Privacy Policy

1. What Data We Collect

Because OnionBox IDE is a local desktop application that pulls public data files directly from GitHub, we collect incredibly little information about you.

• Purchasing Information: When you purchase the software, our Merchant of Record (Lemon Squeezy) collects your name, email address, and billing information in order to issue your License Key. DeviousCode does not see or store your raw credit card numbers.
• Hardware ID: To enforce the single-user license, the IDE generates a hashed Hardware Identifier unique to your machine to pair with your License Key.
• Website Analytics: We may use basic privacy-friendly analytics on this website to track page views and traffic sources.
• Contact Forms: If you use our contact form, we receive your name, email address, and the contents of your message.

2. What We Don't Collect

OnionBox IDE is designed for privacy. Therefore:

• We do not collect telemetry on how you use the IDE.
• We do not read, intercept, or upload any of your source code, plugin files, or proprietary logic.
• We do not log the prompts you send to your local Large Language Models (LLMs).

3. How We Use the Data

The minimal data we do collect is strictly used to:

• Validate your License Key against your installation.
• Send you transaction receipts and software updates.
• Respond to support inquiries or messages you explicitly send us.

4. Third-Party Services

We rely on trusted third parties to run the infrastructure of OnionBox. When you interact with our services, you are also bound by their respective privacy policies:

• Lemon Squeezy: Used for secure payment processing and License Key generation/validation.
• Web3Forms: Used to securely route your contact form messages to our email inbox.
• GitHub API: The IDE natively connects to the publicly accessible `deviouscode/onionbox-data` repository to fetch API manifests.
• AI Providers: When using AI features within OnionBox, your prompts and IDE context are sent directly to the AI provider you have configured (e.g., OpenAI, Anthropic, or your local machine) via their respective APIs. DeviousCode does not proxy, read, or store this communication. You are subject to the privacy policies of the AI provider you choose to connect.

5. Data Retention & Deletion

We retain transaction and license data for as long as your License Key is valid to provide ongoing access to the software. If you would like your customer record and License Key permanently destroyed from our Merchant of Record database, please contact us at devious@onionbox.dev.

6. Changes to this Policy

We may periodically update this policy. When we do, we will revise the "Last Updated" date at the top of the page. By continuing to access our site or use the IDE, you agree to the revised privacy policy.