Privacy Policy for XShots

This policy explains how SELFARK LTD ("SelfArk") handles information when you use XShots for macOS. SELFARK LTD is the controller for personal information it receives as described in this policy.

Summary

XShots is local-first and does not require a SelfArk account. It does not include third-party analytics, advertising, or tracking, and it does not send your projects, source images, usage analytics, or crash reports to SelfArk.

Data stored on your Mac

Projects, imported screenshots, templates, localized copy, preferences, and exported images are stored on your Mac. XShots accesses files and folders outside its app container only when you select them through macOS file panels or grant access through macOS. SelfArk cannot access these files; you control their retention and deletion.

Purchases and Apple services

Apple processes optional purchases through StoreKit. XShots reads verified transaction information and keeps a minimal local purchase record in the macOS Keychain to calculate access. XShots does not configure that record for iCloud sync, and SelfArk cannot access it remotely; cross-device restoration depends on transactions Apple makes available through StoreKit. SelfArk does not receive payment card details.

If you use Apple’s system translation features, macOS may process the text and download language resources according to your system settings and Apple’s policies. SelfArk does not receive that text.

MCP and third-party clients

The bundled MCP helper runs locally and does not send content to SelfArk. An AI assistant or other MCP client you connect may process or transmit the text and images you provide under its own settings and privacy policy.

Support communications

If you contact SelfArk for support, SelfArk receives the email address, message, and attachments you choose to provide. SelfArk uses them only to respond, troubleshoot, or protect XShots and does not use them for advertising or tracking. Do not send passwords, payment card details, or files that are not needed to answer your request.

Legal bases

SelfArk relies on its legitimate interests to respond to support requests, troubleshoot and protect XShots, and keep proportionate business records, provided those interests are not overridden by your interests, rights, or freedoms. When processing is necessary to perform a contract with you or take steps at your request before entering into one, the lawful basis is performance of a contract. SelfArk also processes information when necessary to comply with a legal obligation.

Sharing and sale of information

SelfArk does not sell or rent personal information and does not share it for cross-context behavioral advertising. Personal information received by SelfArk may be disclosed only when reasonably necessary to:

• handle support communications through email and related infrastructure providers;
• comply with a valid legal obligation;
• protect users, SelfArk, or the public from fraud, abuse, or security threats; or
• complete a business reorganization subject to appropriate protections.

Apple services and any MCP client you choose to connect handle information under their own terms and privacy policies. XShots does not send your projects or source images to SelfArk.

Retention

Files and preferences stored only on your Mac remain under your control. Support and business communications received by SelfArk are retained only as long as reasonably needed to answer the request, maintain security and business records, resolve disputes, or meet legal obligations. Other providers retain information according to their own policies and your settings.

International processing

Email or support providers may process information outside the UK. If SelfArk makes a restricted transfer, it uses applicable UK adequacy regulations, appropriate safeguards, or another mechanism permitted by UK data protection law. Contact SelfArk for information about any applicable transfer mechanism.

Children's privacy

XShots is not directed to children and does not provide accounts or user profiles. SelfArk does not knowingly collect children’s personal information through the app.

Your rights

Subject to applicable law, you may ask SelfArk for access to personal information it holds about you, or ask SelfArk to correct, erase, or restrict its use of that information. You may also request data portability where applicable. These rights apply to information held by SelfArk, not files stored only on your Mac or information controlled independently by Apple or a connected third-party client.

You may object at any time to processing based on legitimate interests.

To make a data protection complaint to SelfArk, email support@selfark.com. You may also lodge a complaint with the Information Commissioner's Office. Contacting SelfArk first does not affect this right.

Security

XShots uses the macOS App Sandbox, user-controlled file access, StoreKit verification, and the macOS Keychain. You are responsible for securing your Mac, project folders, backups, and connected third-party clients.

Changes and contact

SelfArk may update this policy when XShots or legal requirements change. The revised policy and date will appear here, and any material change to data handling will be disclosed before the related version is released.

For privacy questions, email support@selfark.com. For product help, visit XShots Support.

Trademark notice

Apple, the Apple logo, iPad, iPhone, Keychain, Mac, macOS, and StoreKit are trademarks of Apple Inc., registered in the U.S. and other countries and regions. App Store and iCloud are service marks of Apple Inc., registered in the U.S. and other countries and regions.