Privacy Policy

This Privacy Policy describes how Beastly, Inc. ("Beastly," "we," "us") collects, uses, and shares information in connection with Rushes, a macOS application. Beastly, Inc. is the data controller for the purposes of this policy. If you have any questions, contact us at support@getrushes.com.

The local-first principle

Your interview footage and other media files never leave your machine. Rushes does not upload, transmit, or store your video or audio files. Transcription runs locally and on-device — the speech-to-text step happens entirely on your Mac, with no media sent to us or to any third party.

The only content that ever leaves your device is transcript text, which is sent to our AI analysis provider so that quotes can be organized by concept and theme (see "What we collect" and "Subprocessors" below). Your media itself is never part of that.

What we collect and why

The free trial requires no account and no email. During the trial, your installation is identified only by an anonymous device identifier, used solely to enforce trial limits and prevent abuse. We collect your email only when you choose to subscribe.

• Email address — to create and manage your account, handle billing, and send you a magic link to sign in.
• A device identifier, analysis-run counts, and request timestamps — to enforce trial limits, prevent abuse, and operate the service reliably.
• Transcript text — transmitted to our AI analysis provider (Anthropic) so your interview content can be organized into concepts and themes. This is the text generated by on-device transcription; the underlying media is never sent.
• Payment details — handled entirely by Stripe. We never see or store your full card number or other card data; Stripe processes payments and acts as merchant of record.

What we do not collect

• Your footage and media — never transmitted, never uploaded, never stored by us.
• Request and response content bodies — we do not log the content of your analysis requests or responses. Only metadata (device identifier, run counts, and timing) is logged for service operation and abuse prevention.

Subprocessors

We rely on a small set of third-party providers to operate Rushes. Each processes only the data needed for its function:

• Anthropic — AI analysis of transcript text (organizing quotes by concept and theme). Privacy policy
• Stripe — payments, merchant of record, and billing. Privacy policy
• Supabase — authentication and account/subscription storage. Privacy policy
• Resend — transactional email (such as sign-in magic links). Privacy policy
• Vercel — hosting for our backend and analysis proxy. Privacy policy
• Redis Cloud (Redis Ltd.) — logging of usage metadata. Privacy policy

International data transfers

Beastly, Inc. and its subprocessors process data in the United States. If you access Rushes from outside the United States, your information (such as your email and transcript text sent for analysis) will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards for such transfers.

Data retention

• Account data (such as your email and subscription record) is retained while your subscription is active and for up to 12 months after cancellation or lapse, after which your personal account data is deleted — except transaction and tax records, which we retain as required by law (up to 7 years).
• Usage logs (device identifier, run counts, timestamps) are kept on a rolling window of 365 days.
• Transcript text sent for AI analysis is processed to return results and is not retained by us beyond what is needed to deliver the analysis; our AI provider processes it under its own terms.

Your rights

Depending on where you live, you may have rights under the GDPR, the CCPA/CPRA, and similar laws — including the rights to access, correct, delete, and port your personal data, and to opt out of certain processing. We do not sell your personal information.

To exercise any of these rights, email support@getrushes.com. We will respond within the timeframes required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

Cookies and analytics

Our website uses a third-party signup form provided by Kit (formerly ConvertKit) to collect launch-notification email addresses, which may set cookies. We also use Google Search Console verification for our domain. We do not currently run additional web analytics. If we add analytics or other tracking in the future, we will disclose it here and update the effective date.

Security

We take reasonable measures to protect your information. Sign-in is passwordless — we use a magic link sent to your email and never collect or store passwords. Authentication tokens are stored in the macOS keychain on your device. Data in transit is protected with TLS. As noted above, we do not log the content of your requests or responses — only operational metadata.

Children's privacy

Rushes is a professional tool and is not directed to anyone under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, where appropriate, provide additional notice. Your continued use of Rushes after a change takes effect constitutes acceptance of the updated policy.

Contact

Beastly, Inc. — support@getrushes.com

Governing law: This Privacy Policy is governed by the laws of the State of Florida, without regard to its conflict-of-laws principles. Venue for any dispute lies in the state and federal courts located in Miami-Dade County, Florida.