Privacy Policy — Vantage & Crate Control

1. Overview

VANTAGE-APPS publishes two desktop applications: Vantage (AI-powered job search, Mac) and Crate Control (a rekordbox DJ library companion, Mac). Both run on your own computer rather than in the cloud. This policy explains, per application, what data each one handles, where it goes, and what control you have over it. Sections 2–4 apply to Vantage, sections 5–6 to Crate Control, and the rest to both.

2. Vantage — data stored on your device

Vantage stores your resume, job search results, application history, configuration, and (if you supply your own) API keys locally on your computer, in ~/Library/Application Support/Vantage/. This data is never uploaded to a Vantage-operated database or server for storage. Deleting that folder deletes your data.

3. Vantage — data sent to third parties (self-hosted mode)

If you supply your own API keys, the App sends the relevant data directly from your computer to each service you've configured, governed by that service's own privacy policy:

Anthropic or Google (Gemini) — your resume text and job descriptions, to score jobs and tailor your resume
SerpApi — job title and location search terms, if configured
Hunter.io — company names, to look up likely hiring contacts, if configured
Resend — your email address, to send your job digest, if configured
Buffer — post text and your connected LinkedIn account, if you enable auto-posting

4. Vantage — data sent through the relay (license mode)

If you use a Vantage license instead of your own API keys, the same requests described above are routed through a relay service operated by us, which forwards them to the same third parties using our own keys. In this mode:

Request content (resume text, job descriptions, search terms, post text) passes through the relay in transit to fulfill your request. It is not permanently logged or stored beyond what's needed to process and, for cost purposes, meter the request.
Your license status (active/inactive, tier, expiration) is stored so the relay can validate requests.
If you connect LinkedIn via Buffer, an access token representing that connection is stored so future posts can be published on your behalf — this token is never sent to your device.

5. Crate Control — everything runs and stays on your Mac

All AI analysis in Crate Control — genre, moods, energy, vocal detection, cue points, similarity — runs locally on your Mac. Your audio is never uploaded anywhere. Analysis results, preferences, and database backups are stored in ~/Library/Application Support/Crate Control/; changes you approve are written to rekordbox's own database on your Mac. Nothing about your library is stored on a server we operate. Deleting that folder deletes everything the App has produced.

6. Crate Control — data sent out, only when a feature asks for it

A few features look things up on the internet. Each request goes directly from your Mac to the service named, is governed by that service's own privacy policy, and carries no account or identity of yours beyond your IP address:

Beatport — track titles and artist names, as search text, to match tracks and (if you enable it) suggest similar ones. No Beatport account is involved.
AcoustID — a compact acoustic fingerprint (a numeric summary of the sound, not the audio itself) plus the track's length, to identify tracks with missing or wrong metadata against the open AcoustID/MusicBrainz database.
Apple's iTunes Search API — track titles and artist names, to find artwork and store links.
Google (Gemini) — only if you enter your own Gemini API key for the optional suggestions source: the titles, artists and traits of the seed tracks you pick are sent to Google under your key.
GitHub — the update checker reads the public releases feed to see whether a newer version exists.
In-app feedback — if you send feedback, the message you typed, the email you optionally include, and the app version, macOS version and library track count travel to the developer's issue tracker and inbox so the report can be acted on.

7. Licensing, trials and billing (both apps)

Trials and license keys for both apps are issued and validated by our licensing server. It stores: the email address you start a trial with, your license key and its status (active/inactive, product, tier, expiration), and — for purchases — Stripe customer identifiers and the marketing channel you first arrived from (for example "google" or "reddit"). The website remembers that channel in your browser's local storage until you start a trial or purchase; it is not shared with advertisers. License checks from the apps send only the key and product name — never your library, resume, or any content. Payments are processed by Stripe; your card details go directly to Stripe and are never seen or stored by us. License keys and receipts are emailed to you via Resend and Stripe respectively.

8. What we don't do

We do not sell your data, use it for advertising, or share it with anyone beyond the specific third-party services described above that are necessary to provide the features you've enabled. Neither app contains analytics or telemetry, and the marketing website does not use tracking or advertising cookies.

9. Your control

Every outbound integration is visible and, where optional, off by default — Vantage integrations are configured in Config; Crate Control's external suggestions and Gemini source are opt-in Settings. Uninstalling an App and deleting its folder under ~/Library/Application Support/ removes all locally stored data. To request deletion of license, billing, or trial data held by the licensing server, email [email protected].

10. Children's privacy

Our apps are not directed at children under 16, and we do not knowingly collect data from them.

11. Changes to this policy

This policy may be updated as the apps evolve. Continued use after changes are posted constitutes acceptance of the revised policy.

12. Contact

Questions about this policy, or requests to access or delete data the licensing server holds about you: [email protected].