Privacy

Notice version: SC-PRIVACY-2026.09.26 · Status: Issued 2026-09-26 — in force · Effective: 2026-09-26

This page is a plain-words summary of the Chorix Social Command Privacy and Local-Operation Notice — Application Schedule, an application schedule to the CHORIX Privacy and Local-Operation Notice. It covers the Chorix Social Command software you run on your PC and, under "Buying on this website", SPEKTX's site where you buy it. It is a product of SPEKTX LLC, a New Jersey limited liability company (SPEKTX). The full Notice controls; section numbers below point to it.

The software is local — this is the important part Notice §3

Chorix Social Command runs on your own Windows PC. Your campaigns, drafts, approvals, decision records, media and connection keys are kept on your PC, in a folder you can see. Apart from the subscription renewal call described below, there is no server of ours for the software to contact, and no other account with us. SPEKTX does not receive standing access to your project content because you bought or ran the software — the renewal call carries only your licence file, never your project content, and goes only to SPEKTX's site at chorixstudiosc.com.

The desk (the screen you work in) is served only to your own PC unless you turn on the home-network door for a phone or tablet.

What SPEKTX receives Notice §4

Subscription renewal [BUILT; ADDRESS SET; NOT YET TESTED AGAINST THE LIVE SITE]. Social Command is a subscription. The software renews its own signed licence file by sending it to SPEKTX's site, at chorixstudiosc.com/api/renew-license, an address built into the software; it makes the call only while a valid licence file is in place. What it sends is the signed licence file (your licensee name, organization, licence id, order reference, edition, agreement version and hash, and your paid-through date), and nothing else; when: the software checks at launch and every hour while it runs, and calls only when a call is due — once a day while your subscription is paid and the last call went through, and once an hour during the grace period, after it has lapsed, or after a call that did not go through — and when you press "Renew now" on the licence screen; if the site does not answer or refuses, the licence file you have is kept as it was; how long we keep it: renewal-check logs, 90 days; the signed licence file and order record, for the life of your subscription and, after it ends, for as long as tax and accounting law requires (see below). This call never carries your project content.

Everything else: nothing. Apart from that renewal call, the software sends SPEKTX nothing. It has no analytics, no telemetry, no crash reports, and no other update check. [NV-1, NV-9]

If you write to admin@chorixstudiosc.com, we receive what you send. Buying on SPEKTX's site, chorixstudiosc.com, is covered below, under "Buying on this website".

What the software keeps on your PC Notice §5

Who receives data, and when Notice §6

Nothing is sent to any provider just because the software starts. Data goes out only when you connect or invoke one of the services below. Two things run without a fresh action from you once set up: the daily wake (on by default once the campaign manager is set up; you can turn it off) and the scheduler tick that reads comments and statistics from platforms you already connected. Each provider handles data under its own terms; SPEKTX does not control that. [NV-4]

Other paths: your browser's voice dictation is handled by your browser and its vendor; the AI programs keep their own history on your PC (Google's documentation says the Gemini command line keeps its sessions under ~/.gemini/tmp/ for 30 days by default). [NV-6] As shipped, AI seats run at the full-permission tier: they can run commands and change files with your Windows permissions and reach the network, and what a seat reads can become part of what goes to its AI company. You can narrow a seat to a lower tier (§6.12).

Your choices Notice §7

• Do not connect a platform, Gmail, Pushover, a tunnel, or keys. Nothing goes to that service.
• Turn the daily wake off. Keep the phone door and the tunnel off (both are off unless you turn them on).
• Turn the mailbox lane off or narrow its search. Clear the keys you added.
• Revoke the software in a platform's own account settings to withdraw its access. The software has no button that disconnects a platform in this release.
• Use a lower tier for seats; sign the AI program out, or remove the saved Gemini key, to stop AI turns; stop the software with STOP-SOCIAL-COMMAND.cmd.

Where it is kept Notice §8

In %LOCALAPPDATA%\ChorixSocialCommand (the launcher prints the exact folder): settings and secrets, the database, logs, media, the seats' working folders, and the Operations Director's browser profile. Some copies live elsewhere: standing instructions in the Windows temp folder, the AI programs' own histories, ~/.gemini/settings.json (which the software sets to use your key if you use the Gemini door), and, if you install the background service, a Windows Scheduled Task. If the database cannot open, the old copy is moved aside, not deleted.

