Privacy Policy
Last Updated: September 2026 • Local-First Architecture • Created by Punit Pawar
1. Our Core Principle: Local-First Privacy
Unlike conventional cloud AI platforms that record, store, and train on your proprietary workflows, Victor AI is engineered as a local-first desktop application.
Your conversation history, voice audio, persona files (SOUL.md), long-term memories (MEMORY.md), documents, screenshots, and agent execution logs remain strictly on your local computer at all times.
2. Hardware-Level API Key Encryption (DPAPI)
Because Victor AI uses a Bring Your Own Key (BYOK) model, your API keys represent your own financial budget. To guarantee total security:
- All provider API keys (Google Gemini, OpenRouter, Groq, OpenAI) are encrypted using Windows DPAPI (Data Protection API) via Electron's
safeStorage. - Your keys are tied directly to your Windows user account hardware fingerprint and cannot be read by other accounts, external processes, or unauthorized machines.
- Victor AI never transmits your API keys to our servers. They are communicated strictly via encrypted TLS/HTTPS directly to your chosen AI model endpoint.
3. What Information We Collect (Account Licensing Only)
We collect only the bare minimum information necessary to issue, verify, and maintain your Lifetime software license:
Your Full Name, Gmail address, WhatsApp number, and Country entered during checkout.
Transaction ID / payment reference number to verify your one-time lifetime license payment.
This licensing information is securely stored in our managed Google Firebase Firestore database (vision-f1e0d) and is accessed solely to grant and verify authorization for your account.
4. What We NEVER Collect
- We NEVER collect your chats, prompts, voice recordings, or LLM responses.
- We NEVER collect desktop screenshots taken during Computer Control automation.
- We NEVER sell, trade, or share your contact info with third-party advertisers.
5. Data Retention & Deletion
You have full sovereignty over your local data. To erase all local chats, memories, and configurations, simply delete the Documents/Victor AI Data directory on your PC.
To request complete deletion of your account record and registration data from our cloud Firestore database, you can contact Punit Pawar at any time.
6. Contact Us
If you have questions regarding this Privacy Policy or your data rights, contact:
Creator & Lead Architect: Punit Pawar (India) • Email: privacy@victorai.com