Privacy Policy

The short version

• Your PDFs, annotations and trial data never leave your computer.
• The license server sees only what it needs to check a license: the license key, the app version, a random device identifier and, if you are on a trial, the date the trial started.
• Stripe processes payments. We never see or store your card details.
• Resend delivers your license key by email.
• This website has no analytics, no tracking pixels and no cookies.

What stays on your computer

Exhibit Room stores everything about your cases locally, in the application data folder on your machine. That includes:

• the PDFs you import as exhibits, and their file names;
• exhibit numbers, titles, descriptions and status;
• trial names, case numbers, courts and parties;
• every annotation — highlights, pen strokes, shapes, arrows, text, callouts, redactions;
• your application settings.

None of this is uploaded, synchronised, backed up to a server, or sent to any third party. There is no cloud account. If you want a copy elsewhere, you make it yourself with Export Trial, which writes a single file you control.

Because your data is local, deleting the application data folder deletes your cases. Keep your own backups.

What the license server receives

The license server runs at https://exhibitroom.app. The application contacts it only when activating, deactivating or occasionally revalidating a license, when recording the start of a trial, and when you ask it to check for an update. Each of those requests contains:

• your license key (stored on the server only as a cryptographic hash);
• the application version;
• a random device identifier generated on first launch — a random value, not a hardware fingerprint, not tied to your identity;
• an optional device name, so you can tell your own activations apart;
• for trials, the date your trial started.

The server also records the time of each request, as any web server does.

The server never receives document contents, file names, exhibit titles, trial names, annotations or anything else about your cases. There is no telemetry and no usage analytics in the application.

Payments

Purchases are handled by Stripe, using Stripe Checkout. You enter your payment details on Stripe's own page; card data never reaches our servers and we never store it. From Stripe we receive your email address, the amount paid, the currency, a payment identifier and any promotion code you used, so that we can issue and support your license.

Stripe processes this data as an independent controller under its own privacy policy.

Email

Your license key and purchase confirmation are delivered by Resend on our behalf. We use your email address to send that key, to answer support messages, and to contact you about a problem with your purchase or license. We do not run a mailing list and we do not send marketing email.

This website

The website is static. It sets no cookies, runs no analytics, embeds no tracking pixels and loads no third-party fonts or scripts. There is nothing to consent to, which is why you will not see a cookie banner.

Our web server keeps ordinary access logs — IP address, timestamp, requested path, status code, user agent — for security and troubleshooting. Two small scripts run in your browser: one asks our own API for the latest release so the download page can show version numbers, and one asks our own API whether a purchase has completed. Neither sends anything about you.

How long we keep things

• License and activation records are kept for as long as the license exists, so that it can be validated, moved between computers and supported.
• Order records are kept as long as required for accounting and tax purposes.
• Trial records (a device identifier and a start date) are kept while the trial system needs them, and are deleted when they are no longer useful.
• Server access logs are kept for a short period, then rotated away.
• Support email is kept as long as needed to resolve your question.

Your choices

You can ask us what we hold about you, ask for a correction, or ask us to delete your customer and license records. Deleting a license record deactivates the license, so we will confirm before doing it. Email support@exhibitroom.app.

Nothing about the data on your own computer requires our involvement: it is yours, and you can delete or export it at any time from within the application.

Changes to this policy

If this policy changes, the effective date at the top of the page changes with it. Material changes will also be announced on this page before they take effect.

Contact

Questions about privacy: support@exhibitroom.app.