong passwords and two-step sign-in. The key-signing key is kept outside cloud storage, encrypted with a passphrase. The website uses HTTPS only, with strict security headers. We collect as little as possible, which is the best protection. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner of Canada as soon as we can, and we keep a record of every breach for at least 24 months.

8. Your rights

You can ask to see the personal information we hold about you, correct it, or withdraw consent for anything optional. If you are in Quebec, you can also ask for a copy in a structured, commonly used format and ask us to stop disseminating information about you. If you are in the EU or UK, you also have the rights to erasure, restriction, objection and data portability. Write to support@shotrev.com. We answer within 30 days and may ask you to confirm your identity first. We may keep records we are legally required to keep, such as tax records, even if you ask us to delete them.

9. Complaints

Please write to us first and we will try to put it right. You can also complain to the Office of the Privacy Commissioner of Canada, in Quebec to the Commission d'accès à l'information, or to the data-protection authority where you live in the EU or UK.

10. Cookies

shotrev.com sets no cookies and uses no analytics or advertising trackers. Cloudflare states that Turnstile does not use cookies to collect or store information. If we ever add analytics, we will use a cookie-free service and update this policy first.

11. Children

Shotrev is a professional tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, write to us and we will delete it.

12. Email we send

We send email about your key, purchase, renewal and support requests. We send news or offers only if you have agreed to receive them, and every such message has an unsubscribe link.

13. Changes

If we change this policy we will update the version and date above. If a change matters to how we use information you have already given us, we will email you before it takes effect.