Privacy Policy

1. Who this policy covers

This policy explains how Oscar the Dog Limited (company number [COMPANY NUMBER], [JURISDICTION], registered office [REGISTERED ADDRESS]) collects and uses information through this website and the Oscar software (together, the "Service").

2. Local first: what stays on your device

Oscar's core product is local-first. Files Oscar reads or edits, your local command history, and the memory Oscar builds about how you work stay on your own device by default and are never uploaded to us. We only ever see information you explicitly choose to share with us — for example, by registering an account, using the contact form, or pairing your own devices with each other through a feature you initiate.

3. Information we collect

• Account information. When you register, we collect your email address and a securely hashed password, held for us by Amazon Cognito (see § 5).
• Billing information. If you subscribe to a paid plan, your payment details are collected and processed directly by Stripe, Inc. We receive your plan, subscription status, and a Stripe customer reference — never your full card number.
• Contact form submissions. If you use our contact form, we collect the name, email address, and message you provide, solely to respond to you.
• Device pairing (planned). Oscar's device-sharing feature will let you securely connect your own devices to each other; a rendezvous/relay service we operate helps establish that connection, but is designed so it cannot read the content passing between your devices (it only ever handles already end-to-end encrypted traffic). This section will be updated with full technical detail before that feature ships.

4. How we use your information

We use the information above only to:

• create and secure your account, and let you sign in;
• process payment for the plan you choose and manage your subscription;
• respond to messages you send us;
• send you service-related emails (such as billing receipts or security notices) — never marketing email unless you separately opt in;
• meet our legal and accounting obligations.

We do not sell your personal information, ever.

5. Who we share information with

We share information only with the service providers needed to run the Service:

• Amazon Web Services (Cognito for accounts, AppSync/DynamoDB for account data, SES for the contact form, and CloudFront/S3 for hosting the download artifact) — our cloud infrastructure provider;
• Stripe, Inc. — our payment processor, once billing is live;
• the AI providers Oscar's own cloud features route to, only for the specific request you make and only when a task genuinely needs a cloud model — never as a blanket upload of your device's data.

We do not share your information with any other third party except where required by law, or with your explicit consent.

6. Data retention

We keep your account information for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations. Contact form messages are retained only as long as needed to resolve your enquiry. You can ask us to delete your account and associated data at any time (see § 7).

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these rights directly from your account's profile page, or by contacting us through our contact form. We will respond within the time required by applicable law.

8. Security

We use industry-standard measures to protect the information we hold, including encryption in transit and at rest for account and billing data. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify you and relevant authorities of any breach as required by law.

9. Children

The Service is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date, and for material changes we will give you reasonable notice before they take effect.

11. Contact

Questions about this policy, or requests relating to your personal information, can be sent through our contact form, or in writing to Oscar the Dog Limited at [REGISTERED ADDRESS].