Privacy policy

What we keep,
and what we refuse to.

This is the whole policy. There is no shorter version held back somewhere else, and nothing here is written to be skipped.

version
1.0
in effect
1 October 2026
applies to
the macOS app,
the account and this site
controller
Bytek LLC,
Delaware, United States

The short version

Every line below is restated in full, with its legal basis, further down.

  • We hold six things about you: your email, your plan, a payment reference, a count of replies in the current billing period, your list of signed-in devices, and the UTC offset that sets your midnight. That is the complete list.
  • Speech is turned into text on your own machine. Your voice never leaves it.
  • When a reply is generated, the question, the last three turns and your About-you note pass through our server for the seconds it takes. None of it is written to disk. The rest of the transcript never leaves this Mac.
  • You can delete your whole account yourself, in the app. Your invoices, the payment reference that finds them and the period totals survive, because tax law says they must.
  • We have never sold personal information and we do not share it for advertising.

Never collected, by construction

Not a setting you can switch on. There is no code that does these things.

  • Audio. No code path writes sound to disk, and a test in our repository fails the release if one appears.
  • Your microphone. It is not declared in the app’s Info.plist, so macOS cannot ask for it. You can confirm that in System Settings.
  • Anything on your screen. macOS exposes system audio through the Screen Recording permission. We take the audio and read no pixels.
  • A log of what you asked. We count replies for the current period and keep no record of any individual one.
  • Your card number. It goes to Stripe and is never sent to us, so we could not leak it if we tried.

01

The controller has a name, and it belongs in the text.

Who we are, and what this covers

Converside is a desktop application for macOS. It is made and run by Bytek LLC, 1111B S Governors Ave STE 28322, Dover, DE 19904, United States — a limited liability company registered in Delaware, with its registered office at that address. Bytek LLC is the data controller for everything described below, the party you contract with, and the name on your card statement and every receipt. You can reach us at contact@converside.com; a person reads that address. Our company number is printed on every invoice.

This policy covers three things: the Converside app on your machine, the account you sign in with, and this website. Two documents sit beside it and are part of the same agreement — the terms of service, and the list of companies that help us run the service.

02

Six rows. That is the whole of what we hold about you.

What we collect, and why

The first six rows are the complete list of what our server stores about you. It is short because the product is built so that it can be. Sign-in links, codes and device credentials are kept only as one-way hashes. The seventh row is the record tax law makes us keep.

whatwhy we need itlegal basis (GDPR)
Your email addressIt is how you sign in, and how we send a receipt or tell you something changed.Contract · Art. 6(1)(b)
Your planWhether a subscription is active, and how often it renews.Contract · Art. 6(1)(b)
A payment referenceAn identifier issued by Stripe so we can match a payment to an account. Not a card number; the app shows only its last four characters.Contract · Art. 6(1)(b)
A count of replies in the current billing periodOne number. It is how the subscription you bought is provided and billed, and how we know what the service costs to run. It collapses to a single period total. There is no per-request record.Contract · Art. 6(1)(b)
Your signed-in devicesThree per account. You see the list in Setup › Account and can remove any of them.Contract · Art. 6(1)(b)
Your UTC offsetHow far your clock sits from UTC, so the daily count of generated replies resets at your midnight. Not a location.Contract · Art. 6(1)(b)
and, because the law requires it
InvoicesTax and accounting authorities require us to keep them, with the payment reference that finds them and the period totals on them. They survive deleting your account.Legal obligation · Art. 6(1)(c)

Nothing in this product rests on Art. 6(1)(a) as a legal basis, and nothing in it rests on our legitimate interests either. Start, inside the app, is a different thing entirely: it is you deciding the app may listen at all, and nothing starts until you press it.

03

A test in our repository enforces the first line of this section.

What we never collect

The first one is the one that matters: no audio is ever written to disk, on your machine or on ours. No code path does it. A test in our repository fails the release build if one is ever added, which is a weaker guarantee than a court order and a stronger one than a sentence in a policy.

We also never take your microphone — the permission is not declared in the app, so macOS has nothing to ask you for, and you can verify that yourself in System Settings. We never read what is on your screen, although macOS routes system audio through the Screen Recording permission and so has to ask for it. We keep no log of individual questions or replies, run no analytics inside the app, and have no advertising business to feed.

04

Three pieces of text go out. Never a sound file.

What happens when you ask for a reply

This is the one moment anything of yours leaves your machine, so here it is step by step.

