Effective [date]
The short version
- Oakshield works on your computer. It doesn't send us your files, your emails, your passwords or the websites you visit.
- It sends us a little information so it can work: that the computer is protected, warnings when something goes wrong, and, if you allow it, an anonymous summary that helps us improve Oakshield.
- A detailed report about your computer is only sent if you agree, and it's locked so only your support provider can read it.
- We never sell your information or use it for advertising.
1. Who we are
Oakshield is made by [legal business name] ("Evergreen", "we", "us"), [mailing address]. This policy covers the Oakshield program for Windows, its browser extension, and the oakshield.app website. Questions: admin@oakshield.app.
2. What the Oakshield program sends us, and why
To keep it working
- A random computer ID, made when Oakshield is installed. It isn't linked to your name unless you activate a subscription or join a family group.
- The Oakshield version and Windows version, to offer the right updates.
- A regular "still protected" check-in, with an overall status (for example, "protected" or "needs a look").
- The computer's name, only if you agree to share details with support, or if the computer is in a family group, so the family can tell computers apart.
Warnings
When Oakshield stops something serious, such as a stranger connecting or a fake virus warning, it tells us what kind of thing happened. If you've agreed to share details with support, the warning includes details such as the program's name. If you haven't, we only see the kind of event, with no names or details.
Anonymous usage summary (you can turn this off)
About once a day, Oakshield sends a summary we use to improve it: which protections are on, how many things it stopped, which kinds of programs it found, and the Oakshield version. It contains no names, contact details, computer names, websites or files. You can turn it off in Oakshield's settings.
Detailed reports (only if you agree)
If you choose Share details with support, Oakshield sends your support provider a detailed report when something goes wrong: recent warnings, programs found, and settings. The report is encrypted on your computer so that only your support provider can open it: Evergreen if you bought Oakshield from us, or the computer shop that set it up for you. The server that passes it along can't read it.
Checking websites
When you visit a website, the browser extension may ask our server how long ago that website's name was registered, because brand-new websites are often scams. It sends only the name (for example, example.com), never the full address, and the request isn't linked to you or your computer. We keep a list of names and registration dates so we don't have to look them up again.
Scam emails are spotted inside your web browser. The content of your emails isn't sent to us.
Other things you choose to send
- Feedback you type in Oakshield, and your email address if you ask for a reply.
- Caller check codes you type in to check a caller. We store codes only in a scrambled (hashed) form, and they stop working after 10 minutes.
- Read-aloud tips: the text of Oakshield's built-in safety tips, to fetch a recorded voice. Nothing about you is included.
3. Family alerts
If you add family members, we store their names and how to reach them (email address, phone number, or a phone notification topic) so we can tell them when something serious happens. Please only add people who have agreed to get these messages. Any of them can ask us to stop.
4. Buying a subscription
Payments are handled by Stripe. Your card details go straight to Stripe and never reach us. We receive your name, email address, which plan you chose, and whether payments succeed, so we can send your activation code, renewal reminders and receipts. Stripe's privacy policy: stripe.com/privacy.
5. Computer shops (partners)
If a computer shop that partners with us sold you Oakshield or set it up for you, they're your support provider. They can see your subscription, your computers' status and warnings, and the detailed reports you agree to share. They're independent businesses with their own privacy practices. In that case we only see your subscription and anonymous information, not your detailed reports.
6. The website
oakshield.app uses no advertising, analytics or tracking. Its fonts and images come from our own server. The only cookies are the sign-in cookies for our partners' and our own dashboards. Like most websites, our servers keep short-lived logs of requests, including internet addresses, to stop abuse. These are deleted after [for example, 30 days].
7. Who else handles information
We don't sell or rent personal information, and we don't share it for advertising. We use these services to run Oakshield:
- Stripe, for payments.
- Our email and text-message providers, [name them, for example your email host and 1-VOIP], to deliver activation codes, receipts and family alerts.
- ntfy.sh, if a family member chooses phone notifications through the ntfy app.
- ElevenLabs, to record the read-aloud voice for Oakshield's built-in tips. Only the tip text is sent.
- Pushover, to notify our own staff of warnings. These notifications follow the same rules as section 2: without your agreement, they contain no names or details.
Oakshield also downloads virus information from ClamAV's servers and scam website lists from public sources. Those downloads don't include anything about you.
We may disclose information if the law requires it, or to protect someone from fraud or harm.
8. How long we keep it
- Warnings: 6 months on our dashboard, and 12 months in a family's alert history.
- Anonymous usage summaries: only the latest one for each computer, deleted once the computer hasn't been in touch for 13 months.
- Feedback: 2 years.
- Detailed reports: the most recent few for each computer.
- Subscription and payment records: as long as the law requires for tax and accounting, [for example, 7 years].
- When you remove a computer from your account, or ask us to delete your information, we delete it within 30 days, except records we must keep by law.
9. Your choices and rights
- Turn off the anonymous usage summary or detailed reports in Oakshield's settings at any time.
- Ask us for a copy of your information, or to correct or delete it, by emailing admin@oakshield.app. We'll reply within 30 days. Some states give you these rights by law; we offer them to everyone.
- Uninstalling Oakshield stops it sending anything.
10. Security
Connections to our server are encrypted. Updates to Oakshield are digitally signed, and Oakshield refuses any update without a valid signature. Detailed reports are encrypted so only your support provider can read them. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.
11. Children
Oakshield isn't intended for children under 13, and we don't knowingly collect their information.
12. Changes
If we change this policy in a way that matters, we'll say so on this page and, for big changes, email subscribers before the change takes effect.