1. Who operates Hushmark
Hushmark is an independent product built and operated by Shrikar Archak. Questions about this policy can be sent through the Hushmark contact form.
2. Documents and sensitive content
Documents you open in Hushmark are processed on your device. The web app does not upload document contents to a Hushmark server. The macOS app processes documents inside the installed application. Detection uses local pattern matching, lightweight natural language processing, and a bundled ONNX model.
Document text may move between the page and a same-origin Web Worker on your device. It is not intentionally sent to Hushmark or to an external model provider.
3. Information stored on your device
Custom redaction templates and related preferences may be saved in browser storage on your device. You can remove that data by clearing site storage. Files and exported copies are saved only where you choose through your browser or the macOS save dialog.
4. Routine hosting data
When you load the web app, the hosting and security infrastructure may receive routine request information such as IP address, user agent, requested URL, date and time, and security signals. This data can be processed to deliver the site, prevent abuse, and diagnose reliability problems. Hushmark does not use document contents for analytics, advertising, or model training.
5. Models and software assets
The web app downloads the application code, WebAssembly runtime, and local model assets needed to run detection. These assets are cached by the browser under normal browser rules. Remote model loading is disabled in the application. The optional macOS installer is delivered from Hushmark-controlled Cloudflare storage.
6. Purchases and download delivery
Mac app purchases are processed by Stripe. Stripe receives the contact, payment, and billing information you provide at checkout under its own terms and privacy policy. Hushmark does not receive or store your full card number.
After a successful purchase, Hushmark stores the Stripe checkout session identifier, purchase email address, payment confirmation time, and email-delivery status in Hushmark-controlled Cloudflare storage. This record verifies access to the installer. Cloudflare Email Service uses the purchase email address to send the download link.
For aggregate conversion reporting, a confirmed purchase sends Google Analytics the product name, currency, order total, and an irreversible anonymous transaction token. Hushmark does not send Google Analytics your email address, name, billing details, card information, Stripe checkout session identifier, or document data.
7. Sharing and selling data
Hushmark does not sell or rent personal information. Hushmark does not share document contents because the product is designed not to receive them. Routine hosting and aggregate purchase-conversion data may be handled by service providers that operate the delivery, analytics, and security infrastructure, subject to their service terms and legal obligations.
8. Retention
Hushmark does not retain uploaded documents on a server. Local preferences remain on your device until you remove them. Purchase records are retained as needed to provide installer access, support the purchase, prevent abuse, and meet legal obligations. Hosting, payment, and security providers may retain their records according to their own policies.
9. Security and limitations
Hushmark uses a local-first design to reduce exposure, but no software can guarantee perfect detection or absolute security. Review every finding and every exported document before sharing it. You are responsible for deciding whether Hushmark is appropriate for your legal, regulatory, or organizational requirements.
10. Children
Hushmark is not directed to children under 13, and the operator does not knowingly collect personal information from children through the product.
11. Changes
This policy may change as the product evolves. The effective date at the top of this page will be updated when material changes are published.
Send a message through the Hushmark contact form. Do not include document contents or other sensitive information.