RedactIt — Privacy & Data-Handling Statement
The short version
RedactIt is built to do its work on your own computer. In ordinary use, the Software does not send the documents you open, the text it detects, or the redactions it makes to us or to anyone else. Detection and redaction — including the optional local AI — run entirely on your device. Information only leaves your computer if you choose to send it (for example, by pasting redacted text into a separate AI service), or through the limited, non-document activities described below (purchasing a license, downloading optional models).
The sections below explain this in detail.
1. Scope
This statement describes how the RedactIt desktop application handles data, and what limited information Black Dog Analytics collects in connection with selling and supporting it. It does not cover third-party services you separately choose to use (see Section 7).
2. What the Software does with your documents
- Local processing. When you open a Word (
.docx), TXT, or PDF file, RedactIt detects and redacts confidential information locally on your device. This includes the pattern rules, the on-device name-recognition model, and — if you enable it — the optional local AI model. None of this requires a connection to us, and your document content is not transmitted off your device by the Software. - Your original is never modified. RedactIt always writes a new file; your source document is left untouched.
- What it reads. The Software processes the text of your document to find confidential details. Text embedded in images, scanned pages, charts, or SmartArt cannot be read and is not processed (you are advised in-app to review those by eye).
3. What RedactIt stores on your computer (and where)
All of the following are stored locally on your device only and are never uploaded to us:
| Data | Location (Windows) | Purpose |
|---|---|---|
Vault — the reversible mapping between placeholders
(e.g. [[PERSON_1]]) and your original text, and any images removed
for reversible redaction |
%APPDATA%\RedactIt\vault |
Lets you restore a redacted document later |
| License key | %APPDATA%\RedactIt\license.rlic |
Activates your copy |
| Optional model downloads (larger name model; local AI runtime and model) | %APPDATA%\RedactIt\ner, \llm |
Enable higher-accuracy detection |
| Application settings (e.g., whether to show the guide at startup) | Windows user registry
(HKCU\Software\Black Dog Analytics\RedactIt) |
Remember your preferences |
| Redacted output files | Wherever you choose to save them | Your redacted copy |
- The vault is encrypted. Its contents are encrypted on disk using a key protected by the operating system’s per-user data-protection facility, so the mappings are not readable as plain files.
- The vault persists until you remove it. It is intentionally kept so
you can restore documents you redacted earlier. Uninstalling RedactIt
keeps the vault (and your license) unless you choose, at uninstall, to
delete the vault. You can also delete
%APPDATA%\RedactIt\vaultyourself at any time. - Temporary working files. When converting a PDF for redaction, the Software may create a temporary working copy of the document’s text on your device; this is deleted when the application closes.
4. What leaves your computer — and only when you choose
- Redacted text you share. The purpose of RedactIt is to let you safely use outside AI tools on confidential material: you copy the sanitized text — in which sensitive details have been replaced by placeholders — into a third-party service such as ChatGPT or Claude. That transfer is your action, outside the Software, and is governed by that service’s own terms and privacy practices. The Software itself does not send your document content anywhere.
- You are in control. Nothing about your documents leaves your device through the Software without an explicit choice by you.
5. Network activity by the Software
In ordinary operation the Software’s network use is limited to the following, and never includes your document content:
- License activation is local. Your license key is verified on your device using cryptography; the key is not sent to us to activate.
- Optional downloads (inbound only). If you choose to add the larger name model or the local AI, the Software downloads that software from its distribution source. These are downloads to your machine; no document data is sent out. Downloads are integrity-checked against known cryptographic hashes.
- No “phoning home.” A review of the application source found no automatic update check, no usage analytics or telemetry, and no crash reporting. The only outbound connections the Software makes are the optional model/runtime downloads described above. When you use the local AI, your document text is sent only to the AI service running on your own machine (a local address), never off your device.
6. Information we collect
We do not receive, store, or have access to your document content, and we cannot recover it. In connection with selling and supporting the Software, we collect only the following account and transaction information:
- Purchase information. When you buy or start a trial, we collect your name and email address and issue a license, and we keep a record linking your email to the license issued. Payment is processed by our payment provider (see Section 7); we do not receive or store your full payment-card details.
