Draft. Review this with a lawyer and update it before launch, especially once payments and AI features go live.

Privacy Policy

Last updated: October 16, 2026

What we collect

• Account details: your email address and a securely hashed version of your password. We never see or store your password itself.
• Your remotes: the buttons you create, including their labels, styles and the links, app addresses, phone numbers or email addresses you assign to them.
• Purchases: which items you bought, when, and a reference number from the payment provider. Card and PayPal details are handled by Stripe and PayPal and never reach our servers.
• Account activity: a record of actions on your account, such as signing up, signing in, changing your password, editing your remote and purchases, with the IP address and device type used. We keep it for 180 days to support you and protect your account.
• Security records: the IP address used for sign-in attempts and password-reset requests, kept for up to one day to stop abuse.

How we use it

To run your account, save and sync your remotes across your devices, unlock what you buy, send password-reset emails, and keep the service secure. We don't sell your information or use it for advertising.

Cookies

We use a session cookie to keep you signed in, and an optional "keep me signed in" cookie that lasts up to 60 days. Your light or dark mode choice is stored on your device.

Your choices

You can change your password or delete your account at any time from the Account page. Deleting your account removes your remotes, purchase history and AI credits from our database. A record that the account was deleted, with its email address, is kept for up to 180 days.

Contact

Questions about privacy: privacy@penzap.com