Privacy Policy

1. Who we are

DiskBOX is created and provided by WisePal LLC, registered in Delaware, United States. WisePal LLC is the controller responsible for the DiskBOX processing described in this policy. Privacy questions and rights requests can be sent to privacy@diskbox.app.

2. The desktop application

DiskBOX scans only the local drives and folders you choose. File names, paths, folder listings, sizes, contents, hashes, duplicate results and cleanup selections are not sent to WisePal LLC or the website. Scanning, visualization, duplicate verification and cleanup review run on your device.

The browser demo cannot access files on your computer. It uses clearly labelled synthetic sample data and does not scan or delete local files.

3. Purchasing and payment

Payment is processed by Stripe on its hosted checkout page. Your card number does not reach WisePal LLC servers. After payment, Stripe provides DiskBOX with transaction information such as the purchaser name and email address, Checkout Session and Payment Intent identifiers, product, amount, currency, payment status, and refund or dispute status. We use it to verify payment, enforce the 200-license launch limit, provide access, prevent fraud, handle refunds and disputes, and maintain financial records. Stripe applies its own privacy policy to its processing.

4. Access and device licensing

For a verified purchase, we store the order record, purchase email address, licensee name and payment identifiers. We store a cryptographic hash rather than the one-use access link itself; the link expires after 24 hours. Only a hash of the session token is stored, and the session expires after 30 days.

A Device Code is bound to the order only after the purchaser explicitly confirms it and is immutable per purchase. The resulting signed offline license contains a license identifier, licensee name, Device Code and issue time. The license record and status are retained so the purchased lifetime access can be provided. After import into DiskBOX, the license is validated offline on the device; the app does not perform periodic online checks.

5. Email and priority support

When Resend is configured, we send one-use access links and service messages to the purchase email address. We do not send a marketing newsletter. After an email job succeeds or permanently fails, its delivery payload containing the recipient address and private link is cleared from the queue; a limited delivery-status record may remain.

If a verified buyer uses the support form, we store the subject, message, ticket identifier, related order, status and dates. The message is delivered to the support mailbox, and replies go to the purchase email address. You should not include sensitive file contents, passwords, card details or private access links in a support message.

6. Website and analytics

The website runs on Vercel. Vercel may process request information, IP address, approximate location, device and system information, and server logs to operate and secure the service and investigate abuse. The private Windows download is streamed from Vercel Blob through the web server; the storage URL and token are not disclosed to the visitor.

DiskBOX uses Piqo Analytics to understand page views and traffic sources. The current cookie-based configuration may process a random first-party visitor identifier retained for up to 12 months together with page URL, referrer, UTM parameters, device/operating-system/browser type, and approximate geography derived from IP. Under Piqo’s published model, the IP address itself is not stored in the analytics record. We do not use this analytics data to build advertising profiles.

7. Service providers and transfers

We may use Stripe (payments), Neon/PostgreSQL (application database), Vercel and Vercel Blob (hosting and private downloads), Resend (transactional email), and Piqo Analytics (web analytics) to provide the service. These providers process data under their own contracts and privacy terms. WisePal LLC and its providers may process data in the United States or outside your country of residence. Where applicable, we use required contractual and legal safeguards.

8. Retention and security

Order and license records are retained as long as necessary to provide the lifetime license and meet financial, fraud-prevention, dispute and legal obligations. Support requests are retained as long as needed to handle the issue, resolve disputes and operate the service securely. Expired access/session records, limited operational and security records, and backups may remain longer under routine maintenance or legal retention cycles. Provider retention is governed by each provider’s terms.

We use data minimization, HTTPS, private/no-store download responses, hashed access and session tokens, signed webhook verification, restricted administrative access and offline signed-license verification. No system can guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, port or object to processing of your personal data, and to complain to an appropriate data-protection authority. Send requests to privacy@diskbox.app. We may need to verify your identity and ownership of the purchase. We may retain some order records for legal or financial obligations; deleting a license record may prevent future web access, recovery or re-download, and we will explain that before deletion.

WisePal LLC does not sell personal information or share it for cross-context behavioral advertising. You can block the analytics cookie through browser settings or a content blocker; this does not affect the desktop app’s local functions.

10. Children, changes and contact

DiskBOX is not directed to children under 13, and we do not knowingly collect personal data from them. We may update this policy when the product, providers or legal requirements change. For material changes, we will update the date on this page and provide additional notice where required.

For privacy questions or requests: WisePal LLC, Delaware, United States — privacy@diskbox.app.