Dolmen Desktop Privacy Policy

Effective date: 30 October 2026

1. Who is responsible

Edward Turk, a sole proprietor in California, United States ("we", "us") is responsible for the personal data described here. Contact: support@dolmendesktop.com, or by post at 1549 Treat Ave, San Francisco, CA 94110, United States.

This policy describes four separate flows. Each has its own data, purpose and parties.

2. This website

What we collect. The website is hosted by Netlify, Inc. When you visit it, Netlify receives the technical data every web request carries: IP address, browser user agent, the page requested, the referring page and the time. Netlify processes this data for us to serve and protect the website; see Netlify's privacy statement.

Videos. Videos on the website are plain video files hosted on the website itself. No third-party video player is used, so watching a video sends no data to a video platform.

What we do not use. The website uses no analytics, advertising or tracking cookies, and loads no third-party scripts outside checkout. Because we do not track visitors across sites, we do not change our behaviour in response to browser Do Not Track signals.

Why. To serve the website and keep it secure.

Retention. Netlify keeps its request logs under its own retention policy. We do not copy them.

3. Checkout and payment

When you buy a licence, checkout is provided by Paddle.com ("Paddle"), our authorised reseller and merchant of record, on the Purchase page. Paddle's checkout loads from Paddle and runs under Paddle's own privacy notice. Paddle collects your payment details, billing address and email address, processes your payment and collects any tax. We never receive or store your full card number or security code.

When a purchase completes, Paddle sends our licence service a purchase notification, and we keep that notification as Paddle sent it. It includes your email address, Paddle's identifiers for you and for the transaction, and the product, price and amount you bought. It also includes the payment method type and, for a card payment, the card's last four digits, its expiry month and year and the cardholder's name, or, for a PayPal payment, your PayPal email address. These records are included in our backups of the licence service.

Why. To complete your purchase, send you your licence and keep the records tax and accounting law require.

4. Licence delivery and the trial service

Licence delivery. After a purchase, our licence service creates a signed licence file and emails it to the address you gave at checkout, using the email service Resend. We keep a record of the purchase, including your email address, the licence identifier and the date your update window ends, so we can help you with your licence, resend it and handle refunds. The licence file itself contains no email address or other customer data.

Trial. When you start a trial, the app sends our trial service an installation identifier generated by the app. During the trial only, the app checks with our trial service from time to time whether the trial is still active. We keep the installation identifier, a trial identifier, the trial dates and the trial status so we can issue one trial per installation and end a trial early if needed. Trial records contain no name or email address.

IP addresses. Our licence and trial service sees the IP address of each request it receives. It uses the address briefly in memory to limit how often trials can be started, and its web server records it in an access log used for security and troubleshooting.

Where it runs. The licence and trial service runs on a server we rent from DigitalOcean in the United States. Encrypted backups of its database, which include the purchase records, are stored with Backblaze, Inc. (Backblaze B2) in the United States.

Why. To deliver and support licences, and to run the trial fairly.

Retention. We keep purchase and licence records, including the purchase notification described in section 3 and the copies in our backups, for as long as we support your licence, and for any longer period tax or accounting law requires. Backups are made regularly, and each backup copy stored with Backblaze is kept for about 35 days and then deleted; a record therefore stays in our backups only while it remains in the live database, plus about 35 days. We keep trial records for as long as we need them to apply the one-trial-per-installation rule. Our licence server's web access logs are rotated automatically on a fixed size limit and older entries are overwritten; we do not archive them.

5. The Dolmen Desktop app on your computer

Local data. Dolmen Desktop keeps its records in a local database on your computer, with no external service. This includes your agents, their activity, plans and history.

Library search. The Library's search uses embeddings computed locally by a model shipped with the app; nothing is sent anywhere for this.

AI providers. Dolmen Desktop runs AI agent tools you install and sign in to yourself, such as Claude Code and Codex, under your own subscriptions. What those tools send to their providers is governed by your agreements with those providers, not by us.

Embedded browser. Pages you or your agents open in the app's embedded browser are visited directly from your computer.

What the app sends to us. Only the trial requests described in section 4: starting a trial and, during a trial, checking its status. The app sends us no telemetry, crash reports or usage data, and it does not check with us for updates. Importing a licence happens offline.

6. Who we share data with

We share personal data only with the providers that run the flows above: Netlify (website hosting), Paddle (checkout, payment and tax), Resend (licence email), DigitalOcean (licence and trial service) and Backblaze (encrypted backups). We do not sell personal data, and we do not share it for advertising.

7. International transfers

We are based in the United States. Our email service, licence service and backup storage process data in the United States. Netlify serves the website from a global network under its own privacy statement. Paddle may process data in the United States, the United Kingdom and elsewhere under its own privacy notice. If you live outside the United States, your data is transferred to the United States. Where the law of your country requires safeguards for that transfer, we rely on the data processing terms our providers offer, such as standard contractual clauses.

8. Your rights

Wherever you live, you can ask us for a copy of the personal data we hold about you, and ask us to correct or delete it. If you are in the European Economic Area, the United Kingdom or Switzerland, you can also object to or ask us to restrict our use of it, and you can complain to your local data protection authority. In those places, the legal bases we rely on are: our legitimate interest in running and securing the website and the trial service; performing our contract with you to deliver and support your licence; and our legal obligations to keep tax and accounting records.

To make a request, contact support@dolmendesktop.com, or write to us at 1549 Treat Ave, San Francisco, CA 94110, United States. We may ask you to confirm you control the email address on the purchase. We answer within 30 days. If you ask us to delete a purchase record, we can no longer resend your licence, and we keep what tax or accounting law requires. A deleted record also drops out of our backups within about 35 days, as described in section 4.

9. Children

Dolmen Desktop is not directed at children. You must be at least 18, or the age of majority where you live, to buy a licence. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes

We will publish any change to this policy at /legal/privacy.html with a new effective date.