KaveLight Try KaveLight free

Privacy Policy

Effective October 21, 2026

Kavelight LLC (“Kavelight,” “we,” “us”) makes KaveLight, a Mac application for planning cinematography, and operates this website. This policy explains what information we collect, why we collect it, and the choices you have. It covers the KaveLight app, the website, our mailing list and billing.

The short version: we collect what a small software company needs to run KaveLight: your email and account details, your plan and its status (your card details go to Stripe, never to us), basic licensing and activity records, the bug reports you or the app send us, and anything you choose to share publicly in Community. We email you about your account and plan and, if you asked for it, news about KaveLight; every news email lets you unsubscribe. We run no ads, use no third-party analytics or tracking, and never sell your information.

1. Information we collect

Account information. When you create a KaveLight account, you give us your email address and a password. Sign-in is handled by Clerk, our authentication provider; your password is stored by Clerk in protected (hashed) form and is never visible to us. We also record when you agreed to our Terms of Service and which version. For your account’s security, Clerk keeps the IP address, approximate location, device and browser of each sign-in session.

Sign-up information. When you sign up on our website, you give us your first and last name, your email address, and your role on set. Some early sign-ups came to us from partners and lists of people who asked to hear about KaveLight. If you came through a creator’s link or typed a creator’s code, we also record which creator referred you, so your first Yearly or Perpetual purchase in the next 90 days can get their discount (unless a better offer applies) and they earn a commission on it; creators get totals only, never your name or email.

Billing. KaveLight is a paid product. Purchases are made through Stripe, which acts as the seller of record for the transaction (Stripe’s Managed Payments, shown at checkout and on your statement as Link): you enter your card details on Stripe’s own pages, and we never see or store card numbers. Stripe sends your receipts and invoices, handles sales tax and VAT, fraud screening, disputes and payment support, and records the IP address and device used at checkout for fraud prevention, all under its own privacy policy. We receive and keep your Stripe customer and subscription identifiers, your plan and its status, the billing country and any tax ID you give at checkout, and the card brand, last four digits and expiry so you can recognise it.

Licensing and device information. Each plan covers up to two Macs, and a free trial is one per Mac. To enforce that, the app sends us a one-way hashed identifier derived from your Mac’s hardware ID (the hardware ID itself cannot be recovered from it), your Mac’s device name, the app version, and activation and last-used timestamps.

Activity. The app records which calendar days your account used it, so we can see overall activity. We do not track what you do inside the app. There are no behavioral analytics, no screen or content tracking, and no location data.

Feedback. When you send feedback from the app, we receive your message, the app version and basic system information (macOS version, Mac model, memory and graphics chip). If you leave “Include app diagnostics & recent log” ticked (it is ticked by default; untick it to leave the log out), we also receive the app’s recent log. The recent log can include the names of your projects and of objects in them. We use these only to fix problems.

Crash reports. If KaveLight crashes, macOS writes a crash log on your Mac. At the next launch, the app uploads KaveLight’s own crash logs to us so we can find and fix the bug. A crash log describes the state of the app when it crashed, and macOS also puts your Mac’s model, its macOS version and an identifier macOS generates for crash reporting in it. We replace your user-folder name in file paths before upload. Crash logs are associated with your account. You can turn automatic crash uploads off in Controls.

Email. We email you through Resend, our email provider: your download link when you sign up, a reminder if you haven’t set KaveLight up yet, notices about your trial and your plan, and, if you asked for it, news about KaveLight (for example, new features). News emails have an unsubscribe link, and replying “unsubscribe” works too. Emails about your account, trial, plan, security or a change to the Terms are part of the service and have no unsubscribe link; they stop when your account is closed. News emails go only to people who ticked the box asking for them, or whose sign-up allowed it; download links, reminders and notices about your trial or plan are sent to everyone with an account. Receipts, invoices and renewal reminders for a paid plan come from Stripe. Account emails such as sign-in codes and password resets come from Clerk and are part of using your account. Our mailing list (your address, first name and unsubscribe status) is held at Resend, which keeps copies of sent emails for 30 days. We keep records of what we sent and of who unsubscribed, so we can honor it.

Support messages. When you write to us through the support form or by email, we receive your name, email address and message, and use them only to reply. Support email is stored in our Google Workspace mailbox.

Community (optional). If you share a project to Community, it is published for other KaveLight users to browse and download, together with your name and your account’s profile picture as its author. The project’s files are stored on our public content server, where anyone who has a file’s address can download it. Take care with location scans and photos: a scan of someone’s home or an image of a person needs their permission before you share it. Taking a project down removes it from Community at once; on request we also delete its files from our servers within 30 days.

