Privacy Policy

This policy covers three things: the ClipBolt Mac app, the optional ClipBolt account that syncs your history and runs AI features, and this website. Each section says which one it describes.

ClipBolt does not show ads, does not include advertising SDKs, and does not track you across other companies' apps or websites.

While ClipBolt is running, it reads every new item you copy and saves it to your history automatically. You do not need to save each item. A history item can include text, images, files, other clipboard formats, and the name and icon of the app you copied from.

History is stored in a database on your Mac. The Mac App Store version keeps it inside the app's own container. If you never sign in, your history stays on your Mac and is not sent to ClipBolt or to any AI provider.

ClipBolt skips items that apps mark as concealed, transient, or auto-generated. Many password managers mark copied passwords this way. ClipBolt does not detect passwords, API keys, or other secrets in ordinary copied text. Those are saved like any other item.

An account is optional. You can sign in with a link sent to your email address. The version downloaded directly from ClipBolt also offers Google sign-in. The Mac App Store version does not. We store your email address, any name and profile image your sign-in provider shares, and the time your account was created.

When you are signed in, syncing runs automatically for that account. Your history items, their tags and descriptions, and the images and files they contain are sent to ClipBolt's servers. Item details are stored in our database. Images and files are stored in Google Cloud Storage. Signing out stops syncing on that device.

For each sign-in session, we store the session's IP address and your browser or device type. We use them to keep your account secure and to limit repeated sign-in attempts.

AI features do not run on your Mac. They run on servers operated by OpenAI and Google Cloud Vision. You need an account to use them, and they stay off until you allow them for that account. ClipBolt records which version of the AI notice you accepted and when. If the notice changes, ClipBolt asks you again. You can turn AI features off at any time in Settings. Our servers then refuse every AI request for your account.

After you allow AI features, the following data is sent:

• Automatic tagging (on by default): after each new capture, OpenAI receives the item's text and links to its image previews to suggest tags. If ClipBolt can't tell what kind of item it is, OpenAI also receives up to 4,000 characters of the text to classify it. You can turn this off with "Automatically tag and classify captures with AI" in Settings.
• Describe an image: OpenAI receives links to the image previews and any text in the item.
• Translate: OpenAI receives the text and the language you choose.
• Rephrase: OpenAI receives the text.
• Chat: OpenAI receives your question, plus the text and image preview links from the history items you select or that match your question.
• Read text in an image (OCR): Google Cloud Vision receives the image itself.

Image preview links are private and expire five minutes after they are created. The provider uses the link to fetch the image. ClipBolt saves the results with your item: tags, item types, descriptions, extracted text, and translations.

According to OpenAI's API data controls, data sent to its API is not used to train OpenAI's models unless the customer opts in, and abuse monitoring logs are kept for up to 30 days. Responses created through the API are also kept for 30 days by default. ClipBolt does not turn this storage off. According to Google's Cloud Vision data usage FAQ, Google processes images in memory without saving them to disk, logs some request details for a short time, and does not use your images to train its models.

Do not use AI features on content you are not allowed to share with these providers.

App analytics is off until you turn on "Share usage analytics linked to your account" in Settings. While it is on, ClipBolt sends PostHog, on its United States servers, the events the app records about how you use its features. When you are signed in, those events include your ClipBolt account ID. Automatic click capture and session recording are turned off. Turning analytics off stops the app from sending events.

Settings also has a switch for crash and error reports. This version of the app has no error-reporting service connected, so no crash or error reports are sent.

The only email the ClipBolt service sends is the sign-in link. It goes through our email provider, Resend, which receives your email address and the message, including the link. The link expires after 5 minutes.

This section covers this website only. The site loads Plausible, PostHog, and Microsoft Clarity when a page loads. It does not ask for analytics consent first. Clarity receives a generated ID. PostHog receives some download, banner, and button interactions, and the email address you enter in the early-access form. We therefore do not describe the website's analytics as anonymous.

Browser local storage remembers whether you closed the early-access banner and whether you signed up. After a successful early-access signup, the site also saves your email address and the signup time in your browser. Clearing your browser data does not delete our copies.

The site does not have a cookie-preference panel. Your browser settings and content blockers may stop some of these tools from loading.

The contact, support, affiliate, job-application, newsletter, and early-access forms send what you type and the time you submitted it to Google Firebase Cloud Firestore. The early-access form also sends your email address to PostHog, even if saving to Firestore fails.

We use these submissions to reply to you and to send the updates you asked for. Anything you include in a message becomes part of the submission, so do not include passwords or other secrets.

We share data only with the providers named in this policy, and only for the purposes described here:

• OpenAI: AI tagging, classification, descriptions, translation, rephrasing, and chat.
• Google Cloud Vision: reading text in images.
• Google Cloud Storage: storing synced images and files.
• Google: sign-in, if you choose Google sign-in in the directly downloaded app.
• Resend: delivering sign-in emails.
• PostHog: app analytics after you turn it on, and website analytics.
• Plausible and Microsoft Clarity: website analytics.
• Google Firebase Cloud Firestore: website form submissions.

Each provider handles data under its own terms. We do not sell your clipboard history, and we do not share it with data brokers.

• History on your Mac stays until you delete the items or remove the app and its data.
• Synced items, files, and AI results stay on our servers until you delete them or delete your account. There is no automatic expiry.
• When you delete a synced item, we keep a small deletion record without its content so your other devices remove it too. Deleting your account removes these records.
• Your AI permission record stays until you turn AI features off or delete your account.
• Sign-in links expire after 5 minutes. Signed-in sessions expire after 7 days without use. Records used to limit repeated requests are deleted automatically after they expire.
• Copies held by OpenAI, Google, PostHog, and Resend follow those providers' retention terms, described above where they have published them.

• Turn AI features off, turn off automatic tagging, or turn off app analytics in Settings.
• Delete individual history items in the app. If you are signed in, the deletion syncs to your account.
• Delete your account in the app. This deletes your account and its sessions, synced items, stored images and files, tags, AI results, settings, and AI permission record from our servers. It does not delete copies that providers already hold under their own retention terms.
• Email us for a copy of your account data. We can export your account details, items, tags, AI results, settings, and AI permission record.

Depending on applicable law, you may have the right to:

• Access or get a copy of your personal data.
• Request deletion of your personal data.
• Object to or opt out of certain processing.
• Receive information about how your personal data is used.

Contact privacy@tryclipbolt.com for access, export, deletion, or other privacy requests.

We will update this policy when our practices change. Changes will appear on this page with a new Last updated date. If we change what AI providers receive, the app will ask for your permission again before sending anything.