Privacy policy.

1Who we are

Shotbox is provided by [Legal name, e.g. Shotbox Ltd], a [private limited company / sole trader] registered in [England and Wales] (company number [Company number]), whose registered office is [Registered office address]. You can reach us at support@shotbox.example. For the purposes of UK data protection law, we are the controller of the personal data described in this policy.

Our ICO registration number is [ICO registration number].

2The short version

• The Shotbox app doesn’t send us your recordings, screenshots, projects or transcripts. They stay on your Mac.
• The app has no analytics or telemetry. About once a month it checks your subscription, sending your licence key, a random ID for your Mac and the app version.
• We hold the personal data needed to sell and support a subscription: your name, email, billing details and anything you send us.
• We never sell your data.

3Data in the Shotbox app

Your content stays on your Mac. Recordings, screenshots, camera footage, audio, projects, transcripts, captions and brand kits are saved as files on your Mac. We do not receive them, and the app does not upload them anywhere.

Speech recognition is on-device. Captions and transcripts use Apple’s speech recognition, which Shotbox requires to run on your Mac. If no offline model is installed, Shotbox tells you instead of using a server. Chapter titles may be written by Apple Intelligence where it is available, which also runs on your Mac.

Web pages you bring into a video. When you paste a web address and ask Shotbox to bring that page in, the app requests the page from that website, as a browser would. The website receives your IP address and a standard browser request, under its own privacy policy. Each page loads in a fresh, private session, and no cookies are kept. Apart from the subscription check below, this is the only network request the app makes.

Subscription check. After you enter a licence key, the app checks your subscription when you activate it, about once a month after that (around each renewal), and when you press Check Again or Deactivate. It sends your licence key, a random ID the app made for this Mac (not its name, serial number or any hardware ID), and the app version. Our server passes the key and that ID to Lemon Squeezy to confirm the subscription is paid, then replies with a signed note saying how long this Mac can run without checking again. We don’t keep these requests. Nothing about what you make in Shotbox is sent.

Logs. The app writes a diagnostic log to ~/Library/Logs/Shotbox.log on your Mac. It is not sent to us. If you choose to attach it to a support email, we use it only to help you.

macOS permissions. Screen Recording, Microphone, Camera and (optionally) Accessibility are granted to the app by you in macOS. Granting them lets Shotbox record on your Mac; it does not give us access to anything.

4Data we collect, why, and our lawful basis

Card details are entered with our payment provider and are never seen or stored by us.

5Who we share data with

We use a small number of providers who process data for us under contract:

• Payments: Lemon Squeezy. Lemon Squeezy is the merchant of record: it sells the subscription to you, handles VAT, and processes your payment details under its own privacy policy.
• Email newsletter: [Newsletter provider, e.g. Buttondown], only if you sign up for launch news.
• Email and support inbox: [Email provider, e.g. Google Workspace or Fastmail].
• Website hosting: [Website host, e.g. Cloudflare Pages or Netlify].
• Subscription checks: Supabase hosts the small server the app asks, in London. It records standard request logs, including IP addresses.
• Fonts: this website loads fonts from Google Fonts, which means your browser sends your IP address to Google when you visit.

We may also share data where the law requires it, or with professional advisers such as our accountant.

6International transfers

Some providers may store or access data outside the UK. Where they do, we rely on UK adequacy regulations, or on the ICO’s International Data Transfer Agreement or Addendum, to make sure your data stays protected.

7How long we keep data

• Subscription and billing records: for as long as you subscribe, then six years for tax and accounting purposes.
• Support emails: up to two years after our last exchange, unless needed for a dispute.
• Launch news: until you unsubscribe, which you can do from any email.
• Website server logs: as set by our host, typically no more than 30 days.

8Cookies

This website does not set cookies or use analytics, so there is no cookie banner. If that changes, we will update this policy and ask for your consent where the law requires it.

9Your rights

Under UK data protection law you can ask us to:

• give you a copy of your personal data (access)
• correct it (rectification)
• delete it (erasure)
• limit how we use it (restriction)
• give it to you in a portable format (portability)
• stop using it, where we rely on legitimate interests (objection)

Where we rely on consent, you can withdraw it at any time. Email us to use any of these rights; we will respond within one month.

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put it right first.

10Children

Shotbox is not directed at children, and subscriptions are only available to people aged 18 or over.

11Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell subscribers by email before it takes effect.