Legal

Privacy Policy

Updated October 6, 2026

1. Scope and controller

This policy explains how the Pair Companion product and website handle personal data. The service provider is the legal seller identified during Stripe Checkout and on the payment receipt (“Pair Companion”, “we”, “us”), based in Brazil. Privacy questions and requests: support@paircompanion.com.

2. Data processed by the website and licensing service

• Subscription and transaction references received from Stripe, including customer and subscription identifiers, price, plan, status, and renewal period.
• A cryptographic hash of your license key.
• A pseudonymous device identifier derived from a random seed, plus platform and app version.
• For the free 30-minute trial: salted SHA-256 hashes of hardware identifiers (on macOS the platform UUID and serial number; on Windows the SMBIOS UUID, system and board serials and the machine GUID), a trial identifier, and usage heartbeats sent every 60 seconds while the app is unlocked. The raw identifiers never leave your computer. These hashes are used only to meter the trial per computer and are retained so a trial cannot be restarted by reinstalling.
• License activations, validations, limited device-transfer history, and service timestamps.
• Operational security logs needed to prevent abuse and diagnose failures. These logs do not contain product content.

Website analytics

The website uses Google Analytics 4 and Google Ads conversion measurement under Google Consent Mode to understand which pages attract interest and whether an advertisement resulted in a completed checkout. Before you make a choice, or when you continue without analytics, all analytics and advertising storage remains denied: Google may receive cookieless measurement pings, but the website does not allow Google analytics or advertising cookies, user-level advertising data, or advertising personalization. If you choose “OK, allow analytics”, analytics storage, advertising storage, and advertising user data become available to Google while advertising personalization remains disabled. PostHog product analytics loads only after that affirmative choice and is configured without session recording or autocapture. Global Privacy Control prevents both Google and PostHog from loading. Cloudflare Web Analytics, which sets no cookies and stores no identifier, may run regardless. Events describe actions such as a download click or a completed checkout, never your email, license key, Stripe session ID, or payment details. Google explains how it uses information from sites that use its services. You can change your choice at any time through the “Analytics choices” link in the footer.

3. Data processed locally by the application

Depending on the features you enable, the application may process screenshots, microphone audio, computer audio, transcripts, AI prompts and responses, profile information, résumés, job descriptions, company notes, answer history, and settings. This information is stored locally or passed directly to the locally authenticated AI provider selected by you. It is not sent to the Pair Companion licensing backend.

4. AI providers

When you use Claude Code or Codex, content is processed under your separate agreement with Anthropic or OpenAI. Their privacy practices and retention choices apply to that processing. Pair Companion does not control your provider account or its data settings.

5. Payments

Stripe is our payment processor and processes payment credentials, checkout, receipts, renewals, refunds, and payment disputes on our behalf. Pair Companion receives limited customer, invoice, subscription, checkout-consent, and dispute data needed to provide and support the license, but does not receive your full payment card number. If a charge is disputed, relevant purchase, policy-acceptance, delivery, activation, license-usage, cancellation, and support records may be shared with Stripe and the card issuer as evidence. These records do not include screenshots, transcripts, source code, prompts, or AI responses. The legal seller remains the entity identified at checkout and on your receipt.

6. Purposes and legal bases

We process licensing and subscription information to provide the contracted service, prevent license abuse, support device transfers, comply with financial and legal obligations, and protect the service. Optional storage and PostHog remain disabled until consent is obtained. Before consent, Google receives only consent-denied, cookieless measurement signals and the website sets no analytics or advertising cookies. After consent, the analytics providers may store the identifiers described above.

7. Retention

Active entitlement and device-binding records are retained while a subscription is active and for a limited period afterward for support, fraud prevention, accounting, and legal obligations. Pending checkout claims expire. Trial hashes are retained for as long as the trial record exists. Local product content remains until you delete it or uninstall the application, subject to OS backups.

8. Sharing

Data may be shared with Stripe for commerce, Cloudflare for infrastructure, GitHub for software downloads, and professional advisers or authorities when legally required. We do not sell personal data or share product content for advertising.

9. International processing

Service providers may process data in multiple countries. Appropriate contractual and technical safeguards should be documented before launch where required by applicable law.

10. Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection. You can also delete local histories and profiles in the application, and withdraw analytics consent through the “Analytics choices” link in the footer of every page. Send requests to support@paircompanion.com from the email address used at checkout so we can verify them.

11. Security

We use data minimization, hashed identifiers, platform credential storage, authenticated license requests, and restricted administrative access. No system is perfectly secure. See the Security overview for the current architecture.

12. Children

Pair Companion is not directed to children and is not intended for anyone under the minimum age required to enter a binding subscription in their country.

13. Changes

Material changes will be reflected by an updated date and, where appropriate, an in-product or website notice.