Privacy Policy

Data controller

The data controller for information collected through the vmount app and this website is a sole trader based in Australia (ABN 30 773 042 619). For data-subject requests under GDPR, the Australian Privacy Act, or other applicable privacy law, contact support@vmount.app.

Payments are processed by Paddle.com Market Limited as the merchant of record and authorised reseller. Paddle is the data controller for payment information.

Overview

vmount is designed with privacy in mind. License validation is handled directly with vmount's license service. We do not track your usage or collect analytics.

Data we collect

License activation

When you activate your license key, the following is sent directly to vmount's license service:

• Your license key (for validation)
• Your device name and machine ID (for activation tracking)

vmount does not collect any other user data or telemetry.

Data stored locally

The following data is stored on your computer only:

Keychain (encrypted)

• License key and activation ID

Local files

• App settings and preferences
• AI conversation history (if AI assistant is used)

All data stays on your device. Nothing is sent to vmount servers.

What we do not collect

vmount does not:

• Operate any backend servers that store user data
• Collect usage analytics or telemetry
• Track or record which files you access, edit, or preview
• Send crash reports automatically
• Use third-party analytics services
• Share your data with advertisers
• Transmit file contents, names, or metadata externally
• Collect personal information beyond license validation

Third-party services

Payment provider

License purchases are processed by Paddle.com Market Limited, acting as the merchant of record and authorised reseller. Paddle handles your billing information, applicable taxes, and payment processing. Paddle's privacy policy is available at paddle.com/legal/privacy.

Email delivery

License-key delivery emails are sent via Cloudflare Email Service. Cloudflare processes your email address solely for the purpose of delivering your license key. See cloudflare.com/privacypolicy.

Hosting and CDN

This website and the license service are hosted on Cloudflare. Cloudflare receives standard request metadata (IP, user-agent, timestamp) for security and traffic management. See cloudflare.com/privacypolicy. Web fonts are loaded from Google Fonts, which receives your IP address on page load (policies.google.com/privacy).

AI assistant (optional)

If you use the AI file assistant, your messages are sent directly to Anthropic's API using your own API key. Anthropic's privacy policy is available at anthropic.com/privacy.

vmount does not proxy, store, or log any data sent to these services.

File system access

vmount requires access to external disks and disk images to perform its core function.

Scope of access

The app only accesses files on the specific external disk or virtual disk image that you choose to connect. vmount has no access to:

• Your Mac's internal drive or system files
• Other external drives you have not connected through vmount
• Any files outside the mounted filesystem

Local file operations

On the disk you connect, the app can:

• Browse and navigate files and folders
• Edit text-based files (code, documents, configuration files)
• Preview images and other media files
• Copy, move, rename, and delete files

All file operations occur locally on your computer through a sandboxed microVM. The NFS connection used for Finder integration is localhost only (127.0.0.1).

No file data collection

vmount does not collect your file data.

The only data vmount transmits over the internet is:

• License key validation (sent directly to vmount's license service)
• Update checks (anonymous version check)
• AI messages (sent directly to Anthropic, only if you use the AI assistant with your own API key)

vmount does not:

• Collect, upload, or transmit any file contents
• Collect file names, paths, or directory structures
• Send any information about what files you access
• Share any file-related data with third parties

All file operations are performed locally. You retain complete ownership and control of all data on your mounted filesystems.

Data security

• Sensitive license data is stored in macOS Keychain (encrypted)
• License validation uses HTTPS encryption
• No passwords or credentials are stored in plaintext
• Backup files use standard macOS file permissions

Data retention

• License data: stored locally in Keychain until you deactivate
• Local settings: retained until you delete the app
• AI conversations: stored locally, can be cleared in the app

No user data is retained on any vmount server.

Your rights

You can:

• Deactivate your license at any time (Settings › Deactivate)
• Delete all local data by removing the app
• Clear AI conversation history in the app

Since vmount does not store any user data on remote servers, there is no account data to delete. We do not sell your personal information.

EU and UK users (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the following rights under the GDPR / UK GDPR:

• Right of access — ask what data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data
• Right to restriction and objection — limit how your data is processed
• Right to data portability — receive a copy of your data
• Right to lodge a complaint with your local supervisory authority

Lawful basis: we process your license key and machine ID under the lawful basis of contract performance (Article 6(1)(b)) — we need this data to deliver and enforce the license you purchased. We do not process any data on the basis of consent or for direct marketing.

To exercise any of these rights, email support@vmount.app. For payment-related data, contact Paddle directly via paddle.com/legal/privacy.

California users (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of that information, and not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under the CCPA / CPRA. The categories of information we collect are limited to license key, machine ID, and your IP address (visible to our hosting provider during request handling). To exercise your rights, email support@vmount.app.

Cookies and local storage

This website does not set tracking cookies and does not use analytics. Cloudflare may set a small number of essential cookies for security and bot protection. The Paddle checkout page (when you click Buy) sets cookies under Paddle's privacy policy.

Children's privacy

vmount is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected in this document with an updated date.

Contact

Questions about privacy? Email support@vmount.app.