Skip to content
Broomed logo
Broomed
Broomed Mascot

Privacy Policy

Last updated: August 2026

The Local-First Guarantee

Broomed is engineered with a strict local-first architecture. Your documents, images, audio, video, file names, and directory structures never leave your local device. No cloud syncing, no background ingestion, and no training on your personal data.

1. Information We Do NOT Collect

  • Local File Contents: Text, code, PDFs, documents, media, or metadata stored on your computer.
  • Search Queries: Searches performed inside the local index stay entirely in memory on your device.
  • Keystrokes & Activity: We do not log what files you open, edit, delete, or reorganize.

2. Information We Collect and Process

We collect only the minimal data necessary to maintain account credentials, process payments, and verify software licenses:

  • Account Data: Your email address and authenticated account credentials managed via Better Auth.
  • Billing Information: Processed securely by Dodo Payments. We do not store your credit card numbers.
  • Device Registration: A hashed device ID, platform identifier (e.g., macOS, Windows), and app version to enforce single-seat license limits.
  • Optional AI Gateway Requests: If you explicitly choose to use the online AI capabilities, the exact prompt snippet is proxied through our encrypted gateway to the selected inference provider and is not retained on our servers.

3. Cryptographic Token Architecture

When you activate Broomed, our backend server issues an offline JSON Web Token (JWT) signed with an RSA private key. The desktop app stores this token locally and validates it against our public key. Offline validation requires zero network activity between license refresh intervals.

4. Infrastructure & Service Providers

Cloudflare (Pages & D1)

Serverless edge execution and encrypted SQLite database storage.

Dodo Payments

PCI-compliant subscription and invoice processing.

Unosend

Transactional email delivery for license codes and magic links.

5. Data Retention & Deletion

You may delete your account at any time by contacting support or deactivating your profile in the account dashboard. Upon account termination, all active device associations and license sessions are immediately revoked and permanently purged.

6. Contact & Inquiries

For questions or inquiries regarding our privacy practices, please contact us at privacy@broomed.app.