Privacy Policy

The data controller is A. Jadeau, sole trader (entrepreneur individuel) registered in France under SIREN 513 366 096, trading as DokProd, publisher of Desktop Companion.

• Email: desktopwaifu@gmail.com

• Website: desktopaicompanion.com

Given the size and nature of our processing, we have not appointed a Data Protection Officer. Privacy requests are handled directly by the publisher.

When you visit or use desktopaicompanion.com, the following data may be processed:

• Technical connection data: IP address, browser type, requested page, date and time. Our host and our CDN record it automatically to deliver the site and protect it against abuse.

• Email address: if you registered for the beta, to generate and deliver your license key.

• Newsletter opt-in preference: optional. Only collected if you explicitly checked the opt-in box.

• Audience measurement data: pages viewed, approximate location (country or city), device and browser type, collected by Google Analytics 4 only if you accept analytics cookies (see section 15).

• Messages you send us: your email address and the content of your message if you contact us by email.

Providing your email address is required only to receive a beta license key. The newsletter and analytics are optional, and you can browse the site without giving us any personal data.

We do not collect payment information on our website: purchases are made on Steam or itch.io (see section 5).

Each use of your data rests on a legal basis under Article 6 of the GDPR:

• Generating and sending your beta license key: performance of a contract, or steps you asked us to take before one (Art. 6(1)(b)).

• Sending product updates and announcements: your consent, only if you opted in (Art. 6(1)(a)). You can withdraw it at any time.

• Measuring site audience with Google Analytics: your consent to analytics cookies (Art. 6(1)(a)).

• Answering your messages and support requests: our legitimate interest in helping our users (Art. 6(1)(f)).

• Operating and securing the website (connection logs, anti-abuse protection): our legitimate interest in keeping the service available and safe (Art. 6(1)(f)).

• Keeping accounting and tax records where they apply: compliance with a legal obligation (Art. 6(1)(c)).

We will never use your data for advertising or profiling, and we never sell it. No decision producing legal or similarly significant effects is made about you by automated means.

We do not sell, rent, or trade your personal data. Inside DokProd, it is accessible only to the publisher, for the purposes described above.

To run the website, we rely on service providers (processors) that act on our instructions:

• OVH (France): website hosting.

• Cloudflare: content delivery network and protection against attacks.

• Google: Google Analytics 4 (only with your consent) and the email service we use to answer you.

• YouTube (Google): embedded videos on our pages.

We may also disclose data if required by law or by a valid request from a public authority.

Desktop Companion is sold through Steam (Valve Corporation) and itch.io. These platforms handle your account, your payment and your purchase as independent controllers, under their own privacy policies.

• We never see your card or bank details.

• The platform may share limited information with us under its own policy, such as proof that you own the software (your Steam ID on Steam) or the purchase details it makes available to sellers on itch.io.

• Refunds are handled by the platform where you bought the software, under its own procedure.

Your acceptance of the Desktop Companion terms of use is recorded on your own device. We do not receive it.

The Desktop Companion application runs locally on your Windows PC. The language model, speech recognition, text-to-speech, image analysis and moderation run on your own hardware.

• Your conversations, characters, personalities and long-term memories are stored in the application's data folder on your PC. We have no access to them and do not collect them.

• Your voice is transcribed on your PC and is not sent to us.

• Application logs are written on your PC only. They reach us only if you choose to send them to us for support.

• Agent tools: from the Tools tab, your companion can create, edit and read files (.md, .txt, .html, .docx, .xlsx), list the contents of a folder, and open files or programs. These tools run on your PC, only within the folders and applications you allow, and they never control your mouse or keyboard. Nothing they touch is sent to us. If you use a cloud AI provider in the itch.io edition, what the tools read is sent to that provider (see section 8).

• We carry out no profiling and sell no data.

In the itch.io edition, the license key or purchase email you enter is checked only to confirm that you own a valid license.

Because this data stays on your device, you remain in full control of it: deleting the application's data folder, or uninstalling the application together with its data, erases it permanently. We cannot recover it for you.

Screen vision and voice input are features you turn on yourself.

• When vision mode is on, the application periodically captures your screen so your companion can react to it. Anything visible may be captured: open documents, messaging apps, credentials, work or medical information.

• With the active window tool, the application reads the title of the window you are using (for example the name of a document or web page) so your companion knows what you are doing. The title is read on your PC and is sent to no one, unless you use a cloud AI provider in the itch.io edition.

• When the microphone is active, your voice is converted to text so your companion can answer you.

• With local AI (always the case in the Steam edition), captures and recordings are processed on your PC and sent neither to us nor to any third party.

• If you use a cloud AI provider in the itch.io edition, the captures and text sent to the model go to that provider (see section 8).

Turn vision mode off before handling confidential information, and make sure anyone whose image or voice could be captured by your screen or microphone agrees to it. If you use the application in a professional context or process other people's personal data through it, you are the data controller for that processing.

Some features connect to outside services. Each is used only when you need it or turn it on, and the data goes directly from your PC to that service, under its own privacy policy. It does not pass through us.

