Privacy

In short

Recsavo records your screen on your computer. Video, audio and camera frames are processed in your browser and never sent to us. The current version has no accounts, no analytics and no server of ours; this website has no cookies or counters. If you email support, the message passes through a mail forwarding service (see “Emails to support”).

The network requests the extension makes on its own are opening recsavo.com/uninstall when you remove it and, in Chromium browsers, downloading the speech recognition model when you click “Create subtitles” (see “What goes over the network”).

Who is responsible

Recsavo is in beta. The vendor's details (legal name, registration data, address) will be published on this page before Recsavo collects any personal data, that is, before licences and payments are launched.

Questions about Recsavo and about personal data: support@recsavo.com.

Today neither the extension nor this website sends us any personal data. The only server-side processing is the website host's technical request logs (see “The recsavo.com website”; we do not export or keep them) and the emails you choose to send to our address (see “Emails to support”).

What stays on your device

Everything below is kept only in your browser and is not accessible to us:

• recordings, their covers and edit drafts — in browser storage (OPFS, IndexedDB); downloaded MP4s — in your Downloads folder;
• the journal of an unfinished recording, used to recover it after a browser crash;
• when you record a tab, the time and place of your mouse clicks on the recorded page, so the editor can zoom in on them; kept with the recording and deleted with it; not kept if you turn off “Remember clicks for auto-zoom” in Settings, and not included in “Export settings and recordings list” (only their number is);
• subtitles, if you create them: a file with the recognized text of the recording and the timing of every word — all recognized words, including those cut from the video; kept next to the recording and deleted with it (“Recognize again” replaces it); not included in the settings export;
• if speech recognition is interrupted, the part already recognized, next to the recording, so recognition can continue later; it is deleted when the subtitles are finished, when you choose “Start over”, or with the recording;
• the speech recognition model (about 76 MB), if you downloaded it — in browser storage; removed with “Delete the model” in the editor's Subtitles tab, with “Delete all recordings and data” in Settings, or together with the extension;
• the library: recording titles (taken from the tab title, with emails, phone numbers and card numbers replaced by “•••”), duration, date;
• settings and per-site hiding rules: the site address and descriptions of the page elements you chose to hide;
• trial and licence state: the install date, the latest date seen (so changing the clock does not extend the promotion), a random install ID, a note that you dismissed the end-of-promotion notice and, after activation, a signed licence token.

You can delete single recordings in the library. Removing the extension deletes all of this browser data; downloaded files stay yours.

Extension permissions

Tab, screen and camera recording and the microphone — only after your action. Recsavo has no standing access to websites: the recording panel appears on a page only when you start recording that tab.

What goes over the network

• On-device subtitles (in Chromium browsers: Chrome, Edge, Yandex Browser, Opera, Brave, Vivaldi, Arc; the Firefox version has no subtitles and downloads no model). The first time you click “Create subtitles”, Recsavo downloads a speech recognition model (about 76 MB) from huggingface.co (Hugging Face, Inc., USA) and its file delivery network. As with any download, Hugging Face sees your IP address and browser information. The browser also states in the request (the Origin header) that the download comes from the Recsavo extension, including the extension ID. For the store version that ID is the same for every user. For the beta installed from an archive, the browser derives the ID from the path of the folder you unpacked it to: it can differ between people and indirectly reveal your computer account name. The request contains no other identifier of you, your device or your recordings, no cookies and no page address. Your video, audio and transcript are never sent anywhere: recognition runs on your device. The model files are verified by checksum and stored in the browser until you delete them (see “What stays on your device”).
• Removing the extension. The browser opens recsavo.com/uninstall (or /en/uninstall) — an ordinary page request with no identifiers. The host sees the IP address, browser and time, as with any visit.
• “Share” (off in current builds). The file is uploaded straight from your browser to your Google Drive (access only to files Recsavo creates) or Yandex Disk (app folder), and only when you click. The sign-in token is kept in browser memory until the browser closes. We receive neither the file nor the token; Google and Yandex process it under their own terms as services of your account.
• Licences (off in current builds). Described in the next section. When the licence server is enabled, the extension also downloads public plan settings from it, without any identifiers.

No build has analytics, advertising, crash reporting or uploads of videos to our servers.

