Privacy Policy

Effective date: February 16, 2025

1. Data Controller

Roel van Roozendaal
The Netherlands
Contact: via GitHub

2. What Data We Collect

None. PluginSmith does not collect any personal data, usage data, analytics, crash reports, or telemetry of any kind.

3. Data Processing

3.1 Documents You Import

Documents you import into PluginSmith are processed entirely on your local machine. When you use the AI-assisted features (Analyze Sources, Generate), document content is sent to the Anthropic API for processing. This is a direct connection between your Mac and Anthropic's servers. PluginSmith has no server and no intermediary.

3.2 API Key Storage

Your Anthropic API key is stored in the macOS Keychain, the operating system's secure credential storage. It is never written to disk in plain text, logged, or transmitted to any server other than the Anthropic API endpoint.

3.3 Project Data

Projects are saved locally on your Mac in the location you choose. Recent project metadata is stored in the app's local UserDefaults. No project data leaves your device except when sent to the Anthropic API at your explicit request.

4. Third-Party Services

The only third-party service PluginSmith communicates with is the Anthropic API (api.anthropic.com). This communication occurs only when you explicitly trigger an AI-assisted feature. Anthropic's handling of your data is governed by Anthropic's Privacy Policy.

5. Cookies & Tracking

PluginSmith is a native macOS application. It does not use cookies, tracking pixels, analytics services, or any form of user tracking.

6. Your Rights Under GDPR

Since PluginSmith does not collect or process personal data, GDPR data subject rights (access, rectification, erasure, portability, restriction, objection) are not applicable to the App itself. However, you have full control over all data on your device:

• Access & Portability: All your data is stored locally in standard file formats you can access at any time.
• Erasure: Uninstalling the App and deleting its data folder removes all traces.
• API Data: For data sent to Anthropic, refer to Anthropic's Privacy Policy to exercise your rights.

7. Children's Privacy

PluginSmith is not directed at children under 16. We do not knowingly collect data from anyone, including children.

8. Data Transfers

When you use AI features, document content is sent to Anthropic's servers, which may be located outside the European Economic Area. This transfer is initiated by you and is necessary for the service you requested. Anthropic's data handling practices are described in their privacy policy.

9. Data Security

PluginSmith uses macOS Keychain for secure API key storage and communicates with the Anthropic API exclusively over HTTPS (TLS-encrypted connections).

10. Changes to This Policy

This policy may be updated from time to time. The effective date at the top of this page indicates the latest revision. Changes will be posted on this page.

11. Contact

For questions about this privacy policy, contact the author via the GitHub repository.