• AI model downloads: during setup, and whenever you add a model, files are downloaded from third-party hosting services. Like any download, this reveals your IP address and technical connection data to the host.

• Web search and web pages: when your companion searches the web or reads a page for you, the search query is sent to the search service, and the page is requested from its website, which sees your IP address as with any visit.

• X and Reddit trends: when you ask for trends, the application retrieves publicly available trend information from public websites. No X or Reddit account is used and nothing is posted.

• Weather: when you ask for a forecast, the place you ask about is sent to a weather data service.

• Twitch co-host: if you connect your Twitch account, your companion connects to your channel's chat, and the messages it posts are sent to Twitch, exactly like a message you would type yourself. Your connection token is stored on your PC.

• Cloud AI providers (itch.io edition only): if you enter your own API key for a provider such as Google Gemini, OpenRouter, ElevenLabs or Microsoft Azure, your messages, the context sent with them (including memories, screen captures when vision is on, and the results of agent tools, such as the text of a web page, the content of a file, a folder listing or the active window title) or the text to be spoken are sent to that provider. You use it under your own account and contract with that provider, which acts as an independent controller and may have its own rules on retention and model training. Your API keys are stored on your PC and are never sent to us.

The Steam edition uses no external AI service and accepts no API keys: every model runs on your PC.

People sometimes tell a companion about their health, relationships, beliefs or other personal matters. With local AI, this information never leaves your PC and never reaches us.

If you use a cloud AI provider (itch.io edition), avoid sharing sensitive information about yourself or others: it is sent to that provider.

We do not use your conversations, voice, screen captures or any other content to train AI models, and we have no access to them.

Our website is hosted in France. Some of our providers (Google, Cloudflare) may process data outside the European Economic Area, particularly in the United States.

These transfers are covered by the safeguards provided by the GDPR: certification under the EU-U.S. Data Privacy Framework where it applies, or the European Commission's Standard Contractual Clauses.

• Beta email address and license key: for as long as the beta license is valid, then deleted, unless you also subscribed to the newsletter.

• Newsletter subscription: until you unsubscribe, and at most 3 years after your last interaction with our emails.

• Emails and support requests: for as long as needed to handle your request, and at most 3 years after our last exchange.

• Connection logs: at most 12 months.

• Google Analytics data: 14 months, then deleted. Analytics cookies expire after at most 13 months.

• Accounting records, where they apply: 10 years, as required by French law.

• Data stored by the application on your PC: until you delete it.

We collect as little data as possible. The website is served over encrypted HTTPS connections and protected by Cloudflare, and access to the data we hold is restricted to the publisher.

Data stored by the application on your PC is protected by the security of your Windows account and device. We recommend locking your session, keeping Windows up to date and enabling disk encryption. No system is perfectly secure, and we cannot guarantee absolute security.

Desktop Companion is intended for people aged 18 or over and is not designed for minors. We do not knowingly collect data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.

Under the GDPR and the French Data Protection Act, you have the right to:

• Access the personal data we hold about you and receive a copy.

• Rectify data that is inaccurate or incomplete.

• Request deletion of your data, including your email address and license key, at any time.

• Restrict or object to processing based on our legitimate interest.

• Data portability: receive the data you provided in a structured, machine-readable format.

• Withdraw your consent at any time, without affecting processing carried out before. You can unsubscribe from newsletters via the link in any email we send.

• Give instructions on what should happen to your data after your death.

To exercise any of these rights, email us at desktopwaifu@gmail.com. We will reply within one month. We may ask you to confirm your identity, for example by writing from the email address concerned. Please do not send personal requests in public Discord channels.

If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the supervisory authority of the EU country where you live.

Data stored by the application stays on your PC: you can view, edit or delete it directly from the application or its data folder, without asking us.

Our website uses the following cookies and similar technologies:

• Strictly necessary cookies: session and security cookies (laravel_session, XSRF-TOKEN). They keep the site working and protect forms, and they do not require consent. locale remembers the language of the last page you viewed, so desktopaicompanion.com opens in it next time. Kept for one year.

• Analytics cookies: Google Analytics 4 (_ga, _ga_*) measures how the site is used. They are placed only if you accept them and expire after at most 13 months.

• Embedded videos: YouTube videos on our pages may set their own cookies and receive your IP address when they load or play, under Google's privacy policy.

• Web fonts: fonts are served by our own website, like the rest of its files, and set no cookies.

We do not use advertising cookies. You can change your choice at any time through the cookie settings on the site, and you can also block or delete cookies in your browser settings.

We may update this privacy policy, for example when we add a feature or a service provider. The "Last updated" date at the top of this page will then be revised. We will notify registered users of any material change by email, and changes that concern the application will also be presented in the application.

For any privacy-related questions or requests:

• Email: desktopwaifu@gmail.com

• Discord (general questions): discord.gg/EhhTySREkr

• Publisher: DokProd (A. Jadeau, entrepreneur individuel, France)