1. Who we are
Objentra is made by a small, independent team led by its founder and CEO, Dung Vu. We're completing the procedures to open our company in Frankfurt, Germany. In this policy, "Objentra", "we" and "us" mean that team. Dung Vu is responsible for how your personal information is handled. Our postal address and our representative in the EU under Article 27 GDPR are, or will soon be, on our Legal notice page. Write to support@objentra.app with any question; a member of the team answers every message.
Pro is sold by Polar Software, Inc., our reseller and merchant of record. For the payment itself, Polar handles your information under its own privacy policy.
The laws we follow
Objentra is made for people in the European Union and the United States, and we hold ourselves to both. We follow the EU General Data Protection Regulation (GDPR) and the EU's ePrivacy rules, and we measure ourselves against the strictest European regulators, such as Germany's data protection authorities and France's CNIL. In practice: we collect as little as we can, keep your account record in the EU, and set no cookies and run no tracking on this website. For people in the US, we follow the California Consumer Privacy Act (CCPA, as amended by the CPRA) and similar state laws: we don't sell or share personal information.
2. What we don't collect
Objentra is local-first software. We do not receive, store or have access to:
- your files, documents, notes, recordings or emails, unless you attach them to a bug report;
- your objects, groups, properties, links, comments, annotations or version history;
- anything you sync with Objentra Sync, which is encrypted on your computer with keys we never have;
- anything you send to an AI provider or an AI app;
- advertising or usage analytics: the app runs none. Crash reports, below, carry what is needed to fix errors and slow spots, including a masked replay of one session in ten and of every session with an error.
3. What we collect
Your account
An Objentra account is optional for Standard and needed for Pro. When you create one, we keep your email address, your display name and avatar colour, how you sign in (email link or code, password, or Google), your two-step verification settings, your plan and its status, and a random identifier and name for each computer you sign in on. Passwords are kept only as a secure hash. Each time you sign in, our authentication provider records the time, your IP address and your browser, so you can see your recent sign-ins and we can protect your account. If you sign in with Google, we receive your name, email address, profile picture link and Google account ID. Your account record is stored in the European Union (Ireland).
Licence checks
Objentra Pro checks your plan with your Objentra account from time to time. Each check sends your sign-in, the computer's random identifier and name, and the app version. Pro keeps working offline between checks.
Update checks
Objentra checks for updates by downloading a small file from our update server on Cloudflare, and downloads an update the same way. Nothing about you is sent with the request; like any web server, Cloudflare sees your IP address.
Purchases
Polar processes your payment as the merchant of record. Polar shares with us your name, email, country, plan and purchase history. We never receive your card details.
Release notes
If you subscribe, we keep your email address and the date you subscribed.
Crash reports
Crash reports are on by default and you can turn them off any time in Settings › About › Send error reports & diagnostics. A report includes your computer's name, the app and macOS version, the type of computer, and technical details of the error, such as where in Objentra's code it happened; we strip file names, paths and quoted text from error messages. A replay of the app window, with every word, picture and input masked, is recorded in one session out of ten and in every session with an error. The app also sends performance timings from every session, such as how long start-up or a save took, with the names of the app's own actions and no content. It also sends the app's own warning and error messages, scrubbed the same way. Sentry stores reports in the EU (Germany) and does not keep your IP address. A crash in the app's native code is sent as a memory snapshot of that moment, which can contain fragments of what the app was working on; we use it only to fix the crash.
Bug reports
When you use Report a bug, we receive what you write, the email address you add if any, the screenshot of the Objentra window and the files you attach (up to 20 MB in all), your computer's name, and the app and macOS versions; while crash reports are on, also the masked replay. A bug report is sent only when you press Send, even if crash reports are off.
Support
If you write to us, we keep your message and our reply.
Website
This website is hosted on Cloudflare, which processes your IP address and browser details to deliver the site and protect it from attacks. We don't use analytics, tracking cookies or advertising.
4. Why we use it
- To provide Pro: sign you in, check your licence and manage your computers. Legal basis: our contract with you.
- To bill you and keep records the law requires. Legal basis: contract and legal obligation.
- To send release notes you asked for. Legal basis: your consent, which you can withdraw at any time.
- To send service emails, such as trial reminders, receipts and security notices. Legal basis: contract and legitimate interests.
- To fix crashes, deliver updates and keep Objentra secure. Legal basis: legitimate interests. You can turn crash reports off at any time.
We do not sell your personal information, share it for advertising, or use it to train AI models.
5. Who we share it with
Only with service providers who help us run Objentra, under contracts that limit their use of it:
- Polar — payments, tax and invoices, as merchant of record, in the United States.
- Resend — sign-in links, service emails and release notes, in the United States.
- Sentry — crash reports, unless you turn them off, and the bug reports you send, in the European Union (Germany).
- Supabase — accounts and sign-in, in the European Union (Ireland).
- Cloudflare — this website, downloads, updates, forwarding of support email, and the bot check (Turnstile) on our forms, on its global network.
- Google Workspace — our support mailbox, in the United States.
- Google — only if you choose to sign in with Google, in the United States.
We may disclose information if the law requires it, or to protect our rights or someone's safety.
AI providers you add a key for, cloud drives you sync through, and AI apps you allow are chosen and used by you directly. They are not our service providers, and their own terms apply.
6. International transfers
Our team also works from outside the European Union, so information we handle, such as support emails and crash reports, may be accessed from there. Some providers process information outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep it
- Account: while your account exists. Delete it any time from your account page and it is deleted at once. Two records remain for a limited time and are then deleted: our authentication provider's security log of sign-ins, and Resend's log of emails sent to you.
- Purchase records: as long as tax and accounting law requires. Polar keeps its own records as the seller.
- Release notes: until you unsubscribe. After that we keep only a note not to email that address again.
- Crash and bug reports: 30 days, then deleted automatically by Sentry.
- Support emails: as long as we need them to help you and to answer any follow-up, then deleted.
- Website and update server logs: only as long as Cloudflare needs them to run and protect the service.
Your files, notes and anything you sync were never with us, so there is nothing of them to delete; files you attach to a bug report are deleted with it after 30 days.
8. Your rights
Wherever you live, you can ask us to show, correct, export or delete the personal information we hold about you. Write to support@objentra.app and we'll reply within one month, as the GDPR requires. You can also delete your account yourself, any time, from your account page.
In the EU, UK and EEA, you can also object to or restrict our use of your information, withdraw consent at any time, and complain to your data protection authority.
In California and other US states, you have the right to know, delete and correct your information, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define it.
9. Security
We collect as little as possible, encrypt it in transit, and limit who can access it. Read more on our Security page.
10. Children
Objentra is not directed at children under 16, and we do not knowingly collect their personal information.
11. Changes
If we change this policy, we'll update the date above. If a change is significant, we'll tell Pro customers and subscribers by email before it takes effect.
12. Contact
Write to support@objentra.app. A real person on the Objentra team reads and answers every message.