Privacy policy

This policy explains what information the ContentFactory app and the cf.wakitx.com website handle. They are run by Wakitsoft (Zhuhai Wake Software Technology Co., Ltd., “we”). The short version: your footage and projects stay on your computer.

The app

• No account, no telemetry. The app collects no usage statistics, crash reports or device identifiers.
• Your media stays local. Imported video, audio, images and project files are stored only on your computer. We have no access to them.
• It only goes online to fetch extensions. When you choose to download an extension (such as speech recognition), the app requests the extension list and files from cf.wakitx.com. In some cases the speech model is downloaded from the open-source project's release page on GitHub instead. Like any web request, these appear in server logs with an IP address (see “The website” below).
• Captions are transcribed offline. Speech recognition runs on your computer and audio is never uploaded.
• The AI interface is local-only. The app's MCP server listens on 127.0.0.1, so other devices on your network or the internet can't connect to it. An AI assistant you connect (for example Claude Code or Claude Desktop) may send timeline details or frames to its provider; that is covered by the provider's own privacy policy.
• The app doesn't check for or download updates on its own.

The website

• No cookies, and no third-party analytics, advertising or tracking scripts.
• Your browser's local storage (localStorage) remembers the site language you picked and whether you dismissed the language prompt. It is never sent to us.
• Server access logs. Like any web server, ours records the time, URL, IP address, browser user agent and referring page of each request, for security, troubleshooting and visit statistics.
• Visit statistics. We count page views and referrers from the access logs. The statistics database never stores full IP addresses: each visitor is reduced to a one-way hash of IP, user agent and a random salt that changes daily and is deleted after two days, so the same person can't be followed from one day to the next. Requests that send a Do Not Track (DNT) or Global Privacy Control (GPC) signal are only added to a total: no visitor hash is created and neither the referrer nor the device type is recorded. The statistics use no cookies, and the pages contain no analytics script or third-party tracker.
• Raw access logs are rotated daily and deleted after at most 60 days. We don't sell them or share them with third parties unless the law requires it.

Your rights

Because we don't keep records tied to individual people, there is usually no personal data for us to look up or delete. For questions or requests, reach us through our contact page.

Changes

If this policy changes, we'll update this page and its effective date, and note significant changes in the changelog.