  1. 01The sound your computer is playing is turned into text on your own machine, by Apple Speech on macOS and by a local model on Windows. Nothing is uploaded for this, and nothing is kept. A listening language this Mac cannot transcribe on the device is not offered, rather than sent to Apple’s servers.
  2. 02If the answer is already in your verified bank, it is answered from your machine and nothing is sent anywhere at all.
  3. 03Otherwise three pieces of text go to our server: the question as it was transcribed, the last three turns of the conversation before it, and the About-you note you wrote. Never audio, and never the rest of the transcript, which stays on your Mac. Our server passes them to the model provider listed on the sub-processor page, holds them in memory for the seconds the request takes, and writes none of them to any disk or database. The reply streams back to you and is not stored either.
  4. 04One number on your account goes up by one. That is the only trace the request leaves.

the whole of it, in three sentences

When a reply is generated, the question, the last three turns and your About-you note pass through our server for the seconds it takes. None of it is written to disk. The rest of the transcript never leaves this Mac.

Your About-you note is written by you and can contain whatever you put in it, including your name, your employer and your history. Please put in it only what you would be comfortable sending; you can edit or empty it at any time, and what you remove is not sent again.

05

They never agreed to read this page. We wrote it as though they had.

The other person in the conversation

Converside listens to the other side of the call, so the other person has a stake in this page even though they will probably never read it. Their voice is turned into text on your machine and never leaves it as sound. When you ask for a reply, the text of what they just asked, and of the last three turns before it, travels with the request, passes through our server for the seconds that request takes, and is written to no disk of ours. We never ask who they are, we keep no identifier for them, and no recording of them exists to subpoena.

We also decline the feature that would make this worse. There is no hidden window, nothing invisible to screen sharing, and no process camouflage, at any price, ever. What the law in your country requires you to tell the other person about assistance or transcription is your responsibility, and the app is built so that you can tell them the truth without it costing you anything.

06

Four companies, named on one page and linked from here.

Who else sees anything (sub-processors)

Four companies are involved in running Converside. Each one is named in full — with its legal entity, what it receives, where it is and what it keeps — on a single page: our sub-processor list. That page is the one that counts. We keep one copy of this disclosure rather than two, so that the two cannot drift apart; if this summary and that page ever disagree, that page is right.

What each of them does, so that you can read this section without leaving it:

what it does for uswhat it receives, and what it keeps
Generates the suggested replyThe recognised text of one question, the last three turns before it and the About-you note you wrote, for the length of that one request. Never audio, never your email address. It does not train on what it receives; what it keeps, and for how long, is stated on the sub-processor page.
Takes the paymentYour email address, your billing address, and the card details you type into its own fields. Those fields belong to it; the numbers never reach our server. It keeps your customer record and your invoices for as long as its terms and US tax law require.
Runs our server and holds the accountEvery request between the app and us, and the IP address it came from; our server runs on its network, so the question, the last three turns and your note pass through it for the seconds a reply takes. It also holds the table in section 02, and nothing else. It keeps short-lived network security logs; no question text and no reply is written to storage at that layer. When you delete your account from inside the app, its email, plan, devices and UTC offset go; the payment reference and the period totals stay, for the invoices.
Delivers your emailYour email address, and the single-use sign-in link or six-digit code being sent to it. Delivery metadata for a short period, under its own policy. We do not read it.

Why the names live on one page. You are entitled to know who processes your data and a business buyer will ask us for it in writing, so the list exists and it is complete. It lives on the sub-processor page, and the name of the company that generates a reply appears there and nowhere else — not in the app, not in our marketing, not in a release note — because which company that is costs us money, is an engineering decision, can change without notice, and would, printed across a product, be selling you somebody else’s work in place of our own.

If the list changes we email every account holder at least thirty days before the change takes effect, and move the date at the top of this page. You will not find out from a diff.

07

Mostly the United States, and the mechanism that covers it.

Where your data is held, and the transfers behind it

Our server and the companies on the sub-processor list are in the United States, with two exceptions. The company that takes the payment also processes European payments through an Irish entity. The company that carries the request has locations worldwide, so the one nearest you is the one your request reaches.

If you are in the European Economic Area, the United Kingdom or Switzerland, personal data reaching the United States is transferred under the European Commission’s Standard Contractual Clauses, with the UK International Data Transfer Addendum where that applies. We do not begin sending data to a company before that mechanism is in place for it, and the sub-processor page records the state of each one. Ask us which mechanism covers which transfer and we will tell you.

08

Tax law sets how long invoices stay, not a preference of ours.

