Privacy Policy

#01Who is responsible

The controller within the meaning of the GDPR for this website and for our handling of purchases and support requests is:

For every question about your data, write to info@impulse-apps.de.

For the coding agents you start in PaneScale, their providers are responsible for what they process (section 6); we have no part in that processing.

#02Overview

Most of PaneScale happens on your computer, where we have no access. We process personal data only in these situations:

#03This website

#Hosting and server logs

This website is delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes the connection data this technically requires — IP address, date and time, the requested page, the referring page and your browser's identifier — to deliver the page and protect it against attacks. Legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare deletes these technical logs automatically after a short time. We don't build visitor profiles and don't combine this data with other sources. Cloudflare is certified under the EU-US Data Privacy Framework; we have concluded a data processing agreement with it.

#No cookies, no third-party content

This website sets no cookies and stores nothing in your browser. It loads no scripts, fonts or embeds from other services: fonts, icons, images and the feature films come from our own domain. There are no social media buttons, no advertising and no visitor statistics. The details are in the cookie policy.

Our pages also tell your browser to block access to camera, microphone and location, and to pass only our domain — not the full address — when you follow a link to another website.

#Search, interactive preview and films

The site search loads one index file from this website and runs entirely in your browser; what you type isn't sent anywhere. The interactive preview on the home page is the real PaneScale interface with sample projects. Everything you type or click there stays in the page and is forgotten when you reload or leave it.

#Contact form and email links

The contact form doesn't send anything by itself. It opens your own email app with your message filled in; data reaches us only when you send that email.

#Downloads

When you download the installer, the same connection data is processed as for any page.

#04Email and support

When you write to us, we use your email address, your name and your message only to answer you (Art. 6(1)(b) GDPR if it concerns a contract, otherwise Art. 6(1)(f) GDPR). We delete the conversation when it is no longer needed, unless commercial or tax law requires us to keep it.

Diagnostics export. If something doesn't work, you can export a diagnostics file in Settings → Updates & support. It contains the app version, your Windows version, whether it is a debug build, the size and integrity of the local database, the number of entries per table — for example how many chats or workflows exist, not their content — and which coding CLIs are installed in which version. It contains no conversations, prompts or workspace content, and secrets are removed automatically. PaneScale never sends it on its own; only you can attach it to an email. We use it only to help you and delete it once your request is resolved.

Please never send us passwords, API keys, CLI sign-in tokens or full card numbers. We never need them.

#05Buying and managing a plan

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin D02 H210, Ireland. You enter your payment details directly at Stripe; we never see full card numbers or bank details.

From Stripe we receive your name, email address, billing address and country, customer and subscription identifiers, plan and billing period, payment status and history, and the type of payment method — for example the card brand and its last four digits. We use this to conclude and perform the contract and to send invoices (Art. 6(1)(b) GDPR), to meet accounting and tax obligations (Art. 6(1)(c) GDPR) and to prevent payment fraud (Art. 6(1)(f) GDPR). Team customers who pay by invoice give us their billing details directly.

For fraud prevention and its own legal obligations, Stripe also acts as an independent controller; its privacy policy applies to that. Stripe may transfer data to Stripe, Inc. in the USA, which is certified under the EU-US Data Privacy Framework.

We keep customer and billing data for the duration of the contract and then for the retention periods of German commercial and tax law — up to ten years. Before checkout opens, none of this processing takes place.

#06The PaneScale app

#Stored on your computer

PaneScale is local-first. Its database — chats, threads, tasks, runs, routines, settings and usage — as well as lane worktrees, voice models and video projects live in your user profile under %APPDATA%\com.sherobi.panescale. Checkpoints and lane branches are Git refs inside your own repositories. Like every app with a web-based interface, PaneScale keeps a few interface settings — theme, open chat, unsent drafts — in its local WebView profile under %LOCALAPPDATA%\com.sherobi.panescale. To show what your agents would cost, PaneScale reads the session logs of Claude Code and Codex in your user folder and keeps only token counts and model names — no prompts and no answers. We have no access to any of it. Your data lists every location and explains how to delete it.

#Nothing is sent to us

The app doesn't send usage statistics, crash reports, device identifiers or any other information about you or your work to us.

#Coding agents and their providers

When you start Claude Code, Codex, Gemini CLI or another supported CLI, that tool runs on your computer under your account. It sends your prompts and the files it reads to its provider — such as Anthropic, OpenAI, Google, GitHub, Anysphere (Cursor), xAI, Moonshot AI (Kimi) or Factory (Droid), or the model provider you configured for Aider or OpenCode. PaneScale doesn't sit in between and doesn't receive copies. The provider is responsible for this processing, and its privacy policy applies. Account profiles keep each sign-in in its own configuration folder on your computer.

