A few things to know first.
Local editing does not require uploading files. Sending AI content requires consent and currently involves Cloudflare, OpenRouter and Google Gemini. Background installation registration and necessary usage and security records are separate from AI content consent. You may withdraw consent or contact support with a data request.
01. Scope and operator
This Privacy Policy explains how Synvola Grid LLC (“we,” “us” or “our”) handles information when providing the AI Office desktop app, related AI services, official website and customer support. Local editing and online AI services involve different data processing, as described below.
This page reflects the features and processing of the current prerelease version. We will update this policy and the in-app notices if these change at launch. Independent third-party services, app stores and external links you choose to visit are governed by their own policies.
02. Local files and app settings
AI Office opens, edits and saves files such as DOCX, XLSX and PPTX on your Mac, and provides PDF reading. Local editing does not require uploading files to us. The current version does not offer cloud document synchronization.
Depending on the features you use, the app stores necessary settings, recent-file information, editing recovery data or conversation state locally. These may contain file names, paths or document content, and help restore your work and maintain the app experience. They are managed by your device, your chosen storage locations and operating system backup mechanisms. If you place files in iCloud or another synchronized folder, that service controls the synchronization.
The app does not automatically upload every open document for AI processing. Relevant content sent when you authorize and use AI is described next.
03. AI processing, recipients and consent
When you authorize and actively use AI, the app sends your instructions, relevant content from the current file, attachment content and the current conversation to understand your request, answer questions or help modify files. Relevant context may include paragraphs, spreadsheet data, formulas or slide text. Depending on the task, it may extend beyond the text currently selected.
The current processing chain is: AI Office’s secure proxy, hosted by Cloudflare → OpenRouter → Google Gemini. Our proxy forwards requests and results and applies authentication, quota and security controls.
Before sending AI content for the first time, the app explains the purpose and recipients and asks for explicit consent. You may decline or withdraw consent in Settings → About. Local editing remains available. After withdrawal, using AI again requires renewed consent. Withdrawal does not automatically delete existing service records or undo processing already completed by third parties.
We do not store normal AI request or response bodies in our business database as a conversation archive. However, requests and responses must pass through the service chain, and fault diagnostics may include upstream error summaries, as described below. Third-party retention, training use, abuse review and legal obligations depend on actual service configurations and applicable policies. This policy does not guarantee end-to-end zero retention or that third parties will never use content for training.
Only send content you are authorized to provide. Remove unnecessary personal information, confidential materials, passwords and sensitive data before sending. You may choose to use only local editing.
04. Installation, usage and security records
The app has no visible personal account registration or sign-in flow, but it registers an installation instance for AI services in the background. Background registration may occur at startup, before you consent to sending AI content. This does not authorize sending document content. The service issues separate authentication credentials for each installation.
| Category | Information | Purpose |
|---|---|---|
| Installation and credentials | Random installation UUID, key identifier, signature verification secret, creation and last-active times, credential revocation status, quota tier and blocked status | Identify installation instances, authenticate requests and prevent credential abuse; no name or email is required |
| Usage metering | Date, request counts, reserved output tokens and related usage records | Enforce free allowances, manage costs and apply rate limits |
| Security checks | Timestamps, one-time random values, signatures, and IP HMAC digest buckets and counters used for registration limits | Prevent replay attacks, bulk registration and attacks on the service |
| Connection and diagnostics | Connection IP addresses and transport metadata; request identifiers, status codes, error messages and limited-length upstream error summaries | Provide connectivity, diagnose faults and protect service security; error summaries may include request-related information returned upstream |
Raw IP addresses are not written to our registration-limit business tables, but network recipients such as Cloudflare receive connection IP addresses while delivering their services. IP digests can still link registration activity and should not be treated as completely anonymous or unidentifiable data.
Separate client credentials are encrypted locally using mechanisms supported by macOS Keychain. The server stores the credentials needed to verify requests. Do not share authentication files from the app’s data directory.