How long it is kept Notice §9

Nothing expires by itself; data stays on your PC until you remove it. The Ledger, publishing receipts and campaign authorizations are kept on purpose and the database refuses to change or delete them. A retention floor (default 3,650 days, adjustable from 1 to 36,500) is a minimum, not a deletion timer. Run logs are added one per launch and are never trimmed. What SPEKTX itself keeps: apart from the subscription renewal call above, SPEKTX holds none of this, so it applies no retention period to it. For the renewal call: renewal-check logs, 90 days; the signed licence file and order record, for the life of your subscription and then as long as tax and accounting law requires, up to 7 years; payment card data, never held by us — our payment processor (Stripe) handles it directly; deletion honoured except where the law requires the order or tax record to be kept. Acceptance and consent records (the signed clickwrap and the recurring-charge consent) are kept the same way — for the life of your subscription and then as long as tax and accounting law requires, up to 7 years, and in any case for at least as long as the law governing that consent requires.

Export and delete Notice §10

Your records are stored on your own PC and belong to you; SPEKTX has no access to them.

Export and backup. A command-line export and import tool is included, but it is not yet a button in the software. The export seals your database, your keys, your media and your licence file into one encrypted .scbackup file, protected by a passphrase of at least 12 characters; SPEKTX holds no copy of the passphrase, so a lost one cannot be recovered. It runs while the software is stopped. The import restores that file into an empty folder and refuses a wrong passphrase. Before an update that changes your database's format, the software also copies the database automatically into the backups folder in your data folder and keeps the newest 3 copies; those copies are not encrypted and do not include your keys. You can also download a per-campaign audit pack (a signed JSON or PDF summary of one campaign's approvals, receipts and Ledger lines), which is evidence of what was approved, not a copy of your data.

Deleting your data. There is no delete-everything button in the software. Deleting a thread or campaign only hides it. Removing the background service removes only the Scheduled Task. The uninstaller, UNINSTALL.cmd, asks you to type UNINSTALL, offers the export first, and then deletes the %LOCALAPPDATA%\ChorixSocialCommand folder; it leaves the temp-folder copy, the AI programs' histories and the program folder. To remove everything by hand, stop the software and delete the %LOCALAPPDATA%\ChorixSocialCommand folder, the temp-folder copy and the AI programs' histories. Either way, you must revoke platform access in each platform's settings.

Cookies and browser storage Notice §11

The desk sets two cookies on your own PC, chorix_session and chorix_workspace (HttpOnly, SameSite=Strict), only to keep you signed in. The software contains no advertising or analytics cookies or scripts. It uses your browser's local storage for the voice fingerprint and phone credential. [NV-18]

Security Notice §12

• Your Windows account is the protection, not a password in the software.
• Secrets in personal.json are sealed with Windows' own protection (DPAPI), tied to your Windows login, by default in the software as you download it. Secrets inside the database are sealed too, with a key that, before this, sat unsealed in the same folder; that key is now covered by the same DPAPI seal. If DPAPI is unavailable on your PC, or you run from a source checkout, the software falls back to plain text rather than failing to save.
• The database listens only on your PC and, by default in the software as you download it, uses a random password made for your install rather than one written in the code.
• We recommend Windows drive encryption (BitLocker) and a screen lock.
• The desk opens at a sign-in address containing a standing access token, which may stay in your browser history.
• The software is not yet digitally signed, so Windows SmartScreen may warn on first run.

No sale of personal information Notice §13

SPEKTX does not sell personal information or share it for cross-context behavioral advertising. Apart from the renewal call above, the software sends SPEKTX nothing, and shares data with no one except as above, at your direction.

License verification and renewal Notice §14

The software checks its licence file locally; no clock is read for that check itself. Renewing the file is the separate, periodic call to SPEKTX described above — it carries only the licence file, never your project content, and runs at most once a day while your subscription is paid, and at most once an hour during the grace period, after it has lapsed, or after a call that did not go through. The renewal code is built in, and so is its address, on SPEKTX's site at chorixstudiosc.com; if the site does not answer, the licence file you have is kept as it was. [NV-19]

Children Notice §15

Chorix Social Command is a professional business tool and is not directed at children under 16. It has no age check, and because it sends SPEKTX nothing beyond the renewal call above, we do not knowingly collect information from anyone.

