Privacy Policy

Last updated: September 13, 2026 · Bedrock is a product of Voltify Agency · Privacy: privacy@voltifyagency.com · Also see Voltify Privacy

Local-first, plainly: your documents, tasks, chats, files, and AI conversations live on your devices, encrypted with your passcode (AES-256-GCM). We never see them. No account, no telemetry, no tracking in the Free tier. We only process the minimum for payments, licensing, update checks, and support you request.

1. What stays on your device

Workspace content (docs, tasks, agents, projects, databases, calendar, chat, files, people, analytics, diagrams, diary, AI chats), passcodes/keys (600,000-iteration PBKDF2; the key never touches disk in the clear), and local settings/backups. Uninstall keeps your data files unless you delete them; portable mode keeps everything in the data/ folder next to the app.

2. What we process (and why)

Payments (Stripe): plan, amounts, invoices, license issuance. Card data goes to Stripe directly — we never see full card numbers.
Licensing: key hash (SHA-256 at rest), tier, seat count, activation/validation events — to enforce one-seat-per-user and prevent key sharing.
Update checks: app version, OS/arch, and timestamp when checking voltifyagency.com/bedrock/updates.json — to serve verified updates. No workspace content transmitted.
Optional cloud sync (paid, opt-in per data type): only what you enable, end-to-end encrypted under your key; storage quotas (Free = local only; Pro = 50 GB; Lifetime/Team = 500 GB).
Support you request: messages, logs, or files you send us.
AI you configure: runs on your keys/local models (OpenAI/Anthropic/Ollama); your provider relationship is between you and them.

3. What we never do

No sale of personal information. No cross-context behavioral advertising. No telemetry, no ads SDKs, no mining of workspace content for training. Marketing email only with consent.

4. Retention

Billing records 7 years (tax). Licensing records for the life of the license + 30 days. Support threads 24 months. Update-check logs 90 days rolling. Sync content per your retention until you delete or cancel (then purged within 30 days except legal holds).

5. Security

TLS 1.2+ for sync/updates/licensing; AES-256-GCM at rest for sealed content; SHA-256-hashed keys; HTTPS-only updates with hash verification before install. Report issues to security@voltifyagency.com.

6. Your rights

Access, correct, delete, port, object, and withdraw consent per GDPR/CCPA/Mexico LFPDPPP ARCO — email privacy@voltifyagency.com ("Bedrock privacy request"). Local data: export JSON/Markdown in-app or delete the data folder. Cloud sync: disable sync + request deletion and we purge within 30 days.

7. Children, transfers, changes

Not directed to under-18s. Sync/licensing may transit US/EU infrastructure with SCCs/IDTA where required. Material changes are noted here with a new date and, where practical, in-app. Related: Terms · Refunds · Voltify Terms · Voltify Privacy · Legal Hub.