05. Website, analytics and support
The current AI Office product configuration disables the upstream Google Analytics usage tracking. This website embeds no advertising trackers, third-party analytics scripts or external fonts. Its page scripts do not set tracking cookies or submit visitor information. The actual hosting service may still process necessary access data, including IP addresses, request times, browser request headers and security logs.
When you contact us by email or phone, we process the contact details, communications, problem descriptions and attachments you choose to provide, to reply, troubleshoot, handle privacy requests and keep support records. Remove sensitive content unrelated to your issue before sending screenshots, logs or sample files.
The current first release has no in-app purchases or subscriptions and does not submit payment card information to us. If paid services are introduced, we will update the relevant disclosures.
06. Purposes and legal bases
We process necessary information only to provide the local app and AI services, authenticate requests, meter allowances, prevent abuse, respond to support inquiries, handle rights requests and meet applicable legal obligations. We do not sell personal information or use it for cross-site targeted advertising.
Where applicable law requires a legal basis, we rely, depending on the circumstances, on processing necessary to provide the service you request; your consent to sending AI content; legitimate interests in service security, abuse prevention and support; and legal obligations. Where separate consent is required by law, we will obtain it before the relevant processing.
08. Retention and deletion
You manage local files and settings. Uninstalling the app may not remove all app data, Keychain records, documents you have saved or operating system backups. Local deletion does not automatically delete server records.
In the current implementation, replay-prevention random values older than an approximately 10-minute window are deleted when later requests trigger cleanup, rather than immediately on expiry. Installation identities, credentials, daily usage and registration-limit records do not yet have a uniform automatic expiration and deletion period. We therefore cannot promise deletion after a fixed number of days. You may use the contact details below to request access, deletion or credential revocation. We will verify the connection to the relevant installation and handle the request as applicable law permits. Security, dispute or legal retention requirements may limit deletion.
Retention of diagnostic logs, support records and provider-side data depends on troubleshooting, service, security and legal needs and each service’s settings. We have no verified, uniform end-to-end deletion period and do not promise that third-party data is deleted immediately when AI consent is withdrawn. Contact us if you need information about particular records.
09. Your choices and privacy rights
You may edit offline, decline or withdraw consent to sending AI content, control local files and backups, reduce the context you submit and contact support about server-side data. There is currently no personal account or in-app account deletion feature. Requests relating to installation instances are handled through support.
Depending on your location and applicable law, you may have rights to access, correct or delete information; restrict or object to processing; receive a copy or data portability; withdraw consent; and complain to a supervisory authority. Not every right applies to every type of data or circumstance. We will handle eligible requests within applicable statutory time limits.
Email [email protected] with the type of request, your platform and approximate usage dates. We may ask for reasonable evidence connecting you to the installation to prevent impersonation. Do not send keys, complete credentials or document content as identity verification material. Without necessary installation-related information, we may be unable to locate particular records.
10. Security and permissions
We use HTTPS, separate installation credentials, request signatures, timestamp and random-value checks, and server-side rate limits to reduce risk. No system can guarantee absolute security. Keep your device secure and maintain file backups.
The currently enabled features do not require audio or screen recording, and background recording is not provided. File access is subject to operating system permissions and your actions. Local editing does not mean that all app caches or user files receive additional encryption from us.
11. Minors
AI Office’s online AI features are intended only for users aged 18 or over and are not directed at minors. We do not knowingly collect personal information submitted by people under 18 to use AI. If you believe a minor has provided such information to us, contact support so we can verify the situation and take appropriate action.
12. Policy updates
We display the update date on this page. For material changes to data categories, purposes, recipients or your rights, we will notify you through the website or appropriate in-app notices. Where renewed consent is needed, continued use of local editing does not replace consent. This is a prerelease policy and will be checked again against the actual service before launch.
13. Contact us
For questions about this policy, data processing or privacy rights requests, contact: