Recto — Privacy Policy
Recto is a desktop application that turns AI conversations into a book you can browse, mark and search. It runs entirely on your device. There is no account, no sign-up, and no server operated by us. The app includes a local 7-day trial of the AI features; starting it requires no email and sends nothing.
1. What we collect
The app itself collects nothing. Recto contains no telemetry, no analytics, no crash reporting, no advertising SDK, and no tracking of any kind. We have no way to know that you installed it, what you read, or how you use it.
The only time we receive personal data is when you choose to contact us to buy a licence: the email address you write from, the messages you send us, and the payment receipt you forward. Nothing is collected automatically.
2. Where your data lives
- Books, chapters, highlights, notes, settings, your licence (
license.json) and the trial record (trial.json) are stored in a single folder on your own computer:%APPDATA%\ai-chat-book. - Conversation files you import are parsed locally. They are never uploaded.
- The app listens only on
127.0.0.1(your own machine) and is not reachable from your network or the internet. - If you installed Recto from the Microsoft Store, Windows may keep app data in a package-specific folder and remove it when you uninstall. Back up your library before uninstalling if you want to keep it.
3. Network requests
Recto makes outbound network requests only in these cases:
- AI features, when you use them. The request goes directly from your computer to the AI provider you configured (for example DeepSeek, OpenAI or Anthropic), using your own API key. We never see the request, the key, or the answer.
- Price catalogue refresh, when you click “Update price list”.
This fetches a public JSON file of model prices from jsDelivr
(
cdn.jsdelivr.net). It contains no personal data and no identifiers. - Licence validation is offline. An activation code is verified on your machine with a public-key signature. No activation server is contacted.
- Starting and checking the trial is local. The first successful
AI request writes one timestamp to
trial.jsonon your machine; later checks only read it. Nothing is sent anywhere.
If you never use AI features and never refresh the price list, Recto makes no network requests at all.
4. Your API key
Your API key is stored only in your local settings file and is sent only to the provider you selected. It is never transmitted to us.
5. Licence codes and the trial
A licence code contains the email address you gave when ordering — whether that was a trial request or a purchase — so that the app can show “Licensed to …”. It is not checked against any server, it is not tied to a device, and it is not uploaded anywhere. Remove the code in Settings to delete it.
The trial is separate from a licence code. It is stored in trial.json as
a single start timestamp: no email address, no device identifier, no licence ID.
It never leaves your computer.
6. Third-party services
- AI providers. When you use an AI feature, the provider you configured (for example DeepSeek, OpenAI or Anthropic) receives the text you choose to send and handles it under its own privacy policy. We are not involved in and have no access to that exchange.
- PayPal. If you buy a licence, payment is processed by PayPal. PayPal receives your payment details and email address; we receive your email address and the receipt you forward. PayPal handles that data under its own privacy policy.
- Microsoft Store. If you installed Recto from the Store, Microsoft handles distribution and Store data under its own policy. Microsoft does not give us your usage data.
7. Children
Recto is not directed at children under 13 and we do not knowingly collect data from anyone. The only personal data we hold is what you send us when buying a licence.
8. Purchase records and retention
When you buy or request a licence, we keep the email thread and a local issuance log
at %USERPROFILE%\.recto\issued.jsonl. The log contains the email
address, licence ID, issue/expiry dates and the licence code. We use it to re-send a
code, handle refunds and prevent duplicate referral rewards, and we keep it while
the licence is supported.
You can ask us to delete these records at GeRui2936@163.com. We will delete the log entry and the email thread, except records we are required to keep for tax or accounting purposes, or to resolve a dispute. Deleting purchase records does not deactivate a licence you already have.
9. Deleting your data
App data: everything Recto stores is in
%APPDATA%\ai-chat-book. Delete that folder (or uninstall the app and
remove the folder) and all of it is gone. We hold no copy.
Purchase records: these live in our mailbox and in the issuance log described in section 8. Email us to have them deleted.
10. Refunds
Licence purchases are refunded through PayPal. We refund in full if a code cannot be activated and we cannot fix it. Referral rewards are paid as refunds under the terms shown on the purchase page: full during the launch offer, half afterwards.
11. Changes
If this policy changes, the “Last updated” date above changes with it. Material changes will also be noted in the app’s release notes.
