Data & Privacy Practices

A plain-English look at how Occlira actually handles your data.

1. Everything happens on your device

Occlira runs its detection and anonymization locally. The AI model that finds personal data runs on your machine; audio is transcribed by an on-device speech model. There is no cloud AI and no server that your files pass through. The originals — and the personal data inside them — never leave your computer. Only the placeholders (for example <PERSON_1>) travel if you choose to share the anonymized result.

2. What Occlira stores on your device — and how to delete it

Everything below is written to your own computer, stays under your control, and is never visible to us. We list it in full so nothing is a surprise.

• Restore mappings — these contain your original personal data. When you anonymize a file, the app saves a mapping of each placeholder to the real value it replaced, so you can restore the original later. These files live in a protected .occlira folder in your user profile, readable only by your account. They hold the actual personal data and are not encrypted, so treat them like the originals. By default they are kept for 7 days and then deleted automatically (you can change this in Settings). They are not removed when you uninstall the app — to delete them yourself, remove the .occlira folder from your user profile.
• License data. Your license key, activation status and a device identifier are stored locally so the app can validate your license and keep working offline between checks.
• Settings. Your preferences are stored locally.
• Local audit log (optional, no personal data). For your own record-keeping and compliance, the app can keep a tamper-evident log of what was processed. It records activity without storing the personal data itself, stays on your device, and is kept for up to a year.
• Diagnostic logs (no personal data). Local technical logs, built to contain no documents and no personal data. They stay on your device. An error report leaves it only when you send it, or automatically if you have turned that on.
• Detection & speech models. The downloaded AI models are cached locally so the app can run offline.

3. The network calls the app makes

Occlira isn’t completely silent on the network, but the only things it ever sends are the technical items below — never your documents or the personal data inside them.

• License activation & validation. When you activate a license, and then to re-check it at launch and every few hours while the app runs, the app contacts our licensing provider, Polar, and sends your license key and a device identifier (a value generated on your computer that binds the license to one device and does not reveal your files or your identity). Offline, the app keeps working for a 14-day grace period.
• Buying from inside the app. The checkout link tells Polar your app’s device identifier, how far into the trial you are (how long you have had it and how far you have got), the offer you saw and where you clicked. Details are in the Privacy Policy.
• Software updates. The app checks our public releases page on GitHub for a newer version and downloads the installer if one exists; it is installed only when you choose to. GitHub receives standard request information such as your IP address.
• One-time model download. On first use, the app downloads its detection model (and, for audio, a speech model) from Hugging Face; helper components come from Occlira’s releases on GitHub through our download counter; the speaker-separation model and some speech models come from GitHub directly; the OCR models and the face-detection models download the first time you use OCR or face detection. These are ordinary file downloads; the providers receive standard request information such as your IP address. Once the models are present, detection runs offline and the app stops downloading them; it still checks GitHub for updates, as described above.
• Download counter. Component downloads pass through dl.occlira.com, which counts them (daily totals only, no IP addresses or device identifiers) and forwards to GitHub. Update checks go to GitHub directly and are not counted.
• Feedback, error reports and surveys — only what you send. They go to our service at inbox.occlira.com. Error reports hold technical information only, never your documents or file names; automatic sending is off by default. Feedback and reports arrive in our support mailbox; survey answers are kept for up to 400 days with the app version, language, platform and how far into the trial you are. No device identifier is sent with any of them.

4. Local-only helper servers

To power the optional browser extension and Word add-in, Occlira runs small servers that listen only on your own computer (local loopback). They are not reachable from the internet, and nothing leaves your machine through them — data goes from the extension or add-in straight to the local engine and back.

5. No telemetry; no advertising

The app has no analytics or tracking (no screen or click counters), no ads and no marketing trackers. This website is a static page hosted on Cloudflare; it uses no advertising or cross-site tracking cookies. For basic, aggregated visitor statistics it uses Plausible Analytics, a privacy-focused tool that sets no cookies and collects no personal data — see the Privacy Policy for details.

6. What this means for your compliance

Because your files never reach us, you remain the controller of the personal data in them, and we do not act as your processor — so no data-processing agreement with us is required for that content. Occlira helps you find and remove personal data, but automated detection is not perfect: always review the findings and verify the output before you share or rely on it. See the Terms & License for the full picture.

7. Questions

Anything unclear? Email admin@occlira.com. For the formal legal documents, see our Privacy Policy and Terms & License.