How long we keep things

whathow long
Audio, of anyoneIt never exists. There is nothing to keep and nothing to delete.
The question, the last three turns before it, and your About-you noteHeld in memory for the seconds the request takes, then gone. Never written to a disk or a database by us.
Operational and security logs at the network layerShort-lived, under the network company’s own retention policy. No question text and no reply is written there.
Your email, plan, device list and UTC offsetUntil you delete your account from inside the app.
The count of repliesOverwritten as the period runs, then collapsed into one total for that period. No individual request survives it.
Invoices, the payment reference that finds them, and the period totals behind themFor as long as US tax law asks the company to keep them. These are the only records that survive deleting your account, and the app tells you so before you confirm.

09

Both are controls you operate, not a request you file.

Deleting a device, deleting your account

Both are controls you operate, not an email to support. Setup › Account in the app lists the Macs signed in to your account, up to three, and each other Mac carries its own Remove; it takes effect the next time that Mac asks us for anything. Delete account, in Setup › Account, removes your email, your plan, the reply count, the UTC offset and every device, at once. A subscription stops then too, not at the end of the period you paid for; what happens to the rest of that period is the refund rule in section 6 of the terms. What is kept is what tax law requires: your invoices, the payment reference that finds them (the Stripe customer and subscription references) and the period totals on them, for as long as US tax law asks the company to keep them. Nothing in them came from a call, and the app lists exactly this before you confirm.

Your verified answers are on your own machine and are not ours to delete; they stay until you remove them yourself, and they keep working without any account at all. If you would rather we did the deletion by hand, write to contact@converside.com from the address on the account.

10

One month is the law. We aim for a week.

Your rights in the EU, the UK and Switzerland

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, and to receive it in a portable form. Nothing we do rests on our legitimate interests, so there is no legitimate-interests processing here for you to object to; if that ever changes, this section will say so before it does. Write to contact@converside.com from the address on the account. The law gives us a month to answer; we aim for a week, and we do not charge for it.

To change the email address on your account, write to contact@converside.com from that address and name the new one; a person makes the change, by hand. If you no longer have the old address, write from the new one and say so, and we will ask for something only the account holder could know before anything changes.

There is no automated decision-making here with a legal or similarly significant effect on you. The app suggests a sentence you may choose to say; nothing it produces decides anything about you.

If we handle a request badly you can complain to your national supervisory authority — in the United Kingdom that is the Information Commissioner’s Office, and in the EEA it is the authority for the country you live in. You do not have to go through us first.

11

Never sold. Never shared for advertising. Not once.

Your rights in California

Since accounts opened on 1 October 2026 we have collected three categories of personal information as the CCPA defines them: identifiers (your email address), commercial information (your plan and a payment reference), and internet or network activity (a count of replies, a list of signed-in devices and a UTC offset). We collected them to provide the service you asked for, and we got them from you. We collect no sensitive personal information, no biometric data and no precise geolocation.

We have not sold personal information and we have not shared it for cross-context behavioural advertising, at any point since then. There is no opt-out link on this site because there is nothing to opt out of.

You may ask us what we have collected about you, ask us to delete it, ask us to correct it, and receive it in a portable form. You may use an authorised agent. We will not give you a worse price, a worse service or a slower answer for asking — the price on the pricing page is the price, whatever rights you exercise.

12

No banner, because nothing here would need one.

Cookies, and this website

This site runs no analytics, no advertising and no cross-site trackers, and we set no cookie that follows you between pages or between sites. The company that carries the request may set one short-lived cookie of its own, to tell a person apart from automated traffic; it builds no profile and we read nothing from it. Signing in sets none: at launch this site has no pages for an account, and the sign-in pages hand a single-use code back to the app on your Mac and keep nothing.

There is no consent banner on this site. That is not an oversight: nothing here is doing the thing a banner would have to ask you about.

13

The same age the terms ask for, not a different one.

Children

Converside is not for anyone under 18. Section 3 of the terms requires you to be 18, or the age of majority where you live if that is higher, and we do not knowingly collect anything from anyone younger. If you believe someone under that age has an account, write to contact@converside.com and we will delete it and tell you that we have.

14

Material changes arrive by email, thirty days before they take effect.

Changes, and how to reach us

When this policy changes we move the version number and the date at the top of the page. If the change is material — a new company in section 06, a new category of data in section 02, a longer retention period in section 08 — we email every account holder at least thirty days before it takes effect, rather than relying on you to re-read a page you have already read.

We do not keep an archive of superseded versions yet. When there is a second version there will be one, linked from here, so that you can see exactly what moved.

privacy and data requests

contact@converside.com

Write from the address on your account and we can answer without asking you for more identification than you have already given us.

the data controller

Bytek LLC

A limited liability company registered in Delaware, United States.

Our registered office is at 1111B S Governors Ave STE 28322, Dover, DE 19904, United States. Our company number is printed on every invoice.