Privacy Policy

1. Scope and data we process

This policy applies to the Clipboard+ extension, apps, website, cloud service, and developer API operated by Aperca LLC.

Local Mode: Clipboard content stays in browser or device storage and is not sent to Clipboard+ servers.

Cloud Sync and accounts: When you opt in, we process your email address, password hash, clipboard items, snippets, settings, and basic service/security logs such as request time, path, status, IP-derived network information, and request identifier.

Developer API: We store API-key metadata, permissions, prefix, cryptographic hash, creation/expiration time, and last-used time. Raw keys are displayed once and are not stored.

2. How We Use Data

We use data to provide sync and API features, authenticate users, secure and troubleshoot the service, enforce limits, communicate essential account information, and comply with law. We do not sell personal information or use clipboard content for advertising or model training.

3. Data Storage

Cloud data is stored in a hosted PostgreSQL database. Connections use transport encryption, passwords are hashed, and personal API keys are stored as one-way hashes. No internet service can guarantee absolute security, so avoid saving highly sensitive secrets in clipboard history.

4. Data Retention

Synced content is retained according to your retention settings and while your account is active. Revoked-key metadata and limited security logs may be retained for fraud prevention and operational integrity. Account deletion removes active account data from production systems, subject to short-lived backups and legal obligations.

5. Third-Party Services

• Hosting and database providers — infrastructure and storage.
• Resend — transactional email such as password resets.
• Google Analytics and Microsoft Clarity — website usage analytics only when configured; these providers may use cookies or similar technologies. They do not receive synced clipboard content from us.

6. Your Rights

You can access and manage synced data, revoke API keys, disable Cloud Sync, and delete your account through the product. Depending on where you live, you may also have rights to correction, portability, restriction, objection, or appeal. Contact us to exercise a right. We do not knowingly collect data from children under 13.

7. International processing and legal disclosures

Our providers may process data in the United States and other countries. We disclose information only to service providers working for us, when you direct us, during a business transaction, or when reasonably required by law or to protect rights and safety.

8. Changes

We may update this policy as the service evolves. We will update the date above and provide additional notice when required.

9. Contact

For privacy requests or questions, contact Aperca LLC through apercallc.com.