Legal

Privacy Policy

Last updated: April 9, 2026

Airlock ("Airlock," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our desktop application, cloud services, and website (collectively, the "Service").

By using Airlock, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Our Privacy-First Architecture

Airlock is designed with a local-first architecture. This distinction is central to how we handle your data:

1.1 Local Processing (Desktop Application)

The Airlock desktop application and its engine run entirely on your device. Audio and video from your camera and microphone are analyzed locally by on-device AI models.

• Your live audio and video streams are never transmitted to Airlock servers.
• AI inference, policy evaluation, and protective actions all occur on your hardware.
• No audio recordings, video frames, transcripts, or biometric data are sent to the cloud.

1.2 Cloud Services (Control Plane)

Our cloud services handle account management, licensing, billing, and entitlement verification. These services do not process or have access to your media streams.

2. Information We Collect

2.1 Information You Provide

• Account information: email address, name, and password when you create an account.
• Billing information: payment method details processed securely through Stripe. We do not store full credit card numbers on our servers.
• Waitlist submissions: email address provided when requesting early access.
• Communications: information you provide when contacting support or providing feedback.

2.2 Information Collected Automatically

• Device information: device identifier, operating system, and application version, used for licensing and entitlement verification.
• Usage metadata: session start/stop times, feature flags enabled, and entitlement status. This does not include the content of your streams or the nature of incidents detected.
• Website analytics: standard web analytics data such as pages visited, referral source, browser type, and IP address.

2.3 Information We Do Not Collect

We want to be explicit about what we do not collect:

• Audio or video recordings from your streams
• Transcripts or speech-to-text output
• Facial recognition data or biometric identifiers
• Content of incidents detected by the engine
• OBS or streaming platform credentials
• Specific words or phrases flagged by the profanity filter

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Verify your identity and manage your account
• Process payments and manage subscriptions
• Verify device entitlements and license compliance
• Send transactional communications (account verification, billing receipts, security alerts)
• Respond to support requests and feedback
• Improve and develop new features for the Service
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

• Service providers: third-party vendors who assist us in operating the Service, such as Stripe (payment processing), hosting providers, and email delivery services. These providers are contractually obligated to protect your data.
• Legal requirements: when required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent: when you explicitly authorize us to share information with a third party.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Account information and billing records are retained as required by applicable tax and accounting regulations. You may request deletion of your account and associated data at any time by contacting us.

Data processed locally by the Airlock desktop application (audio, video, transcripts, incident logs) is stored only on your device and is never transmitted to us. You control this data entirely through the application.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS) and at rest for cloud-stored data
• Device tokens stored with restricted file permissions (mode 0600) on your local machine
• JWT-based authentication with short-lived tokens
• Stripe PCI-DSS compliance for payment processing
• Regular security reviews of our cloud infrastructure

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict processing of your information
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@airlock.stream. We will respond within 30 days.

8. International Data Transfers

Our cloud services may process data in jurisdictions outside your country of residence. When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal mechanisms.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

10. Third-Party Services

Airlock integrates with third-party services such as OBS Studio and streaming platforms. Our privacy policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you use alongside Airlock.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: