Privacy policy

1. Who is responsible

UEZAR LABS SpA (Uezar Labs), a Chilean company, RUT 78.528.712-6, with its registered address at General del Canto 112, oficina 301, Providencia, Santiago, Chile, represented by its general manager, Isaac Razeu Montillas Montilla, operates Perfica and is the controller (responsable) of the personal data described here, under Chile’s Ley 19.628 as amended by Ley 21.719 and, where they apply, the EU and UK General Data Protection Regulation (GDPR).

We have not appointed a data protection delegate; [email protected] reaches the person responsible for data protection.

2. What stays on your computer

These are kept on your computer and are never sent to us:

• your projects and their files;
• your boards, the Manager’s chats, run logs and reports;
• your API keys, stored encrypted on the device;
• your settings;
• voice dictation: the speech model runs on your computer, and your audio is not sent anywhere.

You control this data. You can delete it by deleting the files, or by uninstalling the app and removing its data folder.

3. What leaves your computer, and where it goes

To the AI model providers you choose

Prompts, and the files, command output and images the agents read, are sent from your computer to the model providers you pick (for example OpenAI, Anthropic, Google, OpenRouter or NVIDIA), with your own API key. Local model servers such as Ollama or LM Studio keep them on your machine. We do not receive or see this data. Each provider handles it under its own terms and privacy policy.

Web search and web pages

When an agent searches the web, the query goes to the search service in use: Brave or Tavily if you added a key for one; otherwise the search engine bundled with the app (SearXNG), which sends the query from your computer to public search engines, and if that fails, to public developer sites (npm, GitHub, Stack Overflow, MDN, Wikipedia). Pages the agents open are fetched directly from your computer.

YouTube videos you link

When you paste a YouTube link into a message to the Manager, the app fetches that video’s public captions from YouTube, directly from your computer, so the Manager can work from what the video says. YouTube receives the video’s identifier, your IP address and ordinary technical request data. The captions are used in that conversation and kept only in it, on your computer, like the rest of the chat.

Updates and downloads

The app contacts other services to work, and each of them receives your IP address and ordinary technical request data, as any web request does:

• GitHub, to check for and download updates, and to download the list of model prices;
• Hugging Face and jsDelivr, to download the speech model when you turn on dictation;
• Google’s storage, to download the browser the agents use to look at web pages;
• Docker Hub, if you use the Docker sandbox;
• OpenRouter and, with your key, Google, to list the models available.

We receive nothing from these requests.

Bug reports

Only when you choose to send one. A report is filed through your own GitHub account as a public issue on our GitHub repository. It contains what you write and attach, plus the app version and your operating system. Anyone can read it, so do not include personal data you do not want published.

Where the app sends a bug report to our own server instead, it shows you exactly what will be sent, with keys, file paths and project content removed, and sends nothing until you confirm.

Usage statistics, only if you turn them on

The app asks once, during first-run setup, whether to share usage statistics. They are off unless you say yes, and you can turn them off at any time in Settings → General → Usage statistics, which stops sending at once. A version of the app that shows no such switch sends none.

When they are on, the app sends these events and nothing else:

• the app was opened;
• a board was created;
• a run started;
• a run ended: how it ended (completed, budget used up, stalled, tripped, paused or error) and whether it counted as finished;
• a switch between Simple and Advanced, and which one;
• a first-run setup screen was reached, and which one; and how setup was left (finished or skipped) and on which screen. The screens before the question are held on your computer and sent only if you say yes. If you do not, they are discarded.

Each event carries a random identifier created for your installation the first time you turn statistics on, the app version, your operating system (Windows, macOS or Linux) and the time. The identifier is not your account, your device’s sign-in key or anything else on your computer; it is shown in Settings so you can quote it to ask us to delete your statistics. Events never include your project content, board or file names, file paths, prompts, model output or keys, and they are not linked to your name or account.

The app sends them in batches from your computer to PostHog Cloud EU, which processes them for us in Frankfurt, Germany. PostHog builds no personal profile from them and looks up no location, and our project is set not to store IP addresses. They are not transferred to the United States or anywhere else outside the European Union.

4. What we process, why, and on what legal basis

Data	Why	Legal basis
Account, if you create one: email, name, password (stored only as a hash), and the devices you sign in on (a device’s public key, label and when it was last seen)	To run your account, sign you in and keep it secure	Contract
Cloud sync: the boards you sync (loops, bubble settings and prompts, task cards)	To keep your boards the same across devices	Contract
Key vault: API keys you upload, encrypted with AES-256-GCM, and a masked hint to tell them apart	To store your keys and hand them only to your signed-in devices	Contract
Purchases: your email, country, what you bought, subscription status and transaction references, received from Paddle	To give you Cloud, handle refunds, and keep accounting and tax records	Contract; legal obligation
Bug reports you send	To find and fix problems	Consent (you choose to send one); legitimate interest: to find and fix defects
Usage statistics, only if you turn them on	To learn where people get stuck and improve the app	Consent, which you can withdraw at any time
Messages you send us, and requests about your data	To answer you and handle your request	Legitimate interest: to answer you and keep a record of what we agreed; legal obligation for data requests
Website: technical data such as your IP address, handled by our hosting provider	To deliver and protect perfica.dev	Legitimate interest: to deliver the site and protect it from abuse

An email is needed to create an account and to buy Cloud; without it we cannot provide them. Everything else you give us is optional.

