Privacy Policy

Core Promise

The Dimkey desktop application never uploads file content, detection results, or scan data. All document processing — detection, redaction, restoration — happens entirely on your machine. The license service exists solely to bind your purchase to a limited number of devices.

The secure sync folder feature creates a redacted copy directory and a restored directory on your own machine. Copy contents, restored files and redaction mappings all stay local and are never uploaded.

What the License Service Collects

Only when you activate, deactivate, heartbeat, or recover a license, the desktop client sends:

• Email address and license key
• Device fingerprint — a SHA-256 hash derived from machine UUID, physical MAC, CPU model, and OS install ID. The hash is irreversible; we never store or transmit the raw hardware identifiers.
• Device hostname, operating system, application version, and language variant (zh / en)
• IP address and User-Agent (automatically attached by your network)

How We Use Your Data

Solely to enforce the per-license device limit, detect abuse (such as rapid duplicate activations from rotating fingerprints), and support customer-service requests like "I lost my key — please resend it". We do not use this data for behavioral tracking, advertising, or profile building, and we do not sell it to third parties.

Data Retention

• Device records — kept while active, then retained up to 90 days after deactivation for fraud-pattern review, then purged.
• Audit logs (activate / deactivate / recover / webhook events, with IP and User-Agent) — retained for 1 year.
• Email delivery logs — managed by Resend per their retention (typically 30–90 days).

Website analytics records containing IP addresses are deleted after 180 days; aggregate daily counts without IP addresses are kept long-term.

Where Your Data Is Stored

License records are stored in an SQLite database on a server located in mainland China (Alibaba Cloud). Backups are encrypted at rest. Email templates are rendered server-side and dispatched via Resend.

Website Analytics

We run our own analytics on dimkey.com. No third-party trackers, no advertising networks, no cookies.

When you visit the site we record: your IP address, device type (desktop / mobile / tablet) and operating system, the pages you view, which website or campaign referred you, how long you stay, how far you scroll down a page, and clicks on download and purchase buttons. A random identifier is stored in your browser's local storage so repeat visits can be counted as one visitor — it contains no personal information and is not shared with anyone.

We use this to understand how many people visit, where they come from, and which regions they are in. All of it is stored on our own server in mainland China — nothing is shared with third parties, and none of it is used for advertising.

If your browser sends a Do Not Track signal, we collect nothing at all.

Raw records including IP addresses are deleted after 180 days. Only aggregate daily counts, which contain no IP addresses, are kept beyond that.

Third-Party Services

• Payment (worldwide) — card / PayPal, arranged manually by our support team over email. We do not use a third-party payment processor, so your billing details never pass through our systems.
• Payment (China) — WeChat Pay, handled manually by our support team.
• Email delivery — Resend.
• Hosting — Alibaba Cloud (mainland China).

Your Choices

You can deactivate any device at any time from the device management page; the slot is freed immediately. To delete your account entirely, email us and we will purge the license, devices, and audit entries that reference you.

Contact

Questions, requests, or complaints: support@dimkey.com