Privacy Policy

Last updated: 2026-05-03

Cullstack is a desktop application made by Aviastone LLC ("we", "us"). We designed Cullstack around a simple principle: your photos and the metadata you create about them stay on your machine. This page explains exactly what data we do and don't collect.

What stays on your machine

• Your photo and video files — Cullstack reads them in place from wherever they live (local disk, NAS, cloud, phone) and never uploads them to any Aviastone server.
• Ratings, tags, comments, color labels, and collections — stored in a local SQLite sidecar database alongside your photos.
• Cloud-storage authentication tokens (Dropbox, OneDrive, Google Photos, etc.) — stored encrypted in your operating system's credential store, not in any Aviastone-controlled location.
• AI inference — every AI feature (CLIP semantic search, face detection, closed-eye flagging, NSFW flagging, AI auto-stacking, face-identity clustering) runs on your device using ONNX models stored locally. No image data is ever sent to Aviastone or any third-party AI service. Models are never trained on your photos.

What we collect

• License activation data. When you activate your license, we receive your license key, an instance identifier (e.g. "Scott's MacBook Pro"), and the activation timestamp via our payment provider, Lemon Squeezy. This is used solely to enforce activation limits and process refunds.
• Crash reports (opt-in only). If you opt in to crash reporting in Settings, anonymized stack traces and library size statistics are sent to our error-tracking service. No photos, no file paths outside the application, no personal information.
• Update checks. Cullstack checks for new versions by requesting a static JSON file on our server. The request includes your platform (e.g. "macOS 14.5") and current Cullstack version. You can disable update checks in Settings.

What we do not collect

• Photos, videos, or any image data of any kind.
• File paths, file names, or directory contents.
• Browsing history, usage analytics, telemetry, or behavioral data.
• Email address (unless you contact support or buy a license).

Third-party services

Cullstack interoperates with third-party storage services (Dropbox, OneDrive, Google Photos, iCloud, your SFTP/WebDAV servers) only when you explicitly connect them. These providers have their own privacy policies; Cullstack acts only as a client on your behalf and does not relay your data through Aviastone-controlled infrastructure.

For payment processing and license issuance, we use Lemon Squeezy (a Stripe-owned company), which acts as Merchant of Record. Their privacy policy is at lemonsqueezy.com/privacy.

Your rights (GDPR / CCPA)

You can request access to, correction of, or deletion of any data we hold about you (essentially: your purchase record and any opt-in crash reports) by emailing privacy@aviastone.com. We respond within 30 days.

Contact

Aviastone LLC
Email: privacy@aviastone.com