#Plan limits

To show how much of your Claude and ChatGPT plan limits you have used — the five-hour and weekly windows and when they reset — PaneScale reads the sign-in that Claude Code and Codex have stored on your computer and asks Anthropic (api.anthropic.com) and OpenAI (chatgpt.com) directly for your current limits, at most about once a minute per provider. The sign-in is only read: PaneScale never refreshes it, writes it back, stores it anywhere else or sends it to us. The answers are kept on your computer so the display is ready at the next start. Claude Code sessions in PaneScale also report their limit status over a local connection on your own computer (127.0.0.1). If the limits app Pane is installed, PaneScale may read the limits it last saved on your disk instead of asking again.

#Public price lists

To estimate costs, PaneScale downloads public model price lists once a day, and more often while it sees models it doesn't know yet: from LiteLLM (raw.githubusercontent.com), models.dev and OpenUsage (robinebers.github.io). These downloads contain nothing about you or your usage. Like any download, they show those servers your IP address and the time of the request.

#Voice

Dictation and voice commands run locally with whisper.cpp. PaneScale uses the microphone only while you record. The recording is written to a temporary file for transcription and deleted right afterwards; only the text remains. When you choose to install whisper.cpp, PaneScale fetches it from its official release on GitHub (api.github.com, github.com); speech models come from Hugging Face (huggingface.co) and are checked against a fixed checksum before use. These downloads show those services your IP address.

#Integrations you switch on

• GitHub — importing issues and opening draft pull requests run through your gh CLI, under your sign-in.
• Model steps in workflows send their prompt to Ollama or to the endpoint you configure.
• MCP — managed connections send tool arguments to the MCP servers you add. The MCP bridge is off by default, listens only on your own computer and requires a token.
• Remote SSH connects to the hosts you add.
• Service CLIs — checking the sign-in status in Settings → Plugins runs that CLI on your computer, which may contact its service under your account.
• Browser pane and Point & Fix load the pages you open, such as your local development server, directly in PaneScale. Those pages can set their own cookies there, as in any browser.

#Updates

PaneScale regularly checks whether a new version is available and installs it only when you click Update. Update checks contain no account, code or usage data. Where an update is downloaded from the internet, only the connection data every download needs is processed.

#07Recipients and service providers

The providers of your coding agents and the download sources in section 6 are not our service providers: the app contacts them directly from your computer, at your request.

We don't sell personal data and don't share it for advertising.

#08Transfers outside the EU

Some of the services above are based in the USA. Transfers there rely on the EU-US Data Privacy Framework (adequacy decision of the European Commission) or on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). All transfers are encrypted.

#09How long we keep data

• Technical logs of this website: deleted automatically by Cloudflare after a short time.
• Emails and support requests: deleted when they are no longer needed, unless the retention period for business correspondence (six years) applies.
• Diagnostics exports: deleted once your request is resolved.
• Customer and billing data: for the duration of the contract, then for the retention periods of German commercial and tax law — up to ten years. After that, we delete it.

#10Security

All connections to this website and to Stripe are encrypted. Because PaneScale works locally, your code never sits on our servers. Installers are checked against their SHA-256 checksum before installation, speech models against a fixed checksum. Only people who need it for their work can access customer data.

#11Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR),
• have it corrected (Art. 16) or erased (Art. 17),
• restrict its processing (Art. 18),
• receive it in a portable format (data portability, Art. 20),
• withdraw consent at any time with effect for the future, should we ever ask for it (Art. 7(3)).

Right to object (Art. 21 GDPR). Where we process your data based on our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation. We then stop, unless we can demonstrate compelling legitimate grounds or the processing serves legal claims.

An email to info@impulse-apps.de is enough. We may ask you to confirm your identity, and we answer within one month, free of charge.

You also have the right to lodge a complaint with a data protection supervisory authority. Ours is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany. You can also contact the authority where you live or work.

#12Further information

• Children. PaneScale is not directed at children under 16, and we don't knowingly process their data.
• No automated decisions. We don't make decisions based solely on automated processing, including profiling (Art. 22 GDPR).
• Do you have to provide data? No — you can use this website and the app without giving us any personal data. To buy a plan we need the details the checkout asks for; without them we can't conclude the contract.

#13Changes

We update this policy when PaneScale, this website or the law changes — for example before a new feature processes data we don't process today. The date at the top shows the current version.