Vexifa builds desktop software on a single architectural principle: your data is processed on your machine, not ours. This policy covers all Vexifa desktop applications and the vexifa.com website.

1. Products Covered

This policy applies to the following Vexifa software and services:

For Vexifa PDF Suite, an additional product-specific privacy policy is available at pdf-suite/privacy.html covering HIPAA, legal privilege, and compliance-sensitive use cases.

2. What We Do Not Collect

Because our desktop applications run locally, the following data never reaches Vexifa servers — by architecture, not by policy alone:

3. What We Do Collect

3.1 License Validation (PDF Suite and future paid products)

Paid Vexifa products validate licenses through Lemon Squeezy on each application launch. This validation sends your license key and a SHA-256 hash of your Windows MachineGuid to Lemon Squeezy's servers. No file content, usage data, or personal identifiers beyond the license key are transmitted. Lemon Squeezy's privacy policy governs their handling of this data.

3.2 Launch Notification Sign-ups

If you submit your email address on our notify page (notify.html), we store your email address and the product you expressed interest in. This data is held in a Google Sheet accessible only to Vexifa and is used solely to send you one launch notification email. We do not add you to any mailing list, marketing sequence, or newsletter.

3.3 Website Analytics

When you visit vexifa.com, we may collect anonymized traffic metrics (page views, general geographic region) for the purpose of improving website navigation. No personally identifiable information is collected.

4. Third-Party API Connections

Several Vexifa applications allow you to connect third-party services using your own API keys. When you use these integrations, data travels directly from your machine to the third-party provider — it does not route through Vexifa servers.

ApplicationOptional Third-Party Connections
PDF SuiteOllama (local AI — no external connection), cloud AI providers (optional, user-configured), Lemon Squeezy (license validation only), TSA/OCSP (timestamp/signature verification)
EMPAWS SES, Mailgun, or user-provided SMTP (email delivery only)
Cyber SecureNVD/CVE databases (read-only vulnerability data)
SmartSleepNone

Vexifa is not responsible for the data practices of third-party services you connect to. Please review their respective privacy policies.

5. Data Retention

All desktop application data is stored on your local machine. Uninstalling the application or deleting its data folder removes all locally stored data permanently. Vexifa has no copy of this data.

Launch notification sign-up data (email address and product interest) is retained until the relevant product launches and the notification is sent, after which it is deleted.

6. Children's Privacy

Vexifa software and services are not directed at children under 13. We do not knowingly collect personal information from children under 13.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on vexifa.com. The date at the top of this page reflects the most recent revision.

8. Contact

Questions about this Privacy Policy: contact@vexifa.com