Legal · Privacy Policy
Privacy Policy
Effective 18 October 2026 · version 1.0-beta
Palsee is a copilot that sees your screen and hears your voice when you ask it to. Here is exactly what happens to which data, where it goes, how long it stays and what your rights are. The short version is on Privacy & safety. The Czech version is the governing one; this is a translation.
1. Controller
The controller is Uscita capital s.r.o., Company ID (IČO) 29648351, registered office Národní 961/25, Staré Město, 110 00 Prague 1, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 450095.
Privacy contact: [email protected]. We have not appointed a data protection officer.
2. Scope
The Palsee app for macOS, the Palsee account and plans (held within your Capture account), the managed model access (gateway) and this website.
3. What we process and why
- Account
- Email, name, organisation (workspace) and Capture sign-in tokens. Purpose: sign-in, plan, company procedures. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Device
- A random device ID, the Mac's name, macOS and Palsee versions. Purpose: registering the device to your account and protecting it. Basis: contract and legitimate interest in security (Art. 6(1)(b) and (f)).
- Usage
- Task counts, mode and device ID on gateway requests. Purpose: plan limits and billing. Basis: contract.
- Screenshot and element list
- Captured only when you ask for something (holding ⌃⌥ or typing). Sent to your chosen model — by default OpenAI through our pass-through gateway, or directly to the provider whose key you entered. We don't store screenshots on our server; OpenAI calls are sent with storage off (store: false). You can turn screenshots off in Settings; with a local model they never leave the Mac. Basis: contract.
- Voice
- Audio is recorded only while you hold the shortcut, briefly for a voice confirmation (up to 6 s) and in Teach mode. It is transcribed by Deepgram (directly or via the gateway) or by Apple speech recognition on the Mac. We don't keep recordings. Basis: contract.
- Palsee's voice
- Reply text is turned into speech by ElevenLabs, or by the macOS system voice. Basis: contract.
- Company procedures
- Your organisation's procedures from Capture are downloaded to the Mac and deleted when you sign out. Procedures you teach Palsee and send to Capture are stored in your organisation's private storage; Palsee strips passwords, keys, card numbers, IBANs and national ID numbers first. Basis: contract.
- Background tasks
- Task files live in ~/Palsee/Úkoly on your Mac. A task may fetch a public web page or packages from PyPI and npm. Basis: contract.
- Correspondence
- When you write to us: email, name and message. Basis: legitimate interest in replying, or contract.
- Website
- This website uses no cookies and no analytics. The host (Railway) keeps technical access logs — IP address, page, time and browser. Basis: legitimate interest in running and securing the site.
We don't use your content to train models and we don't sell data. We make no automated decisions with legal effects.
4. What stays on your Mac only
In ~/Library/Application Support/Palsee and ~/Palsee, Palsee keeps data locally; we have no access unless you send it to us (e.g. to troubleshoot):
- a log with request transcripts and model answers — no screenshots or keys; rotated at 8 MB,
- session history with small screen previews, deleted after 30 days,
- settings, your own API keys (a file readable only by your user) and the sign-in session,
- taught procedures and background-task folders.
Deleting the app and these folders removes the data from your Mac.
5. Processors and recipients
We share data only with those who need it to provide the service:
- OpenAI (USA)
- AI models — default provider.
- Anthropic (USA)
- AI models, if you choose them.
- OpenRouter (USA)
- AI models, if you enter your own key.
- Deepgram (USA)
- Speech to text.
- ElevenLabs (USA)
- Text to speech.
- Supabase (USA)
- Sign-in and the Capture account database.
- Railway (USA)
- Hosting of the Capture server, the gateway and this website.
With your own API key or a local or company model, you send data directly to that provider under its terms. We also disclose data to public authorities where the law requires it.
6. Transfers outside the EU
Some processors are in the USA. Transfers rely on the adequacy decision (EU-US Data Privacy Framework) for certified providers, otherwise on the European Commission's standard contractual clauses.
7. How long we keep data
- Account, device and usage: while the account exists and up to 3 years afterwards for possible claims; accounting records as long as the law requires.
- Screenshots and audio: not stored on our server; the gateway only passes them on. Model providers may keep them briefly under their terms (e.g. OpenAI keeps API data for up to 30 days for abuse monitoring).
- Procedures taught into Capture: until your organisation deletes them.
- Correspondence: while we handle it, at most 3 years.
- Website technical logs: as long as the host keeps them, typically days to weeks.
8. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. Write to [email protected]; we reply within one month.
You can also complain to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
9. Security
Transfers are encrypted (HTTPS). On the Mac, sensitive files are readable only by your user, background tasks run isolated without network access or access to your home folder, and Palsee hides obvious secrets before it saves a procedure.
10. Children
Palsee is a work tool and is not intended for anyone under 16.
11. Changes
We update this policy as Palsee evolves. We announce material changes on the website or in the app; the effective date is shown at the top.
Other documents