Privacy Policy

Last updated: March 9, 2026

1. Overview

Steal AI ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use the Steal AI desktop application ("Software") and our website at steal-ai.com.

2. Data We Do NOT Collect

We want to be clear about what we do not do:

• Screenshots are never stored. When you capture your screen, the image is sent directly to our API proxy, forwarded to the AI model provider in real-time, and immediately discarded. We do not save, log, or retain any screenshot data on our servers.
• AI responses are never stored. Responses are streamed directly from the AI provider to your device. We do not retain any AI-generated content.
• We do not track your screen activity. The Software only captures your screen when you explicitly press the capture shortcut.

3. Data We Collect

We collect the minimum data necessary to operate the service:

• License key: Used to authenticate your subscription and track usage quotas. Stored locally on your device and validated against our server.
• Usage count: We track the number of API requests made per billing period to enforce tier limits. We store only the count, not the content of requests.
• Device identifier: A hashed hardware identifier used solely for device limit enforcement. We cannot reverse this to identify your machine.
• Payment information: Processed entirely by LemonSqueezy (our payment processor). We never see, handle, or store your credit card or payment details.

4. How We Use Your Data

• To authenticate your license and enforce usage limits
• To provide and maintain the Software
• To process payments via our third-party payment processor

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Services

The Software interacts with the following third-party services:

• AI Model Providers (Google, Anthropic, OpenAI, xAI, Moonshot): Screen captures are sent to these providers for processing. Each provider has its own privacy policy governing how they handle data received through their APIs. Data is transmitted in real-time and not stored by us.
• Cloudflare: Our API proxy and website are hosted on Cloudflare infrastructure. Cloudflare may collect standard web traffic logs (IP addresses, request metadata) per their privacy policy.
• LemonSqueezy: Handles all payment processing. Subject to LemonSqueezy's privacy policy.

6. Data Storage and Security

• Configuration data (model preference, opacity settings, prompt templates) is stored locally on your device only.
• License validation and usage counting are performed through encrypted HTTPS connections to our Cloudflare Workers API.
• We do not operate a user database. We store only license keys and associated usage counters in Cloudflare KV storage.

7. Data Retention

• Screenshots and AI responses: Not retained (processed in real-time, immediately discarded).
• Usage counters: Reset each billing period.
• License data: Retained as long as your subscription is active. Deleted upon request after subscription cancellation.

8. Your Rights

You have the right to:

• Access: Request a copy of any data we hold about you.
• Deletion: Request deletion of your data by contacting us.
• Portability: Your local configuration can be exported from the app's config directory.

To exercise these rights, contact us at [email protected].

9. Children's Privacy

The Software is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date. Continued use of the Software after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at [email protected].