SelanxPrivacy policy
This policy covers Selanx Lite (from the Mac App Store), Selanx Pro, Selanx Cloud (the service your Macs report to) and the Selanx web app. They are run by [the company that runs Selanx] ("Selanx", "we", "us"). Questions: richwolf817@gmail.com.
In short
- Your Macs send security data to your account only after you agree to it, and you can withdraw that at any time.
- Home folder names are masked on the Mac before anything is sent. We receive the names of the sites and servers your Mac's programs connect to, but not the pages you visit, what you type or what you download.
- Your Macs' data is encrypted with a key that belongs to your account alone. Deleting the account destroys the key at once.
- AI review, research use and product email each need their own consent, and each is off until you turn it on.
- We don't sell or share your data, show ads, or track you across other companies' apps and websites.
What we collect
Your account
Your email address, and the sign-in details you set up (a password, a passkey, or both, and optionally a one-time-code app). Sign-in is handled by Amazon Cognito: we never see your password. We also keep when the account was made, your consent choices with the version of each text you agreed to, and the Macs on the account.
Security data from your Macs (the "service" consent)
With your consent, which the service can't work without, your Macs send your account:
- the connections each Mac makes: the program, the host name or address, and the port;
- with Selanx Pro, security events too: programs started, logins and privilege changes, settings changed, launch items added, and file events that the detection rules watch for;
- facts about each Mac: the name you give it, its host name, model, macOS version, the Selanx version, when it last checked in, and the state of its protection;
- the alerts Selanx raises from these, and any action taken in response (such as isolating a Mac).
Names of home folders are masked first: /Users/alex/Downloads/file is sent as
/Users/~/Downloads/file. Selanx doesn't send the pages you visit or their content, what you
type, or the content of what you download.
AI review of alerts (optional, the "AI review" consent)
When Selanx raises a serious alert on one of your Macs, it can send that alert and the events around it to Claude, an AI model made by Anthropic, running on Amazon Bedrock in Selanx's AWS account, for a second opinion. Amazon Bedrock doesn't keep these requests, train models on them, or pass them on. Without this consent, alerts still work; they just don't get an AI verdict.
Improving detection (optional, the "research" consent)
With this consent, Selanx can use de-identified data from your Macs to find new attacks and write new detection rules: patterns of programs and the destinations they connect to, with your account, your Macs and any names removed. A pattern is only used once it appears across at least five accounts or matches public threat data. Because these patterns can't be linked back to you, they aren't part of an export, and deleting your account doesn't change them.
Product news (optional, the "email" consent)
Occasional email about new Selanx features. Security alerts for your Macs are sent to your email either way, because they are part of the service.
Purchases
A Selanx Lite subscription is bought through the Mac App Store: Apple handles the payment and we never see your payment details. We receive Apple's signed record of the purchase (the product, its dates and status, and a transaction ID) so your account gets the plan you paid for. A Selanx Pro subscription bought on the web is handled by Stripe: we receive the plan, its status and dates, and Stripe's customer and subscription IDs, never your card number.
Running the service
Our servers log requests (the time, the route, the result and how long it took) to keep the service secure and working. These logs don't include what your Macs send.
How we use it
- To protect your Macs: rating their events, raising and emailing alerts, isolating a Mac when you or your rules say so, and showing you all of it in the apps and on the web.
- For AI review, improving detection and product email, only with the consent for each.
- To run your subscription, and to enforce your plan's limits.
- To keep the service and its users secure, prevent abuse, and meet legal obligations.
We don't sell your personal information, share it for advertising, show ads, or track you across other companies' apps or websites.
Where the law asks for a legal basis (the GDPR, for example): providing the service you signed up for (your account, your Macs' security data, purchases); your consent (AI review, research use, product email); our legitimate interest in keeping the service secure (request logs); and legal obligations.
Your choices
You can give or withdraw each consent at any time: on the web app's Privacy page, or in Selanx Lite's Privacy choices. Withdrawing the service consent stops your Macs from sending data; what was already sent is kept until it ages out or you delete the account. When the text of a consent changes, we ask you again: your earlier agreement doesn't carry over to wording you haven't seen.
How long we keep it
- Your Macs' security data: for your plan's retention period, 90 days by default, then it is deleted.
- Your account, its consents, its Macs' records and alerts: while the account exists.
- A data export: the download link works for 15 minutes, and the file is deleted within 2 days.
- When you delete your account, your account's key is destroyed at once, which makes everything encrypted with it unreadable. Everything else is erased within 30 days, and backups age out on the same schedule.
Your rights
You can download everything we hold about your account (Privacy, then Download my data) and delete your account (Privacy, then Delete my account, on the web, or Delete account in Selanx Lite). Depending on where you live, you may also have the right to correct your information, object to or restrict its use, and complain to a data protection authority. Write to richwolf817@gmail.com for anything the apps don't do for you. We answer within 30 days, and we don't treat you differently for using these rights.
Deleting your account doesn't cancel a subscription bought in the App Store: cancel it in your Apple Account's subscription settings.
How we protect it
Each account has its own encryption key (AES-256), made and wrapped by AWS Key Management Service. What your Macs send is encrypted with it before it is stored. Each Mac has its own key, kept in its Secure Enclave where it has one, and signs what it sends, so nobody else can send data as your Mac. Everything travels over TLS. Access inside Selanx is limited to what each part of the service needs.
Who processes it for us
| Company | What for |
|---|---|
| Amazon Web Services | Hosting, storage, sign-in (Amazon Cognito), email (Amazon SES), and AI review (Amazon Bedrock) |
| Anthropic | Makes Claude, the AI model used for AI review. It runs on Amazon Bedrock in our AWS account, so Anthropic doesn't receive your data. |
| Apple | Mac App Store purchases of Selanx Lite |
| Stripe | Web purchases of Selanx Pro |
Each may use what it processes only to provide its service to us. We may disclose information when the law requires it, and we will tell you unless the law forbids it.
Where it is kept
Selanx Cloud runs in the United States (AWS's us-west-2 region, Oregon). If you are outside the United States, your information is transferred there, with the safeguards the law requires for such transfers.
Children
Selanx isn't meant for children under 16, and we don't knowingly collect their information. If you think a child has given us information, write to us and we will delete it.
Changes to this policy
We'll post any change here with a new effective date. If a change matters to how your data is used, we'll tell you by email or in the apps first, and any change to what a consent covers asks you for that consent again.
Contact
[the company that runs Selanx], richwolf817@gmail.com.