CLIPARY Privacy Policy
Reference translation for convenience. If this translation differs from the Korean original, the Korean original prevails to the extent permitted by mandatory law.
Revised: 2026-10-24 · Applies to: the closed-source, free distribution
1. Scope and operator
This policy explains information CLIPARY accesses or stores on your PC, update checks, optional external AI, inquiries and support information. The operator is 셀지스튜디오 (SelzyStudio). Privacy inquiries may be sent to +82-10-9262-4374 or selzystudio@gmail.com.
CLIPARY's ordinary capture, recording, editing, merging, built-in OCR and notes features process information on your PC. If you confirm external AI processing, the selected image and analysis instructions are passed to an external AI provider. Network communications also occur for update checks and installation, downloads or external-page visits you choose.
2. Information accessed or processed on your PC
| Category | Information accessed or stored | Purpose and behavior |
|---|---|---|
| Screen capture, merging and editing | Selected screens, regions, windows and images; capture times and source details such as app names/window titles | Capture, merging, annotations, previews, saving and note creation |
| Full-page browser capture | Selected browser window's screen, document region and scroll information | Capture while scrolling using Windows UI Automation and similar mechanisms. The browser/site's policies govern the target page's own communications |
| Recording, audio and voiceover | Selected screens/regions; system audio and microphone audio according to settings | Recording and editing initiated by you. Microphone level displays may also access the microphone |
| Input and convenience features | Registered global shortcuts, four-finger touch gestures and the last selected region | Start capture/recording. Touch detection and startup execution are controlled in Settings |
| Text recognition | Selected image and recognition results | Built-in Tesseract recognizes Korean and English on the PC. Selecting AI OCR uses the transmission process in section 3 |
| Notes and vault | Note content, images/attachments, tags, links, projects, filenames, paths, modification information and saved source URLs | Local Markdown editing, search, linking and vault management |
| Projects and preferences | Editing state, original media paths, recovery information, save locations, shortcuts, AI/OCR preferences and first-run state | Projects, recovery after errors and preference persistence |
| Local diagnostics | Execution times, operation progress/errors, file paths, device/tool information and external-tool status/error output | Diagnose PC problems. CLI output or errors may contain account identifiers or excerpts of content |
This free distribution does not require CLIPARY license purchase or activation and does not send machine-identifier hashes for new activation requests. License files saved by previous versions may remain on the PC. Whether a previously operated server holds records must be checked against its actual operating records.
3. External AI: information, choice and control
- Recipients and purpose: Your selected Anthropic Claude Code, OpenAI Codex CLI or Google Gemini CLI and its provider process text recognition or AI summaries. CLIPARY runs a CLI installed on your PC, rather than routing requests through an AI proxy operated by CLIPARY's operator.
- Information and timing: When an external AI request runs, the selected image file and app-generated analysis instructions are given to the CLI and transmitted to the provider's service. Images may contain visible personal information, documents or conversations. The CLI may also process account, authentication, IP address, device and usage information under its own policies.
- Your confirmation: Every AI request identifies the selected provider and image/instruction transmission and asks for confirmation. Cancelling prevents that request from being sent. New users default to built-in Tesseract OCR. Existing saved AI OCR preferences may remain, but external-transmission confirmation still applies.
- Installation, sign-in and connection checks: If you choose to connect AI, after installation confirmation the app may install the external CLI through Anthropic's official installer or npm and open the provider's sign-in screen. The external CLI manages sign-in and authentication details. Gemini sign-in verification sends a short test request without a screen image. Prestarting the selected Gemini CLI or checking its connection may also cause it to contact its service.
- Retention and international processing: Storage locations, retention periods, model-improvement use and international-processing conditions for AI requests/responses, authentication and CLI session records vary by provider, account and settings. Deleting CLIPARY's temporary files does not delete CLI or provider records. Check current provider policies and account settings: Anthropic, OpenAI, Google.