Website. This site sets no cookies and uses no third-party analytics. It counts its own visits: each page load adds one to a daily total, along with the page, the website that linked to it and, on a Mac, whether it runs on Apple silicon or Intel (your browser works that out; only the answer is counted). Clicks on Download for Mac are counted the same way. Nothing that identifies you is recorded. If your browser sends a Global Privacy Control or Do Not Track signal, your visits aren’t counted at all. If you opt out of counting (kavelight.com/?ignore-visits=1), that choice is stored in your browser’s local storage; nothing else is stored. To protect our sign-up and support forms from abuse, our backend keeps the IP address behind each submission in a rate-limit record for no more than a day. Our hosting providers keep standard, short-lived server logs (IP address, browser type) to operate and protect the service.

Update checks. The app periodically asks our update server whether a newer version exists. That is a standard web request (IP address, requested file) together with the app’s version; no profile of your system is sent.

AI assistants (optional). While you’re signed in, KaveLight keeps a connection to our connector server (AI Assistants is on by default and can be switched off in the app). Your Mac identifies itself to the connector with the same hashed device identifier and app version used for licensing. Nothing else passes through it unless you add KaveLight to Claude or ChatGPT and sign in there with your KaveLight account. Once you do, the requests your assistant makes (for example, “turn the key light down”) and KaveLight’s answers — details of your open projects such as object names, positions and light settings, rendered camera images, and the names and file locations of your open projects — pass between your AI provider and your Mac through our connector server. The connector relays them as they happen and does not store them, except that an answer arriving after your assistant stopped waiting is held for up to three minutes so a retry doesn’t repeat the work. We keep short-lived operational logs of each request (which tool ran, when, how long it took and how large the answer was, with a pseudonymous account identifier) to run and protect the service; they never contain your scenes or images. Some assistants send extra context with each request, such as your approximate location; the connector discards it without storing or forwarding it. When you sign in to KaveLight from your assistant, your AI provider receives your KaveLight account’s name and email address as part of that sign-in. Your AI provider (Anthropic or OpenAI) receives what your assistant asks for and KaveLight’s answers as part of your conversation, under that provider’s own terms and privacy policy. What your assistant receives is kept and used by your AI provider according to its own terms and your settings there, including any training settings. You can disconnect at any time by switching AI Assistants off in KaveLight or removing the connector in Claude or ChatGPT. How it works.

2. How we use information

We do not sell personal information, we do not share it for advertising, and we do not use third-party analytics.

3. Legal bases (EEA / UK)

Where the GDPR or UK GDPR applies, we process your sign-up, account, licensing and billing information, your feedback, the AI-assistant requests you choose to relay, and the projects you choose to share to Community because it is necessary to provide the service you asked for (performance of a contract). We keep billing, tax and Terms-acceptance records because the law requires it (legal obligation). We keep activity records, crash reports (which you can switch off), website visit counts, creator referral records, abuse-protection records and support messages under our legitimate interest in running, improving and protecting a small service. We send news about KaveLight with your consent, or under our legitimate interest in telling people who signed up about the product where the law allows it; you can object at any time by unsubscribing.

4. Who we share information with

We use a small number of service providers to run KaveLight. Unless noted, they process information on our behalf, under a data-processing agreement and, for transfers out of Europe, the EU-U.S. Data Privacy Framework or standard contractual clauses, and only as needed for their role. All of them are based in the United States.

Beyond that, we disclose information only if the law requires it, to protect the rights or safety of Kavelight or others, or as part of a business transaction such as a merger or acquisition (in which case this policy continues to apply to your information).

5. Retention

You can request deletion at any time (see below).

6. Your rights and choices

Email support@kavelight.com to access, correct, export, or delete your information. To stop emails about KaveLight, use the unsubscribe link at the bottom of any of them, or reply “unsubscribe”. We will respond to every request. We answer within 30 days (45 for California requests) and verify requests by replying to the email on the account; deletion requests also require a sign-in or a code. California residents may use an authorized agent.

If you are in the EEA or UK, you also have the rights to restrict or object to processing, to data portability, and to complain to your supervisory authority. If you are a California resident, you have the rights to know, delete, and correct; we do not “sell” or “share” personal information as those terms are defined in the CCPA, and we never discriminate for exercising your rights.

7. Security

All traffic between the app, the website, and our servers is encrypted in transit. Passwords are handled by Clerk and never stored by us. Card details are entered on Stripe’s pages and never reach us. Device identifiers are one-way hashed. Apart from what you choose to share publicly in Community, access to your data is limited to the people operating KaveLight.

8. Where data lives

Our servers and service providers are primarily located in the United States, and content-delivery networks may serve files from locations closer to you. If you use KaveLight from outside the U.S., your information is transferred to and processed in the U.S. Our providers rely on recognized safeguards, such as the EU-U.S. Data Privacy Framework and standard contractual clauses, for international transfers.

9. Children

KaveLight is a professional tool for adults: you must be at least 18 to create an account. We do not knowingly collect information from anyone under 18; if you believe we have, contact us and we will delete it.

10. Changes to this policy

If we change this policy, we will post the new version here and update the effective date. For material changes, we will also tell you in the app or by email.

11. Contact

Kavelight LLC
1992 Lewis Turner Blvd, Suite 1067, PMB 282, Fort Walton Beach, FL 32547, United States
support@kavelight.com