Privacy Policy

1. Who is responsible for your data?

Escale is operated by Alexandre Grisey, a French sole proprietorship registered under SIRET number 83978643100024, at 7 Allée de Chartres, 33000 Bordeaux, France (“Escale”, “we”, “us”). Alexandre Grisey is the data controller for the processing described in this policy.

Privacy requests may be sent to pro@alexandre-grisey.fr.

2. Scope

This policy covers useescale.com, its support form, and the official Escale Community and Escale Pro macOS applications. It does not replace the privacy policies of Apple, Google, OpenAI, Polar, GitHub, or other services you independently choose to use.

3. The local-first part

Escale does not require an Escale account and does not operate a cloud database containing your store workspace. Apple, Google, and optional OpenAI credentials are stored in macOS Keychain. Store data and cached workspace information remain on your Mac, except when Escale sends a request you initiate directly to the relevant service.

We do not receive your store credentials, OpenAI API key, listings, reviews, screenshots, prices, uploaded bundles, or unpublished store content through an Escale server.

4. Data processed through the website

Website analytics

We use DataFast analytics, enabled when the website loads, to understand page visits and a small set of interactions such as download, checkout, roadmap, and FAQ clicks. DataFast uses cookies and browser storage to maintain visitor and session identifiers and its event queue. The integration may process the page URL, referrer, campaign parameters, browser and device information, coarse location inferred from an IP address, and the interaction name.

We do not use DataFast’s identify or payment-identity features, and we do not send your support email or message to DataFast. You can block or clear analytics cookies and site storage through your browser controls.

Support and direct contact

If you use the support form or email us, we process your email address, message, attachments or other information you voluntarily provide, and our correspondence. The form is routed through a Google Cloud/Firebase endpoint to deliver the request to us. Please never include store credentials, licence keys, private keys, or passwords.

Hosting and security logs

Our Hostinger-hosted server and delivery infrastructure may process standard technical logs, including IP address, request time, requested URL, response status, and browser user agent. These logs are used to deliver the site, prevent abuse, diagnose faults, and protect the service.

5. Data processed when you use Escale

Store and AI connections

Escale sends requests from your Mac directly to App Store Connect, Google Play, and—only when you use an AI-assisted feature—OpenAI. Those providers receive the information needed to execute the request under your account and their own terms. Escale does not proxy those requests.

Pro purchase and licence activation

Polar is the merchant of record for new Escale Pro purchases. Polar processes checkout, customer, billing, tax, subscription, refund, and licence-benefit information under its own buyer terms and privacy policy. When you activate or validate Pro, Escale sends the licence key and the minimum activation information required by Polar’s public licence API. A local licence record is stored in macOS Keychain.

Optional app analytics

The official Pro distribution can send coarse product and reliability events to PostHog’s EU service. You can turn this off during onboarding or at any time in Escale Settings. Events are restricted to feature names, coarse outcome and count categories, plan and distribution, and app or system version.

App analytics do not include store content, account or app identifiers, credentials, licence keys, reviews, screenshots, prices, file paths, uploaded files, or raw error messages. Automatic screen capture, session replay, person profiles, precise geolocation, automatic error capture, and feature-flag tracking are disabled. The Community build uses no product-analytics service.

Updates and downloads

The official Pro distribution checks our signed update feed. Update downloads are hosted as public GitHub release assets. Those requests disclose ordinary network information such as your IP address and user agent to the relevant host, subject to its privacy policy.

6. Why we process data

7. Service providers and international transfers

Depending on how you use Escale, data may be processed by:

• Hostinger International Ltd. (Cyprus) for website hosting;
• DataFast for website analytics;
• Google Cloud/Firebase for support-form delivery;
• PostHog EU for optional Pro product analytics;
• Polar Software, Inc. as merchant of record and licence provider;
• GitHub, Inc. for public source code and release downloads; and
• Apple, Google, or OpenAI when you direct Escale to use their APIs.

Some providers or their subprocessors are outside the European Economic Area. Where we act as controller and a provider acts on our behalf, we rely on the provider’s contractual data-protection commitments and legally recognised transfer safeguards where required. Providers that act independently process data under their own privacy terms.

8. Retention

• Support correspondence is generally kept for up to 24 months after the last exchange, unless needed for a continuing issue or legal claim.
• Technical security logs are normally kept for no more than 30 days, unless a longer period is required to investigate abuse or an incident.
• Pseudonymous website analytics are reviewed and deleted or aggregated when no longer useful, with a target maximum of 13 months for event-level data.
• Optional app-analytics events are kept only while useful for product and reliability analysis and are periodically reviewed, with a target maximum of 24 months.
• Local app data remains on your Mac until you delete or reset it. Licence and transaction records may be retained by Polar and by us for the subscription term and any legally required accounting, tax, fraud-prevention, or claims period.

Aggregated statistics that no longer identify or single out a person may be kept longer.

9. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time where consent applies, without affecting earlier processing.

Send requests to pro@alexandre-grisey.fr. We may ask for information reasonably necessary to verify your identity and normally respond within one month. You may also lodge a complaint with the French CNIL or your local data-protection authority.

10. Security and your choices

We apply proportionate technical and organisational safeguards, including HTTPS, signed updates, macOS Keychain storage, limited analytics fields, and access controls. No system is perfectly secure, so keep your Mac, Escale, and connected accounts protected and report suspected issues to us promptly.

You can block or clear website analytics cookies through your browser, disable app analytics in Escale Settings, remove individual credentials in Settings, or use “Reset all data” to delete Escale’s local workspace and Keychain items from the Mac.

11. Children

Escale is a professional developer tool and is not directed to children under 16. We do not knowingly collect children’s personal data.

12. Changes and contact

We may update this policy when the product, providers, or legal requirements change. Material changes will be highlighted on the website or in the app where appropriate, and the date above will be updated.