Licences and payments (not launched yet)

Purchases are off and the licence server is not running, so nothing in this section is collected today. It describes what will be processed after launch; before launch it will be completed with the providers' names and where the data is stored.

• Purchase: the payment provider processes the payment; we receive your email address, country, plan, amount, currency and payment status. Card details are never passed to us.
• The licence key is linked to your email. The server stores the key as a hash and in encrypted form, so it can be shown to you in your account.
• Activation: the extension sends the key, a random install ID and an activation secret (the server keeps only its SHA-256). The Chrome build adds the extension version and browser type; the Firefox build does not send them. The server stores the install ID, browser type, version, activation and last-check times with the licence, so they are linked to your email.
• IP address: to limit key guessing, the server counts requests per IP address. The address is stored in the request counter and deleted automatically after about a day (at most 25 hours). The server host's logs also contain the IP address and are kept as long as the hosting plan provides (1 to 28 days); the period will be stated at launch.
• Retention: your email, licence and devices are kept while the licence exists and are deleted with it at your request; payment records are kept as long as tax and accounting law requires.

Google data

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Recsavo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Recsavo uses Google data only to upload the file you choose to your own Google Drive (scope drive.file). We do not sell this data, use it for advertising, transfer it to third parties or let people read it.

The recsavo.com website

Static pages with no cookies, counters or third-party scripts. Your light/dark theme choice is saved only in your browser. The online recorder runs in your browser and uploads nothing.

The Vercel host processes each request's data (IP address, browser, page address, time) to deliver the page and protect the site from attacks. The logs available to us are kept from 1 hour to 3 days depending on the plan; we do not export them or enable extended retention. Vercel's own retention is described in its privacy policy (vercel.com/legal/privacy-policy).

Emails to support

If you write to support@recsavo.com, we receive your email address, your name if the email shows it, the message and any attachments. We use them only to answer you.

Mail to recsavo.com addresses is received and forwarded to us by Forward Email (USA). Its policy says message headers may be kept in error logs for up to 7 days (forwardemail.net/privacy). The message is then kept in our support system.

We keep the conversation while it is needed to resolve your question and delete it at your request. Emails are never used for advertising or mailing lists.

Processors and international transfers

• Vercel Inc. (USA) — website hosting; today. Requests are served by the nearest Vercel location and data may be processed in the USA. The transfer relies on Vercel's Data Processing Addendum (vercel.com/legal/dpa) with the EU Standard Contractual Clauses.
• Forward Email (USA) — receiving and forwarding mail sent to recsavo.com addresses; today, only for emails you send yourself.
• Licence server — the provider and storage country will be named before launch; data of buyers in Russia will be stored as Russian Federal Law 152-FZ requires.
• Payment provider — will be named before sales start.
• Google LLC (USA) and Yandex LLC (Russia) — only if you upload a file to your own Drive or Disk; they act as services of your account.

We do not sell personal data or share it for advertising.

Purposes and legal bases

• Answering your email — legitimate interest in supporting users and the consent you give by writing to us (GDPR Art. 6(1)(f); 152-FZ Art. 6(1)(1)).
• Website logs and abuse protection (including the licence server's IP counters) — legitimate interest in running and securing the service (GDPR Art. 6(1)(f); 152-FZ Art. 6(1)(7)).
• Purchase, issuing and checking a licence — performance of our contract with you (GDPR Art. 6(1)(b); 152-FZ Art. 6(1)(5)).
• Keeping payment records — compliance with legal obligations (GDPR Art. 6(1)(c); 152-FZ Art. 6(1)(2)).

Your rights

You can ask which of your data we process, get a copy, correct or delete it, restrict or object to processing, and withdraw consent where processing relies on it. You can complain to a supervisory authority: in Russia, Roskomnadzor; in the EU, your country's data protection authority.

Data on your device is yours to delete: in the library or by removing the extension. You can unlink a device from a licence in the extension's settings.

Today the only server-side data is the website host's logs (deleted automatically within the periods stated above) and your support emails, if you sent any. Send requests about your data, including deleting the correspondence, to support@recsavo.com.

Changes

The update date is shown at the top. Before Share, licences or payments are launched, this policy will be updated before the related processing starts.