This policy covers SecAIQ Watch for Mac, the desktop app for macOS sold at secaiq.com/watch. Effective 15 October 2026.
In short: the app does not collect your data and does not send it anywhere.
- What SecAIQ Watch finds on your Mac (tools, settings, findings, usage, network activity) stays on that computer. None of it is sent to us or to anyone else.
- No account, no ads, no analytics, no tracking, no crash reporting.
- The only connections the app makes are to secaiq.com, to check your license and to look for updates. They carry no scan data. Section 3 lists exactly what they contain.
1. What the app reads on your computer
To do its job, and only on your computer, the app reads:
- Running processes and AI tools: which AI coding tools and related processes run, with their start-up flags (only the flag names are kept).
- Configuration and settings files of AI tools and editors (for example MCP server lists, permission and auto-approve settings, extension lists) and project settings folders. It checks them for risky settings and for secrets such as API keys, and it shows the finding, not a copy of the secret.
- Network connections: which destinations the AI tools connect to, and the host names they look up.
- Usage logs written by the tools (for example token counts and tool calls) to show activity and cost.
On a Mac, some of this needs permissions such as Full Disk Access that you grant yourself in System Settings. The app never reads your messages, documents, photos or what you type, and it does not read the content of network traffic.
2. Where this data stays
Everything the app collects is stored in a database on your computer. It is not sent to us. You can delete it from the app, and it is removed when you delete the app's data. Reports (HTML or Markdown) are created on your computer and leave it only if you send them yourself. The "Copy diagnostics" button copies a short technical summary to your clipboard for support; you decide whether to send it, and it does not include your license key, email address, file paths or scan data.
3. The only things that reach our servers
The app talks to secaiq.com for these two purposes, and nothing else:
- Licensing: when you activate or refresh a license, the app sends the license key (or its token), a hash of your computer's device identifier (never the raw value), the computer's name. Our license server stores your email address, the license key, the plan, renewal and end dates, and the device hash. The license token is kept on this device only: in your Mac's Keychain. It also asks whether sales are open so the trial counter works correctly; no personal data is sent.
- Updates: the app can download a small update feed from secaiq.com and, if you allow it, the update itself; the request carries the app version and macOS version and nothing else about your Mac.
Like any web request, our server may briefly keep standard access logs, such as IP address and time. The "Manage subscription" button opens your Dodo Payments page in your browser; that is your browser talking to Dodo Payments, not the app.
4. Payments
Purchases are processed by Dodo Payments as Merchant of Record. Dodo Payments collects and handles your payment details, billing address and tax information under its own privacy policy (see dodopayments.com). We never see your card number. Dodo Payments gives us your email address and the order and subscription details we need to issue your license and to support you.
5. Emails
We use your email address to send your license key and licensing messages (for example a re-send you ask for). We do not use it for marketing unless you separately subscribe to our newsletter.
6. Sharing and retention
We do not sell or rent your data and we do not share it for marketing. We share licensing and order data only with Dodo Payments (to process your order and subscription), with Resend, the service that delivers our license emails, and with authorities where the law requires it. We keep licensing records for as long as your license exists and as long as needed for our legal and accounting obligations.
7. Your rights
Depending on the law that applies to you, you may ask which data we hold about you, ask for corrections, or ask us to delete it. Write to contact@secaiq.com from the address used for your license.
8. Children
SecAIQ Watch is a tool for developers and professionals and is not directed at children under 16.
9. Who is responsible, changes and contact
SecAIQ (Safa PAKSU, Founder), Türkiye, is the data controller for the licensing and support data described in this policy. Dodo Payments is an independent controller for your payment, billing and tax data. If this policy changes, we will update this page together with its effective date. Questions: contact@secaiq.com.