- Refusal and withdrawal: Cancel transmission confirmation, or select Built-in OCR only (Tesseract) in Settings → AI → Text recognition and do not run AI summaries, to avoid sending images to AI. Sign-out, CLI removal and deletion of previously sent records also require the CLI/provider's procedures. Refusing consent does not restrict ordinary capture, editing, recording or built-in OCR.
Before using external AI, check whether the selected image contains another person's personal information, health/financial information, passwords or confidential material, and obtain necessary authority and consent. A general transmission confirmation does not by itself satisfy all consent from others or separate consent required by law.
4. Other external communications and information received by the operator
| Situation | Information sent or accessed | Purpose and control |
|---|---|---|
| Update information checks | Store builds use Microsoft Store updates and do not contact an app-update server. Direct GitHub builds request update metadata and installers from the configured public GitHub Releases repository. Development/legacy configurations may use shot.selzy.co.kr. Servers/intermediaries may process IP address, request time/path and headers | Direct builds check at startup and approximately every 24 hours; installation starts when you press the button. Store builds have no app-managed update checking or installation |
| FFmpeg recovery download | File requests and ordinary connection information to the distribution server | Download if the bundled executable is missing and you choose installation/recovery |
| Official website or external links | Ordinary browser connection information, pages visited and information entered there | Your default browser and the visited site's policies apply when you open links |
| Inquiries and issue reports | Email address, message, attachments and transaction-verification details you send | Answer inquiries and handle issues/disputes. Local logs reach the operator only if you send them yourself |
| Support | Names, email, messages and payment details entered by you on Ko-fi/PayPal. The operator may see shared display names, email, messages, transaction IDs, amounts, currencies, times and payment status | Optional one-time support for development and maintenance of multiple SelzyStudio free software projects; transaction checks, inquiries, refunds and disputes. The app does not collect card numbers or bank passwords |
Update requests do not contain capture images, note content or OCR results. Static GitHub metadata is compared with the installed version on your PC. This free distribution does not automatically upload local diagnostic logs. Direct builds have no dedicated setting to disable only update checks. Local features remain available offline. Microsoft policies govern information processed for Store updates.
Optional support: Ko-fi and PayPal
Opening the support page does not put capture images, notes, local paths or app device identifiers into its URL. Ko-fi and PayPal process information you provide directly, connection/device/cookie data and transactions under their own policies. Depending on the payment method and settings, PayPal may show legal names, email or other counterparty details. Anonymous payment is not guaranteed. Check public/private tip-message settings before paying.
Ko-fi Privacy Policy · PayPal Privacy Statement
5. Storage, retention and deletion
| Item | PC storage and retention | Your deletion and management options |
|---|---|---|
| Captures, recordings, exported files and projects | Your selected folders or auto-save folders; files may remain until manually deleted | Check save locations and delete in File Explorer. Removing an item from the editor list is separate from deleting the original file |
| Notes and attachments | Normally Documents\CLIPARY Notes or your selected notes/vault folder. A local app-data folder may be used in some environments | Deletion may move notes to .clipary/trash in the vault. Permanently delete/empty Trash to remove copies and associated records. Check separate copies, backups and other notes' attachments separately |
| Note search/sorting data | Vault .clipary/index.sqlite, sort settings and similar files; includes note metadata, links and file information | You may delete the cache after closing the app, but reopening may rebuild it. Check hidden folders when removing an entire vault |
| Settings and recovery | WebView local storage and Windows app settings/data folders, including recording sessions and editing recovery copies | Manage app data after closing the app. Project recovery lists use limits of the latest five entries/seven days, dependent on app execution and successful cleanup; immediate deletion is not guaranteed |
| AI temporary image/response files | Usually %LOCALAPPDATA%\CLIPARY\gemini-workspace; despite the name, multiple AI CLIs use it | The app attempts deletion after the request. Crashes or deletion failures may leave files; close the app/CLI before checking and deleting. CLI records are separate |
| Local diagnostic log | Usually %LOCALAPPDATA%\CLIPARY\clipary.log; if the existing file is over approximately 200 KB before writing, it is deleted before new logging | Delete after closing the app. A new log may appear on restart. Open the log to review it and remove unnecessary information before attaching it to an inquiry |
| Recording segments, previews, audio and conversion temporary files | Recording folders, app data/cache or Windows temporary folders; files may remain for recovery/editing | After closing the app, check whether projects reference them before deleting. Removing original/referenced files may prevent project recovery |
Uninstalling the app does not guarantee removal of saved files, notes, external CLI records or all app data. Local files are not supplied as an encrypted vault; manage Windows account and folder access permissions. File deletion does not guarantee unrecoverable erasure from storage media.