Buying on this website Notice §4.3

This part covers SPEKTX's site for Chorix Social Command, chorixstudiosc.com, where you subscribe, sign the licence and download the software. The site keeps only what it needs to take your subscription, record that you accepted the agreement, issue and renew your licence file, let you download the software, and email you your licence key when you ask for it.

This website does not load Google Analytics, advertising tags or a connection to the Social Command application. Checkout opens Stripe for payment: Stripe handles the card, and SPEKTX never receives card details. Stripe, SPEKTX's payment processor, emails you receipts, payment reminders and renewal notices at the address you give at checkout.

• When you start checkout: your email address. The site stores it with a new order reference before it sends you to Stripe, so the order is kept even if you do not finish paying. It gives Stripe your email address, the order reference, the edition, the agreement version and the early-bird promotion code if one applies. You enter your card and billing details on Stripe's own page. After payment, Stripe sends you back to the site with a checkout reference in the page address.
• From Stripe, after you pay: Stripe's references for you and your subscription, its price and any promotion code, its status, its current period and the date it is paid through, whether and when it was cancelled, and, if a payment is refunded, the amount refunded.
• When you sign the licence: your full legal name and your signature as you typed it; if you give them, your organization's name, your title and that you may bind it; your email address and licence id; the agreement version and hash, the exact wording of each box you ticked, and the time; and, as evidence of the signing, your IP address and your browser's description of itself (its user agent).
• Your licence: a licence id, made when your subscription first becomes active; when you last downloaded the software; and, if a payment is refunded in full, when the licence ended. Your licence file carries your name, organization, licence id, order reference, edition, the agreement version and hash, and the paid-through date; the site signs a fresh one when you sign, when you download a fresh file and when the software renews, and does not store the file itself.
• Renewals: the licence file the software sends (see "What SPEKTX receives" above). The site stores only a count of renewal requests for each licence id, to limit how often one licence can ask.
• In your browser: the site sets no cookies and loads no other outside scripts; its pages load only from the site itself. When the download page sends you to sign the licence, your email address and licence key are held in that browser tab's session storage, not in the page address, until your download link appears or you close the tab.
• If you ask for your licence key by email: on the download page you can ask for your licence key to be emailed to your purchase email. For each subscription on that email that is active or waiting on a payment, and not refunded, the site sends that address one email with the licence key and a link to the download page; the page gives the same answer whether or not the email holds a licence. To limit how often anyone can ask, the site keeps, for each email address and each IP address that asked, a fingerprint of it (its SHA-256 hash), not the address itself, with the time the current hour's count began and the count.

Who handles it for SPEKTX: Stripe takes payment, as above; Supabase holds the order, licence and acceptance records, and the private storage the software download comes from; Netlify hosts the site and runs its functions, and so receives each request to the site, including your IP address. Where it is handled: Supabase keeps the records in the United States, in Amazon Web Services' us-west-2 region (Oregon); Netlify runs the site's functions in the United States, in Amazon Web Services' us-east-2 region (Ohio), and serves the site's pages from its servers around the world; Stripe processes payment data in the United States and may pass it to its own affiliates and service providers in other countries. Each of the three handles this data under its data processing terms, which form part of its terms of service with SPEKTX. If you ask for your licence key by email, an email delivery service sends that email for SPEKTX; SPEKTX will name it here, with its data processing terms and where it handles the data, before that feature is switched on. It receives your purchase email, the licence key, the download page's address and the message.

How long: renewal-check logs, 90 days; order, licence and acceptance records, for the life of your subscription and, after it ends, for as long as tax and accounting law requires, up to 7 years, and in any case as long as the law requires a consent record to be kept. An order that is never paid is deleted, with the email address it holds, after 30 days. The records kept to limit licence-key email requests are deleted after 24 hours.

Your requests: write to admin@chorixstudiosc.com to see, correct or delete what the site holds about you. We delete it except where the law requires an order, tax or consent record to be kept. SPEKTX does not sell this information or share it for cross-context behavioral advertising.

Changes Notice §17

We will post changes at https://chorixstudiosc.com/privacy.html and include the current Notice with each new download. The software has no automatic notice-push, so a change reaches you when you download a new version or visit that page. The version and effective date at the top show which one you have.

Contact Notice §18

SPEKTX LLC — admin@chorixstudiosc.com c/o Northwest Registered Agent LLC, 971 US Highway 202N, Ste N, Branchburg, New Jersey 08876