- Support communications. If you contact support, we receive the information you choose to include in your message.
We use this information to deliver and support your license, and as otherwise described in this statement.
Update and security notifications (optional, with your consent). When you request a free trial or purchase a license, you may choose to receive occasional emails from us about important product updates and security fixes for RedactIt. We send these only if you opt in — by checking the box on the trial form or at checkout. They are not marketing, and we never sell or share your email address for advertising. You can withdraw your consent at any time, either by using the unsubscribe link in any such email or by emailing contact_us@blkdoganalytics.com, and we will stop sending them. Withdrawing this consent does not affect the transactional emails we send to provide the service itself — for example, delivering your activation key or a purchase receipt — which you receive regardless.
7. Third-party services
- Payment processing. Purchases are handled by Stripe, which processes your payment information under its own privacy policy.
- Model / runtime distribution. Optional components are downloaded from their official sources — the larger name model from the spaCy project’s release repository, the local AI runtime from the Ollama project’s release repository, and local AI models from the Ollama model registry; obtaining them is subject to those sources’ terms.
- Email delivery. Emails (trial keys, receipts, and support replies) are sent from and received by mail servers we operate ourselves; your email address is not shared with any third-party email or marketing service.
- AI services you choose. Any third-party AI tool into which you paste redacted text is entirely outside the Software and governed by that tool’s own terms and privacy practices.
8. Data security
- The vault’s contents are encrypted at rest using an operating-system-protected per-user key.
- License keys are cryptographically signed and verified offline.
- Optional downloads are verified against known cryptographic hashes before use.
- Because processing is local, your document content is not exposed to network transmission or to storage on our systems.
- You remain responsible for the security of the device on which you install the Software and for backups of your original files.
9. Data retention and your choices
- On your device. Because your documents, vault, license, and settings live on your device, you control their retention. You may delete the vault at any time; uninstalling removes the downloaded models and settings, and offers to delete the vault (your license and vault are otherwise kept so you can reinstall and still restore documents previously redacted).
- On our systems. We keep the limited account and transaction data described in Section 6 only for as long as it is needed for the purpose it was collected, and then delete it. The periods and the reasons for them are:
| Data | Why we keep it | Retention period |
|---|---|---|
| Trial email + license key | To enforce one free trial per person and deter repeat sign-ups | 12 months after the trial key is issued, then deleted |
| Perpetual license: email, license key, and order reference | To support your license — confirm your entitlement, re-send a lost key, and provide support | For the life of the license, plus 12 months after your last contact with us or after the product is discontinued |
| Payment and invoice records | To meet tax, accounting, and legal record-keeping obligations | Up to 10 years, as required by applicable law |
- Your rights over this data. You may email contact_us@blkdoganalytics.com to ask us to access, correct, or delete the account information we hold about you (your email and transaction records). We will honor a deletion request except where we are required or permitted to keep the data — for example, to perform an active license agreement, to comply with tax or accounting law, or to establish or defend a legal claim. Where we cannot delete data for one of these reasons, we delete it once that reason no longer applies.
10. Eligibility and jurisdiction
Eligibility. RedactIt is a professional tool intended for business use by individuals who are of legal age to enter into a binding contract in their jurisdiction. It is not directed to children, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact contact_us@blkdoganalytics.com and we will delete it.
Intended market. RedactIt and this website are intended for and offered to users in the United States. We do not target or market the Software to individuals in the European Union, the European Economic Area, or the United Kingdom. If you access the Software or this website from outside the United States, you do so on your own initiative and are responsible for compliance with your local laws.
Governing law. This statement and your use of the Software are governed by the laws of the State of New York, United States, without regard to its conflict-of-laws rules.
11. Changes to this statement
We may update this statement as the Software or our practices change.
12. Contact
Black Dog Analytics, LLC — contact_us@blkdoganalytics.com.