If your notes/save folder uses OneDrive or another synchronization service, or clipboard synchronization is enabled, information may also be copied to those services. Check their settings, trash and backups separately.
6. Rights and inquiries
You may request access, correction, deletion, suspension of processing and withdrawal of consent for your information held by the operator, under applicable law, through selzystudio@gmail.com. After necessary minimal verification, the operator will process the request under law and explain any limitations. The operator cannot remotely locate and delete files held only on your PC; manage them using section 5 or request assistance.
For information held by external AI services, Microsoft Store, support platforms or other separate providers, also use their rights-request channels. The operator does not request local originals you have not chosen to send, or passwords/tokens for external accounts, during inquiries.
7. Changes
Revisions and important changes will be announced in the app or on the official distribution page. Any new purpose or external disclosure requiring separate consent will follow that process.
Revision history: initial draft 2026-04-29 → preparation copy 2026-10-18 reflecting free distribution, voluntary support, external AI transmission and local storage behavior. → 2026-10-24 confirmed deletion within 90 days after inquiry resolution.
Voluntary KakaoPay support within Korea
Voluntary support is received under the SelzyStudio operator’s personal name. The recipient shown on the transfer screen is 신상미. Scan the photo-free QR in the app or support page with KakaoPay on your phone, check the recipient and amount, and initiate the transfer yourself. App features are unchanged by support. Microsoft does not solicit or organize this support.
Displaying the QR does not let the app query transactions or track completed transfers. KakaoPay processes information under its policies when you transfer. The operator may see sender display information, amount, time or messages provided in transaction records. Removing the photo does not make transfers anonymous.
8. Free-distribution hosting, inquiries and support records
The SelzyStudio operator handles privacy inquiries at selzystudio@gmail.com or +82-10-9262-4374. The information website uses static GitHub Pages hosting. There is no separate CLIPARY server, visitor analytics or operator-run access-log storage. GitHub separately processes IP addresses and ordinary connection details for hosting, downloads, updates and security; the operator's inquiry deletion rule is not GitHub's log-retention promise.
Google LLC's Gmail receives and sends support email. Information includes sender address/display name, inquiry text, voluntarily attached files and replies, solely to handle the requested support or privacy matter. Email is transmitted and stored when sent, received or answered. The operator deletes resolved inquiries and attachments, including trash, within 90 days. They are not used as a marketing list. International email processing/storage is used to perform the requested inquiry service. Google may process it in worldwide facilities including the United States; the operator cannot select country-specific storage or control Google's separate security/backup retention for personal Gmail. See Google's international processing information. You may call the number above instead of sending email, or request deletion/restriction of information already sent. Refusing email does not affect ordinary local app features.
Supporters enter payment details directly with their chosen Ko-fi/PayPal or KakaoPay service; CLIPARY does not collect and forward those details. Their own payment screens/privacy notices explain international processing and provider records. The operator uses only minimum shared display names/email, transaction IDs, dates, amounts, currencies and status for support verification, refunds/disputes and statutory accounting. Inquiry copies are deleted within 90 days after resolution. Only transaction records subject to tax retention duties are kept separately for the applicable statutory period: generally five years after the filing deadline, or seven years for qualifying offshore transactions. Unnecessary identifiers are deleted; advertising requires separate consent. Records held separately by Google, GitHub and payment providers follow their own policies and rights procedures.
GitHub privacy · Google privacy · Korean privacy law, Article 28-8 · National Tax Basic Act, Article 85-3