Payments. Paddle, our merchant of record, collects your payment and billing details and is responsible for them under its own privacy policy. We never receive your full card details.

This website is a static site hosted on Cloudflare Pages. It uses no analytics and no tracking cookies. It stores your light or dark theme choice in your own browser, and nothing else.

We do not make decisions about you based only on automated processing.

5. Who we share it with

We share personal data only with the service providers that help us run Perfica, and only what each needs:

• the hosting provider that runs our account and sync server;
• Paddle, for purchases (as an independent controller);
• Cloudflare, which hosts this website;
• GitHub, for bug reports and releases;
• PostHog, in the European Union, only if you turn on usage statistics;
• our email provider, for messages you send us.

We also disclose data when the law requires it. We do not sell personal data or share it for advertising.

6. International transfers

The providers in section 5 process personal data outside Chile, in the United States and, for some of them, in other countries too. PostHog processes usage statistics in the European Union (Frankfurt, Germany), and they are not transferred to the United States. The providers of our account and sync server and our email are named here, with the countries where each processes data, before accounts and Cloud open. For these transfers we rely on the data protection clauses in our contracts with each provider (Ley 19.628 art. 27 b) and, for users in the EU and UK, on the Standard Contractual Clauses or, where the provider is certified, the EU-US Data Privacy Framework. You can ask us for a copy of these safeguards at [email protected].

7. How long we keep it

• Account, sync and vault data: while your account exists. When you delete your account (you can do it in the app), it is deleted from our systems, and from backups as they are replaced.
• Purchase records: as long as tax and accounting law requires.
• Messages and data requests: as long as needed to handle them and any follow-up.
• Bug reports on GitHub: until the issue is deleted. Ask us and we will delete one.
• Usage statistics: no longer than needed to understand how the app is used, and deleted when you ask.

8. Your rights

You have the right to:

• access the personal data we hold about you;
• rectify it if it is wrong or incomplete;
• delete it (supresión);
• object to its processing (oposición);
• portability: receive it in a structured, commonly used format, or have it sent to someone else;
• restrict or block its processing while a request is resolved;
• withdraw consent at any time, where we rely on it, without affecting what was done before.

To exercise any of them, write to [email protected]. It is free. We may ask you to confirm your identity. Much of your account data can also be seen and deleted in the app itself.

How fast we answer, and where you can complain, depends on the date, because Chile’s data protection law changes on 1 December 2026:

• Until 30 November 2026, Chile’s current law applies: we answer within 2 working days, and if we do not, you can go to the civil court (juez de letras en lo civil) of our domicile.
• From 1 December 2026, we confirm we received your request and answer in writing within 30 calendar days; if it is complex we may extend that once, by up to 30 more days, and tell you why. If we refuse a request in whole or in part, we tell you why and that you can complain to the Agencia de Protección de Datos Personales within 30 working days. If you ask us to block the processing of your data while a request is resolved, we answer that within 2 working days. You can complain to the Agencia if we refuse your request or do not answer in time.

In the EU or UK, you can complain to your local data protection authority.

9. Security

API keys are stored encrypted, on your device and in the vault. Passwords are stored only as hashes. Devices sign in with their own keys, and connections to our servers are encrypted. No system is perfectly secure. If a security breach creates a reasonable risk to your rights, we report it without undue delay to Chile’s Agencia de Protección de Datos Personales and, for users in the EU and UK, to the supervisory authority within 72 hours where required. We tell you directly when the law requires it, and whenever a breach is likely to put you at high risk.

10. Children

Perfica is not meant for anyone under 16, and we do not knowingly collect personal data from children.

11. Changes to this policy

We will publish any new version on this page with a new version number and effective date. When this policy or the terms change, the app asks you to accept the new version before agents work on your computer again.

12. Language

This policy is published in English and Spanish. If you are a consumer in Chile, the Spanish version controls. In other cases, if the versions differ, the English version controls, unless the law of your country gives you the more favourable one.

13. Contact

UEZAR LABS SpA (Uezar Labs), RUT 78.528.712-6, General del Canto 112, oficina 301, Providencia, Santiago, Chile. Legal representative: Isaac Razeu Montillas Montilla. Privacy and data requests: [email protected]. Everything else: [email protected].