Privacy Policy

1. Introduction

ET Ducky ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our software application ("Software").

By using ET Ducky, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name
• Password (encrypted)
• Payment information (processed by Stripe, not stored by us)

2.2 Usage Information

We automatically collect certain information when you use the Software:

• Device information (OS version, hardware specs)
• Software usage patterns (features used, session duration)
• Error logs and crash reports
• License and subscription status

2.3 Event Data

ET Ducky collects Windows Event Tracing (ETW) data:

• This data is stored locally on your device
• We do NOT automatically upload or access your event data
• Event data is only transmitted when you explicitly use AI analysis features

2.4 AI Analysis Data

When you use AI analysis features:

• Selected event data may be sent to third-party AI providers (Anthropic, OpenAI)
• We may temporarily cache analysis results
• Query metadata (timestamp, model used, token count) is recorded

3. How We Use Your Information

We use collected information to:

• Provide the Service: Process your subscription, authenticate your account, enable features
• Improve the Software: Analyze usage patterns, fix bugs, develop new features
• Communicate: Send account updates, technical notices, security alerts
• Support: Respond to your requests and troubleshoot issues
• Billing: Process payments and manage subscriptions
• Compliance: Enforce our terms and comply with legal obligations

4. Data Storage and Security

4.1 Local Storage

Event data collected by ET Ducky is stored locally in:

• Database file: %PROGRAMFILES%\ET Ducky\etwmonitor.db
• This data remains on your device and is not uploaded to our servers

4.2 Cloud Storage

Account information and subscription data is stored securely on:

• Clerk (authentication services)
• Stripe (payment processing)
• DigitalOcean servers (account management API)

4.3 Security Measures

We implement industry-standard security measures:

• TLS/SSL encryption for data in transit
• Encrypted database storage
• Secure authentication (OAuth 2.0)
• Regular security audits
• Access controls and monitoring

5. Third-Party Services

5.1 Authentication (Clerk)

We use Clerk for user authentication. Clerk's privacy policy: https://clerk.com/privacy

5.2 Payment Processing (Stripe)

We use Stripe for payment processing. We do not store your full credit card information. Stripe's privacy policy: https://stripe.com/privacy

5.3 AI Providers

When you use AI analysis:

• Anthropic Claude: Privacy Policy
• OpenAI ChatGPT: Privacy Policy

If you use your own API keys (BYOK), your data handling is governed by your agreement with those providers.

6. Data Sharing and Disclosure

We do NOT sell your personal information. We may share information only in these circumstances:

6.1 Service Providers

We share data with third parties who help us provide the service (authentication, payments, hosting).

6.2 AI Analysis

When you use AI features, selected event data is sent to AI providers as necessary to perform the analysis.

6.3 Legal Requirements

We may disclose information if required by law, court order, or government request.

6.4 Business Transfers

If we are acquired or merged, your information may be transferred to the new entity.

6.5 With Your Consent

We may share information for other purposes with your explicit consent.

7. Your Rights and Choices

7.1 Access and Correction

You can access and update your account information through the Settings page in the Software.

7.2 Data Deletion

You may request deletion of your account and personal data by contacting support@etducky.com. Note:

• Account deletion is permanent and cannot be undone
• We may retain certain information as required by law
• Local event data on your device must be deleted manually

7.3 Opt-Out

You can opt out of:

• Marketing emails (unsubscribe link in each email)
• AI analysis features (disable in settings)
• Error reporting (disable in settings)

7.4 Data Portability

You can export your account data by contacting support@etducky.com.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained while your account is active, plus 30 days after cancellation
• Usage Logs: Retained for 90 days
• AI Analysis Cache: Cleared after 7 days
• Local Event Data: Retained on your device until you delete it
• Billing Records: Retained for 7 years for tax compliance

9. Children's Privacy

ET Ducky is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately.

10. International Users

ET Ducky is operated from the United States. If you use the Software from outside the US, your information will be transferred to and processed in the United States, which may have different data protection laws.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Software after changes constitutes acceptance of the new policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Email: privacy@etducky.com
Support: support@etducky.com

13. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact privacy@etducky.com.

14. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, contact privacy@etducky.com.