Privacy Policy

Last updated: July 2026

This Privacy Policy explains what data Mashyo collects, why, and how it’s handled — across our desktop applications (SIVA, SHARA, MIRAY, and LockSpot, together the “Apps”), this website, and the checkout you use to buy a license, whether that’s through the Microsoft Store or directly through creatorkit.mashyo.com.

Our guiding architecture principle is what we call Intentional Apps Isolation: each App is built to do its job entirely on your device, using local Windows APIs, without needing to send your screen, input, or usage data anywhere. We didn’t bolt privacy controls on afterward — we built the Apps so there’s rarely anything to control in the first place.

Our Apps: Local-First by Design

Every App in the Creator Kit is self-sufficient by design. We don’t just avoid misusing your data — we engineered the Apps so we never receive it in the first place.

SIVA | Your Visual Precision

  • On-device analysis: SIVA uses Windows graphics APIs to detect contrast edges and measure distances. This happens in your device’s memory for the moment of measurement, and is never streamed, transmitted, or analyzed by external servers.
  • User-directed capture: Screenshots, measurements, and color codes are generated only on your explicit command, and saved directly to your local clipboard or file system. We have no server-side copy and no access to this data.

SHARA | Your Digital Focus

  • Real-time, not recorded: Features like the Cursor Halo, SHARA Wheel, and on-screen keystroke visualizer process your mouse and keyboard input live, in temporary memory, purely to render the visual effect.
  • Non-persistent design: We do not log, record, or archive your keystrokes or mouse movements. The data exists for the millisecond it takes to draw the effect, then it’s gone.

MIRAY | Your Ambient Vision

  • Localized settings: From ring light warmth to your Teleprompter scripts, every preference is stored exclusively in your local application directory — never in the cloud.
  • Zero telemetry: We don’t monitor your usage patterns or read your teleprompter content. MIRAY does its work in total isolation.

LockSpot | Your Cursor Boundary

  • Local containment only: LockSpot confines your cursor to a chosen monitor or region using standard Windows input APIs. As with our other Apps, this happens entirely on-device — we don’t see, log, or transmit your cursor position or monitor layout.
  • Local presets: Any hotkeys or zone presets you configure are stored on your machine, the same way as MIRAY’s settings.

None of our Apps contain analytics SDKs, crash reporters, or ad code. Once installed, an App makes no network connection back to us — full stop.

How You Get Our Apps

You can get our Apps two ways, and a different party handles your purchase data depending on which one you choose.

  • Microsoft Store: Microsoft manages installation, licensing, updates, and your payment under its own privacy standards. We only see high-level, anonymized metrics — total downloads and country-level breakdowns — never your identity, payment method, or Microsoft account details.
  • Direct purchase via Paddle: When you buy directly on creatorkit.mashyo.com, checkout is handled by Paddle.com Market Ltd (“Paddle”), our payment provider and Merchant of Record. Paddle collects the personal data needed to complete your order — typically your name, email address, billing address, and payment details — and issues your receipt and license key. Paddle acts as an independent data controller for this information under its own Privacy Policy. We receive your order confirmation and the minimum details needed to support you (like your email and order ID); we never see or store your full payment card details.

Our Website (creatorkit.mashyo.com)

Unlike our Apps, this website is a standard marketing site and uses common web technologies to understand traffic and ad performance.

  • Analytics: We use Google Analytics to understand aggregate traffic — which pages get visited, how people arrive here, and general engagement. This helps us prioritize what to build next and keep our software prices sustainable.
  • Advertising: We may use advertising pixels (such as Google Ads or Meta) to measure how our campaigns are performing.
  • Cookies: These tools rely on cookies and similar technologies. You can control or block cookies in your browser settings, and where required by law, we’ll ask for consent before loading non-essential trackers.

The guarantee: none of this website tracking ever reaches the Apps. Once you download SIVA, SHARA, MIRAY, or LockSpot, you’ve left the tracking zone — the Apps contain no analytics code, no pixels, and no connection back to our marketing data.

How Long We Keep Data

  • Support emails: Kept only as long as needed to resolve your request, then routinely archived or deleted.
  • Purchase records: Order data from Paddle-processed transactions is retained as required for accounting, tax, and legal obligations. Paddle’s own retention practices apply to the data they hold directly on your transaction.
  • Website analytics: Retained in line with Google Analytics’ standard retention settings, which you can review in Google’s own policies.

Your Privacy Rights

Depending on where you live, you may have rights over your personal data — for example under the GDPR (EU/UK) or the CCPA (California). Where applicable, this can include the right to:

  • Access the personal data we, or our processors, hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing, including analytics and advertising
  • Receive a copy of your data in a portable format

To exercise any of these rights over data we hold directly, contact us at support@creatorkit.mashyo.com. For data tied to a Paddle-processed purchase — like your receipt, billing address, or payment method — you’ll generally need to go through Paddle directly, since they’re the data controller for that transaction.

Children’s Privacy

Our Apps and website aren’t directed at children, and we don’t knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we’ll remove it.

International Data Transfers

Mashyo, Google, and Paddle may process and store data in countries other than your own. Where this involves transferring data out of the EU/UK, our processors rely on appropriate safeguards, such as Standard Contractual Clauses, as required by applicable law.

Communication & Support

When you reach out for support, you’re talking to a human, not a database.

  • Support in context: We maintain email correspondence only as long as necessary to resolve your technical needs.
  • Strictly non-marketing: Your contact info stays in our secure inbox — it’s never funneled into automated marketing lists or third-party databases.

Reach us any time at support@creatorkit.mashyo.com.

Changes to This Policy

We may update this Privacy Policy as our Apps, our website, or applicable law changes. We’ll update the “Last updated” date above whenever we do, and for material changes, we’ll make a reasonable effort to flag it prominently on this page.