Privacy Policy

Who Operates SystemSculpt

SystemSculpt is a product of Trellisbyte LLC, a California limited liability company. In this Privacy Policy, "SystemSculpt", "I", "me", and "my" refer to Trellisbyte LLC. Mailing address: Trellisbyte LLC, c/o Northwest Registered Agent, Inc., 2108 N St Ste N, Sacramento, CA 95816.

Overview

This Privacy Policy explains how SystemSculpt collects, uses, and shares information when you visit the website, purchase licenses, interact with the Obsidian plugin, or use the SystemSculpt iPhone app.

Information I Collect

I collect account details provided through Clerk, payment information handled by Stripe, and communication metadata submitted through the contact form. When you use a hosted AI feature, I process the prompts, notes, files, audio, YouTube URLs, transcripts, and other context you choose to submit. I also store limited telemetry required to operate your dashboard, meter hosted work, understand product usage, attribute purchases, and diagnose checkout or plugin issues.

How I Use Information

Collected data enables account provisioning, payment processing, license delivery, customer support, fraud prevention, analytics, advertising measurement, and product improvement. I do not sell personal information to third parties.

Advertising and Conversion Measurement

When you arrive from an ad or campaign link, I may store campaign parameters and click identifiers such as UTM values, gclid, gbraid, or wbraid so I can understand which ads led to signups or purchases. If advertising conversion measurement is enabled, limited purchase event data may be sent to platforms such as Google Ads. When enhanced conversion data is used, customer data is normalized and hashed before it is sent, subject to consent and applicable platform terms.

Cookies and Consent

SystemSculpt uses necessary cookies and similar technologies for account, checkout, and security functions. Analytics or advertising tags are controlled by the site consent settings where required. You can adjust browser controls or the site consent banner where available.

Third-Party Services

I rely on trusted vendors including Stripe, Apple, RevenueCat, Clerk, Cloudflare R2, Resend, OpenRouter, AssemblyAI, Supadata, Google Analytics, and Google Ads. For uploaded audio, Audio Processor sends a temporary signed audio URL to AssemblyAI for speaker-labeled transcription. After SystemSculpt durably stores the transcript, it requests deletion of the AssemblyAI transcript and retries if that request temporarily fails. For YouTube, Audio Processor sends the submitted URL to Supadata to use existing captions first and generate a transcript only when captions are unavailable. Transcript-derived chunks go to OpenRouter for structured summarization, with provider data collection disabled. SystemSculpt may reuse a retained result for an identical source instead of repeating provider work; uploaded-audio reuse stays within the same account, while public YouTube results may be reused for the same video. Each vendor processes data under its own privacy policy and contractual safeguards.

SystemSculpt for iPhone

Account: the iPhone app uses the same SystemSculpt account as the website and the plugin. You sign in through Clerk, and the app stores your SystemSculpt license key in the iPhone Keychain.

Captures: when you capture text, a shared link or shared text, or a voice recording, the app uploads it to SystemSculpt. I transcribe voice recordings, summarize and format each capture with the vendors described above, and deliver the resulting note to your Obsidian vault through the plugin. A capture that has not reached your vault is deleted from the server 30 days after it was made, and a delivered capture 7 days after delivery. The audio of a voice recording is kept for no more than 24 hours, and its transcript follows the Audio Processor retention described below. Deleting a capture in the app deletes the capture and its note from the server right away.

Microphone: the app uses the microphone only while you record a voice capture.

Purchases: subscriptions in the app are bought through Apple's App Store. Apple processes the payment, and SystemSculpt never sees your card details. RevenueCat (revenuecat.com) processes your purchase receipts and your SystemSculpt account ID to confirm the subscription, and notifies SystemSculpt when it starts, renews, or ends.

Usage counts: the app sends RevenueCat a few counts and dates about how you use it, linked to your SystemSculpt account ID: which first-week steps you completed and when, how many notes, minutes of speech and notes in your vault you had in the last 7 days, whether you used a widget, shortcut or the Apple Watch app, and whether reminders and notifications are on. They never include what you captured. SystemSculpt uses them only to learn which features keep subscribers.

First-party app usage events: the app sends SystemSculpt events about viewing a paywall, purchase attempts and results, restores, opening a note, and opening an Obsidian handoff. These include a random installation ID, event IDs and dates, app version and build, and limited product, price, currency, outcome and capture identifiers. Before sign-in they are identified only by the random installation ID. When that installation sends an authenticated batch, its events are linked to your SystemSculpt account. We also record content-free confirmation that a note was processed or the plugin observed a vault save. We keep these events and confirmations for 180 days to understand where people stop between paying and getting a useful note. They do not include note text, transcripts, audio, email addresses or credentials, and are not sent to advertising platforms. Network addresses are used temporarily for rate limiting, not stored in these usage events.

No tracking: the app does not track you across other companies' apps or websites, shows no ads and shares nothing with data brokers.

Deleting your account: in the app, open Account > Delete account. Your captures are deleted from the server right away, and the rest of your account is deleted within 30 days of the request, except records I must keep to meet legal obligations. Deleting your account does not cancel an App Store subscription; cancel it in the iPhone's Settings under Apple Account > Subscriptions.

Security

I design the platform with security controls including CSRF protection, rate limiting, and secure credential storage. Access to customer data is limited to authorized personnel acting on my behalf.

Retention

I retain data for as long as needed to deliver services and meet legal obligations. Audio Processor keeps an uploaded source for no more than 24 hours. Completed notes, summaries, transcripts, and processing checkpoints may be retained for up to 30 days while waiting for delivery. After the plugin confirms that the result was written to your vault, that job's retention window is normally shortened to 7 days. Provider-side deletion and short-lived caches follow the process described above and the applicable vendor terms. You may request deletion of support conversations or dashboard exports by contacting me.

Your Rights

Depending on your jurisdiction you may have rights to access, correct, or delete personal data. Submit requests through the contact form or email privacy@systemsculpt.com.

Policy Updates

I may update this Privacy Policy for operational or legal reasons. I will post revisions with an updated date and, when appropriate, provide additional notice.