12. Contact
Questions about privacy: GeRui2936@163.com
Recto 隐私政策
Recto 是一个把 AI 对话整理成书的桌面软件。它完全在你的电脑上运行：没有账号、 不需要注册，我们也没有任何服务器。应用内含 7 天 AI 功能试用；开始试用不需要 邮箱，也不会发送任何数据。
一、我们收集什么
应用本身什么都不收集。 Recto 没有遥测、没有统计分析、 没有崩溃上报、没有广告 SDK，也没有任何形式的追踪。我们无从知道你装了它、 读了什么、怎么用。
唯一会收到你的个人信息的情况，是你主动写信购买授权码：你发信用的邮箱、 邮件内容，以及你转发的付款凭证。这些都不是自动收集的。
二、你的数据存在哪里
- 书、章节、划线、批注、设置、授权文件（
license.json）和试用记录 （trial.json）都存在你自己电脑上的一个目录里：%APPDATA%\ai-chat-book。 - 你导入的对话文件在本机解析，不会被上传。
- 程序只监听
127.0.0.1（本机回环地址），局域网和互联网都访问不到。 - 如果你是从微软商店安装的 Recto，Windows 可能把应用数据放在商店专用目录里， 卸载时一并删除。想保留书库，卸载前先备份。
三、网络请求
Recto 只在下面这几种情况下访问网络：
- 你主动使用 AI 功能时。 请求从你的电脑直接发给你自己配置的 AI 服务商（例如 DeepSeek、OpenAI、Anthropic），用你自己的 API Key。 我们既看不到请求，也看不到 Key 和回答。
- 点「更新价目」时。 从 jsDelivr（
cdn.jsdelivr.net） 拉取一份公开的模型价目 JSON，其中不含任何个人信息或标识符。 - 授权码校验是离线的。 授权码在你的电脑上用公钥签名验证， 不连接任何激活服务器。
- 试用的开始和检查都在本机。 第一次成功调用 AI 时，程序往
trial.json写一个开始时间；之后只读这个文件。任何数据都不会 发出去。
如果你既不使用 AI 功能也不更新价目，Recto 完全不联网。
四、你的 API Key
API Key 只保存在本机的设置文件里，只发给你选定的那家服务商，绝不会发给我们。
五、授权码与试用
授权码里含有你下单时提供的邮箱地址（无论是领试用还是购买），仅用于在设置里 显示「已授权给 …」。它不与任何服务器核对、不与设备绑定、也不会被上传。 在设置里移除授权码即可删除。
试用和授权码是两回事。试用只存在 trial.json 里，内容是一个开始
时间：没有邮箱、没有设备标识、没有授权编号，也不会离开你的电脑。
六、第三方服务
- AI 服务商。 当你使用 AI 功能时，你主动发送的文字由你配置的 服务商（例如 DeepSeek、OpenAI、Anthropic）接收，并适用其自己的隐私政策。 我们不参与、也无法访问其中的内容。
- PayPal。 购买授权时，付款由 PayPal 处理。PayPal 会收到你的 付款信息和邮箱；我们会收到你的邮箱和你转发的付款凭证。PayPal 按其隐私政策 处理这些数据。
- 微软商店。 如果你从商店安装，分发和商店数据由微软按其政策 处理。微软不会把你的使用数据交给我们。
七、儿童
Recto 不面向 13 岁以下儿童，我们也不会有意收集任何人的数据。我们持有的唯一 个人信息，是你购买授权时主动发给我们的内容。
八、购买记录与保留
当你购买或申请授权时，我们会保留邮件往来，并在本机记录
%USERPROFILE%\.recto\issued.jsonl。这个文件包含邮箱、授权编号、
签发/到期日期和授权码本身。用途只有三个：补发授权码、处理退款、防止同一笔
推荐被重复兑现。只要这个授权还在支持期内，我们就保留这些记录。
你可以写信到 GeRui2936@163.com 要求删除 这些记录。我们会删掉发码记录和邮件往来；依法需要保留的税务/账务记录，以及 处理争议所必需的记录除外。删除购买记录不会让你已有的授权失效。
九、删除你的数据
应用数据：Recto 保存的所有内容都在
%APPDATA%\ai-chat-book 里。删掉这个目录（或卸载程序后再删掉它），
你的数据就全部消失了。我们这边没有副本。
购买记录：它们在我们邮箱和第八节说的发码记录里。发邮件给我们 即可删除。
十、退款
授权购买通过 PayPal 退款。授权码无法激活且我们修不好时，全额退款。推荐奖励 也按购买页写明的规则以退款形式兑现：活动期内退全款，活动结束后退一半。
十一、政策变更
如果本政策有改动，上面的「最后更新」日期会同步修改；重要变更还会写进更新说明。
十二、联系方式
隐私相关问题请写信到：GeRui2936@163.com