1. Who handles your information
Aman operates ShadowCursor from Sector 17A, Iffco Chowk, Gurugram, Haryana 122001, India. Email support and grievance contact: Support team, support@shadowcursor.in.
This policy covers the ShadowCursor website, current Windows app, and support. It also describes records that would be needed if the planned account and paid-credit service is enabled. Those features do not currently create accounts or take payments.
Current availability: the Windows preview is available with your own OpenAI API key. There is no ShadowCursor purchase charge for this download; OpenAI API charges are separate. ShadowCursor sign-in, prepaid credits, and Razorpay checkout are not active. macOS is coming soon.
2. Current Windows app: information and data flow
The app processes the screen capture or image you choose, the question you submit, the selected model and workflow settings, and the answer returned. It does not continuously record your screen or microphone. Optional guide gestures and shortcuts act only when enabled and can trigger a capture or send action as described in the app’s Help.
When you choose Ask GPT or deliberately use an enabled send gesture, the app sends your selected images and question directly to OpenAI’s API over HTTPS. Your API key authenticates that request. The current release does not route requests through a ShadowCursor account server or payment ledger. OpenAI receives request content and technical information needed to provide the API, including your network address.
Review captures first. Do not send credentials, payment authentication details, or another person’s confidential information without permission. Only use the app in environments where capture and AI assistance are allowed.
3. Local storage and retention
| Information | Current handling |
|---|---|
| Captured images, submitted questions, generated answers and code | Kept in app memory, without a written question-history file. The running app clears working items after about one hour, or sooner when you choose Clear local. Device suspension can delay scheduled clearing. |
| API key | Held in memory during use. If you choose Remember securely and Save, the key is encrypted using Windows account protection and saved locally until you remove or replace it. It is not subject to the one-hour content timer. |
| App preferences | Model, workflow, and related preferences are stored locally for later launches until changed or removed. |
| Imported files, copied or saved output | Original images and copies outside the app remain under your control. The app does not delete them or clear the system clipboard. |
Saved settings and the encrypted key are in your Windows user’s local ShadowCursor application-data folder. Uncheck Remember securely and choose Save to remove the saved key. You may revoke the key through OpenAI. Local clearing releases app content; it is not a guarantee of secure erasure from RAM, operating-system caches, backups, or external services.
4. OpenAI processing and retention
OpenAI is the current AI provider. Requests use the Responses API with store: false. This setting does not guarantee zero provider retention or require OpenAI to delete content within one hour. OpenAI’s data controls describe separate abuse-monitoring retention, commonly up to 30 days by default, with exceptions and account-specific controls. Some features can have additional retention. Your OpenAI account settings and applicable OpenAI terms govern processing there.
Consult OpenAI’s API data controls before sending sensitive information. Data may be processed outside India depending on the provider and your account configuration. Deleting content in ShadowCursor does not recall a submitted request or delete provider-held information.
5. Website visits and illustrative demos
The website host necessarily processes connection and request information such as IP address, browser information, request times, and errors to deliver and protect the site. Infrastructure logging and retention are governed by the host’s service arrangements and applicable law; the app’s one-hour timer does not apply to website logs. We have not added advertising trackers or a customer analytics tool to this site.
The interactive examples and video use predefined, fictional sample content. They do not read your desktop, use an API key, or submit questions to an AI provider. The video and caption files are served as website assets. Clicking Download retrieves the selected public app file.
The contact form prepares an email in your chosen email app. It does not submit a support ticket by itself. You decide whether to send the draft; your email provider then processes the message.
6. Support and future account/payment records
If you email support, we receive the email address, message, attachments, and references you choose to send. We use these to respond, investigate the issue, resolve disputes, and comply with law. Retention lasts only as needed for those purposes; request deletion at support@shadowcursor.in, subject to records we must keep. Do not send your API key, full card details, CVV, OTP, PIN, or banking password.
If account and credit functionality is enabled, we will need basic identity information, an account identifier, credit balance and usage entries, payment references, amount/currency/status, and records for accounting, fraud prevention, and disputes. These essential records will be separate from working screen content and retained while needed for the account or applicable recordkeeping obligations. Closing an account does not require erasing records legally required for tax or dispute resolution.
Google sign-in and Razorpay checkout are not currently connected. Once enabled, Google will provide basic sign-in identity data, and Razorpay will process payment details. We will not receive your Google password or store full payment credentials. Read Google’s privacy policy and Razorpay’s privacy policy when using those services. Necessary session cookies or browser storage may be used when accounts launch; these are not active account features today.
7. Sharing, security, and your choices
Information is shared only with providers needed to deliver the feature you use, to address your support request, to comply with legal obligations, or to protect rights and security. Any business transfer involving personal information would require appropriate safeguards and notice. We do not sell your screen content.
Choose what to capture, when to submit it, whether to remember your key, and when to clear local content. Keep your computer and provider account secure. Encryption and HTTPS reduce risks but cannot eliminate them.
For access, correction, deletion, consent withdrawal where applicable, or a privacy complaint, email support@shadowcursor.in. Support contact: Support team, for Aman (ShadowCursor). We may need proportionate identity verification. For information held independently by your API, email, or payment provider, contact that provider as well. We will explain any lawful reason preventing full deletion.
8. Children and policy changes
The Service is intended for adults aged 18 and over. Do not submit children’s personal information without the necessary authority and lawful basis. Contact support if you believe such information has been submitted improperly.
We will update this policy when the app, providers, or processing change, and give appropriate notice of material changes. This version describes the current personal-API-key Windows release and the separate, inactive account/payment plans.