Privacy Policy
Effective 30 July 2026 · Last updated 30 July 2026
Draft. This policy has not yet been finalised or reviewed by a legal professional, and contains unfilled placeholders. Delete this notice before publishing.
This policy explains what NameItRight does with your files and your account information. It is written to be read, not to be impressive.
NameItRight is operated by an individual seller based in Mangalore, Karnataka, India. For anything in this policy, contact support@nameitright.app.
The short version
- To suggest a filename, we have to read the file. Its contents are sent to our service and on to our AI provider, Anthropic.
- We do not keep your files. They are held in memory only for as long as the request takes, and are never written to storage.
- We keep a cryptographic fingerprint (a SHA-256 hash) of each file, plus its type and size, so that a retried request is not billed twice.
- NameItRight is a desktop app. There is no web-based uploader today, so there is no in-between web server holding your file while you wait — it goes from your computer to the request that renames it, and nowhere else.
- We do not sell your personal data, and this website runs no trackers or analytics.
What we collect
Account information
Your email address, and a password hash if you sign up with a password rather than Google. If you sign in with Google we receive your email address and name from Google; we do not receive your Google password.
File contents — transient
When you rename a file, its contents are transmitted to our service and forwarded to Anthropic so a name can be generated. This is the core function of the product and cannot be done without it.
For images, the app reduces the image locally before it is sent. For PDFs, only the first pages are used. Your files are not written to disk on our servers, are not placed in any storage bucket, and are discarded as soon as the response is returned.
There is no browser-based or web-upload version of NameItRight today — every rename goes through the desktop app, direct to our backend. That is why we can say files are never stored rather than stored briefly: there is no intermediate web server for them to sit on. If we ever add a browser-based uploader, this section will be rewritten to describe exactly how long a file would be held there before that feature ships, not after.
File metadata — retained
For each rename we store a record containing:
- a SHA-256 hash of the file (a one-way fingerprint — the file cannot be reconstructed from it)
- the detected file type and size in bytes
- the filename that was suggested
- the credits charged, and whether the request succeeded or failed
- the time of the request
We keep this so you can see your own usage history, so billing disputes can be resolved, and so duplicate requests are not charged twice.
Payment information
We do not receive or store your card details. Payments are processed by Dodo Payments, which acts as merchant of record. We receive a customer reference, your subscription status, and billing period dates.
Technical logs
Our servers log request metadata — a truncated account identifier, status code, timing, and error codes. Request bodies are never logged, so your file contents do not appear in our logs.
Who else processes your data
| Provider | What they process | Why |
|---|---|---|
| Anthropic | File contents, transiently | Generates the suggested filename |
| Cloudflare | Requests, account and usage records | Hosting, database, and network protection |
| Dodo Payments | Billing details and payment method | Takes payment as merchant of record |
| [EMAIL PROVIDER] | Your email address | Sends verification and account emails |
Anthropic's commercial terms state that they do not use data submitted through their API to train their models. Anthropic may retain data briefly for abuse monitoring under their own policy.
Why we process your data
We process account and usage data to run the service you signed up for — creating your account, metering and billing renames, and keeping your balance accurate. We process a smaller amount for our own legitimate interests: security, fraud and abuse prevention, and fixing things when they break. Where we ask for something optional, like marketing email, we rely on your consent and you can withdraw it at any time.
Where your data is processed
Our infrastructure runs on Cloudflare's global network, so requests are processed at a location near you. Account and usage records are stored in [DATA REGION]. Anthropic processes requests in the United States. If you are in the UK, EU, or another region with data transfer rules, this means your data is transferred outside your region, under [TRANSFER SAFEGUARD].
How long we keep things
- File contents: not kept. Discarded when the request completes.
- Rename records: 12 months, then deleted.
- Technical logs: 90 days, then deleted.
- Billing and credit records: kept for 7 years after account closure, because tax and accounting rules require it.
- Account details: until you delete your account, plus a short grace period.
Your rights
You can ask us to:
- give you a copy of the data we hold about you
- correct anything inaccurate
- delete your account and personal data
- export your usage history
Email support@nameitright.app and we will respond within 30 days. Some billing records must be kept even after deletion, for the reason given above.
Disclosure for legal reasons
We may disclose account or usage information if the law requires it, in response to a valid legal process, or where necessary to protect the rights, property, or safety of NameItRight, our users, or the public. We do not hand over data to anyone on request without one of those reasons applying, and file contents are not disclosable in the first place — we do not have them to give.
Links to other sites
Our site and our emails sometimes link elsewhere — to our payment provider's checkout page, for instance. Once you leave nameitright.app, this policy no longer applies. We are not responsible for the content or privacy practices of sites we do not operate.
Cookies
This marketing site sets no cookies and loads nothing from third-party servers — no fonts, no analytics, no tracking pixels. Once you sign in to an account, a single session cookie is used to keep you signed in. It is strictly necessary and is not used for advertising.
Security
Traffic is encrypted in transit. Your credentials are stored hashed, never in plain text. Desktop sign-in tokens are stored hashed on our side, and in your operating system's credential store on your machine. Our AI provider API key is held only in server-side configuration and is never included in the desktop app.
Children
NameItRight is not intended for anyone under 18, and we do not knowingly collect data from children. This is a contractual-capacity limit tied to the paid plans, not a claim that the product is otherwise unsuitable for a younger audience.
Changes
If we change this policy in a way that materially affects you, we will email you before it takes effect. The date at the top always reflects the current version.
Contact
NameItRight
Mangalore, Karnataka, India
support@nameitright.app