CullBench Privacy Policy

1. Local photo processing

The CullBench macOS app may still display its internal FramePick name during the brand transition. It opens folders you choose and performs AI analysis locally. We do not upload photos to group, preview, rate, Pick, or export them.

• Original photos, RAW or HEIC files, previews, and thumbnails.
• File names, local paths, folder locations, security-scoped bookmarks, or export destinations.
• EXIF, GPS, camera serial numbers, exact capture times, people, or face information.
• DINO embeddings, clustering inputs, model caches, analysis.json, review-state.json, or helper output.

2. Website and purchase data

Cloudflare hosts the site, license APIs, and database and may process IP address, time, User-Agent, and security logs needed to complete HTTPS requests. Paddle acts as Merchant of Record and handles email, billing address, payment instrument, tax, receipt, and refund data. CullBench never receives or stores full card numbers, CVV values, or PayPal passwords.

Our commerce service retains only transaction ID, product and price, currency and amount, status, timestamps, and event digests needed to operate a perpetual license. The raw random claim token stays in the current browser tab and claim request; Paddle and D1 receive only its SHA-256 digest.

3. Licensing and activation

Activation or restore sends a license key, a randomly generated installation UUID, and necessary version information. D1 stores a keyed license digest, installation UUID, status, and timestamps. It stores no raw key and reads no Mac serial number, Apple ID, or photo identity.

A network address used for anonymous rate limiting is HMACed with a separate server secret before entering a short-lived rate window. D1 stores no plaintext IP address. Deactivation frees a device seat while retaining necessary audit state.

4. License recovery email

The success page temporarily keeps the checkout email from Paddle in the current tab and sends it with the short-lived claim credential to the license service. After revalidating the transaction, the service asks Resend to send a plain-text recovery message. It contains no permanent key, only a seven-day recovery link. D1 stores no email, message ID, or recovery URL.

Resend processes the recipient and message under its own policy. The recovery token is placed in the URL fragment, is not sent to the website server when opened, and is removed from the address bar immediately after use.

5. Optional diagnostics

Crash reporting and anonymous usage analytics default on for new installs and are explained before either SDK starts. You may turn each off independently in Settings > Privacy & Diagnostics.

• Reports may contain App/build, macOS major version, CPU architecture, sanitized crash stacks, fixed event names, and bucketed photo counts or timings.
• Reports never contain photos, screenshots, names, paths, EXIF/GPS, people, embeddings, helper text, license keys, email, or free-form input.

6. Use, retention, and sharing

We process data only to deliver and operate perpetual licenses, prevent abuse, provide support, improve reliability, and meet applicable legal duties. Transaction, license, and audit state is retained while needed to operate the license and handle disputes; short-lived claim credentials expire after seven days. Providers may retain necessary records under their policies.

We do not sell personal data, use it for targeted ads, or track activity in other apps or websites. We share it only with the providers above, when legally required, or to protect users and service security.

7. Your choices and rights

You may disable diagnostics, delete local analysis data, deactivate a Mac, and request access, correction, or deletion where applicable law provides. Some transaction and anti-fraud records may need to remain for legal duties or to operate an ongoing license.

Send privacy requests to support@cullbench.com. Include only the Paddle transaction ID needed to locate a purchase; do not send photos, card data, or a license key.

8. Changes and contact

We will provide notice through the website, App, or purchase email before material changes take effect. Contact us through the support page or email below.