We collect what we need to sell you software and support you, and nothing else. No analytics, no advertising, no tracking.
Last updated:
This policy explains what Dunne, Corp. (“DunneCorp”, “we”) collects through this website and our software, and what we do with it. We are the controller of the personal data described here, except payment data, which Paddle controls (see below).
The short version
This website runs no analytics, advertising or tracking scripts.
Our desktop software keeps your work on your own computer. The only thing it ever sends us is a subscription's licence key, to renew it.
We hold the details of your account, your purchases and your messages to us, and use them only to provide what you bought and to help you.
We never sell your data.
What the website collects
When you create an account
Your name and email address, and a password, stored only as a one-way bcrypt hash, never in a form we can read. If you sign in with Google, we keep the name and email address Google gives us instead of a password. Google also sends a profile picture, which we don't keep.
When you buy
Paddle handles the checkout and your payment details; we never see your card number. Paddle tells us what you bought, so we store your Paddle customer ID, your licences and subscriptions, and their status. To issue your licence key, we also keep the dates of each paid month of a subscription and any refunds, which decide when a subscription becomes yours.
When you contact us or open a support ticket
A message through the contact form: your name, email address and what you write, so we can answer. A support ticket: what you and we write, attached to your account, as a record of your support history.
To keep the site secure
Sign-in cookies. When you sign in, the site sets cookies that keep you signed in, for up to 7 days, and protect forms against forgery. They are strictly necessary, so we don't ask for consent, and they are not used for tracking. Changing or resetting your password signs you out everywhere.
Abuse limits. To stop password guessing, spam and misuse of licence renewal, we count recent attempts per IP address, per email address and per account. The counters store only a one-way code made from the address, never the address itself. Each counts for at most an hour and is then deleted automatically, normally within a few hours and always within about two days. Our firewall also counts requests per IP address over five minutes to block floods; it keeps no record of them.
Server logs. Our servers log errors and events, such as a failed email or a payment notification, to keep the service running and to investigate problems. We keep names, email addresses, passwords, links and licence keys out of them. They are kept for no more than 90 days.
Our previous website. Until October 2026, www.dunnecorp.com was a different, simpler site, whose hosting kept standard access logs of each visit, including the IP address. Those logs are deleted automatically within 90 days, and the new site doesn't keep them.
Security monitoring. We record administrative actions on our own hosting account. This doesn't record ordinary visits; an alert about an attack on our servers may include the attacking IP address.
Why we use it (legal bases)
To create your account, deliver what you buy and support you: because it is necessary for our contract with you.
To secure the site and prevent fraud and abuse: our legitimate interest in keeping the service safe.
To keep records the law requires, such as of sales: our legal obligations.
We send you email only about your account, your purchases and your support requests. We don't send marketing email.
Who we share it with
Only with the service providers that run parts of the service for us, each bound to use it only on our instructions:
Paddle.com, our reseller and Merchant of Record, which processes payments, tax and refunds, and is responsible for the payment data it collects under its own privacy notice.
Amazon Web Services, which hosts the website and its database in the United States, and delivers our emails, such as address verification and password resets.
Google, only if you choose to sign in with Google.
Stripe, only if you pay an invoice from us by card (used for our IT services, which are currently paused).
We may also disclose data when the law requires it, or to protect our rights or someone else's safety. If Dunne, Corp. were sold or merged, the buyer would take on this policy.
International transfers
We are based in the United States, and the website and its data are hosted there. If you use the site from elsewhere, including the UK or the EU, your data is transferred to the United States. We rely on our providers' data processing terms, including the standard contractual clauses where the law requires them, to protect it.
How long we keep it
Your account, until you ask us to close it.
Records of purchases, for as long as tax and accounting law requires (generally seven years), even after an account is closed.
Contact-form messages, for 90 days, after which they are deleted automatically.
Support tickets, for as long as your account is open, or until you ask us to delete them.
Abuse counters for up to an hour (deleted within about two days), and server logs for up to 90 days.
Deleted data can remain in our encrypted database backups for up to 14 days, until those backups expire.
Our desktop software
DunneNote, DunneWrite and DunneFlow run on your own computer. They contain no analytics, telemetry, crash reporting or automatic update checks. The one connection any of them makes to DunneCorp is to renew a subscription's licence key:
A licence from a one-time purchase, or from a subscription that has become yours, is checked on your computer. It never contacts us.
While you subscribe, DunneNote and DunneWrite renew their licence key with license.dunnecorp.com about once a month, and when you ask them to. Each renewal sends only the current key, which holds your account ID, the product and your licence dates, and gets a new one back. The request also names the app and its version (for example DunneNote/0.9.2). Nothing else about your computer, your files or how you use the app is sent, and there is no device or install ID. Like any request, its IP address is counted by the abuse limits described above.
Apart from that:
DunneNote stores notebooks as folders on your disk. It connects to a network only for backups you set up yourself, to a storage service or computer you choose, and to renew a subscription's licence key.
DunneWrite stores your stories on your disk. Its AI features send the text they work on (for example your notes, story bible or a chat message) directly from your computer to the AI provider you choose (Anthropic, Google or your own Ollama server), using your own key. That provider's terms and privacy policy apply; we don't receive or see that text. Your keys are stored encrypted on your computer. A support bundle is sent to us only if you choose to email it.
DunneFlow analyses source code on your computer and runs its viewer on your computer only. It makes no other network connections.
Your rights
You can see and correct most of your details in the customer portal. Wherever you live, you can also ask us to give you a copy of the personal data we hold about you, correct it, delete it, or stop or restrict using it. Write to support@dunnecorp.com from the email address on your account and we'll respond within 30 days. Depending on where you live, you may also have the right to complain to your data protection authority.
Security
The site is served only over HTTPS, passwords are hashed with bcrypt, and access to our systems is limited to the people who need it. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Children
This website is not directed at children under 16, and we don't knowingly collect their personal data. If you believe a child has given us data, tell us and we will delete it.
Changes
If this policy changes, the date at the top of this page changes with it, and if the change is significant we'll email account holders first.