Effective 28 August 2026

Privacy, without fine print.

Your dossier data and files stay in your browser. The app does not upload, sync, inspect, or analyze them.

What is stored

Job names, client names, stage details, links, and imported PDF/CSV files are encrypted with AES-GCM and stored in IndexedDB on your device. The encryption key is derived from your passphrase and is held only in memory while the vault is open. We cannot recover your passphrase or data.

The browser stores an encryption salt, PWA cache data, and—if you buy or restore Trail Pass—a license token and a cached verification result. Clearing site data removes the vault and license from this browser.

Billing and verification

Purchases are handled on Sociobot's hosted checkout, with Dodo as merchant of record. This app sends only the license token to the Sociobot verification endpoint, at most once per day when online. Dossier content and files are never included. Their checkout privacy terms apply to payment information.

Exports and links

Backups and client packets are intentionally unencrypted downloads. They may contain personal or payment information, and anyone with the file can read it. External evidence links open their destination; that site's privacy terms then apply.

Analytics and retention

The app includes no advertising, behavioral analytics, trackers, third-party scripts, or remote fonts. Your browser retains local data until you delete a dossier or clear the site's storage. You are responsible for legal retention requirements and for safeguarding exports.

Your controls

• Lock the vault to remove the key from memory.
• Export a complete portable backup at any time.
• Delete a dossier and its local encrypted attachments.
• Remove the local Trail Pass token from the unlock panel.

Privacy questions: privacy@sociobot.in.