Privacy Policy

Effective date: September 25, 2026

120.DEV PTY LTD (ACN 702 182 545, ABN 59 702 182 545) runs 120.dev. This policy explains how we handle information that identifies you or could reasonably identify you. It covers our website, accounts, billing, downloads, updates, support, 120 Showcase, 120 AI Chat, 120 HN, and 120 Agentic Browser.

How your data moves

120 Showcase

Recording, transcription, editing, projects, and exports normally stay on your device. We do not receive your media or project files through these workflows.

Optional pointer and keyboard-event recording is off by default. If enabled, Showcase saves the events locally; we do not receive or upload them during normal recording. Keyboard-event data can include key codes and timing from outside the selected capture area.

120 AI Chat

Chat history and API keys stay on your device. When you choose a cloud AI provider, your request and any content you include go directly to that provider. A model running on your device processes requests locally.

120 HN

The app retrieves stories and comments from Hacker News. If you request an AI summary or analysis, relevant content goes to the model provider you choose.

120 Agentic Browser

120 Agentic Browser keeps your browsing history, website data such as cookies, workspaces, local files, downloads, and agent conversations on your device. Websites you visit receive your requests and may collect data under their own policies. If you use the AI agent with an OpenAI API key, your prompts and relevant conversation history go to OpenAI, along with page addresses, titles, or workspace content the agent accesses.

Across our products, sign-in, licences, subscriptions, downloads, updates, and support use online services. We do not sell personal information, use it for third-party targeted advertising, or currently include product analytics or automatic crash reporting. Content kept only on your device is not uploaded to us unless you choose to send it, such as with a support request.

Information we receive and use

• Accounts: We receive your email address, account and sign-in details, and the identity information Google provides if you choose Google sign-in. We use this information to secure your account and provide access to products. We do not receive your Google password.
• Purchases and licences: We receive purchase and subscription status, billing contact details, and licence records to provide access, handle payments and refunds, and keep required financial records. Stripe collects payment-method details. We do not store complete card numbers or card security codes. Account and payment status can automatically grant or end product access.
• Online activity: When your browser or app contacts our online services, we and our hosting providers receive information such as IP address, browser or app version, requested page or service, time, and security or error logs. We use it to deliver services, diagnose problems, and prevent abuse.
• Messages and updates: If you contact us or send feedback, we receive the details you provide so we can respond. If you join a product or launch list, we use your email to send updates. You can unsubscribe from marketing emails at any time; account, billing, and security messages may still be sent when needed.

We receive this information from you, automatically when you use an online function, and from providers you choose, such as Google.

Our website and account service use browser storage for sign-in, security, and preferences. Payment and sign-in providers may use necessary cookies on their own sites. We do not include advertising cookies or third-party analytics scripts on the 120.dev website.

Who receives information and where

We use service providers for account sign-in and licences, payments, website hosting and security, and email updates. We share information needed for those services.

We may also share information with professional advisers, during a business transfer, or when needed to comply with law or protect rights and safety. Cloud AI and content providers you choose receive requests directly from your device under their own privacy policies. Check their retention and model-training rules before sending sensitive content. Websites you open from our apps also follow their own privacy practices.

Some service providers may receive your personal information outside Australia, including in the United States. We take steps required by law to protect it.

How long we keep information

• Local projects, chats, and files: Until you remove them from your device. We cannot delete files we do not hold.
• Account and identity records: While your account exists, then deleted or de-identified. Residual backups are normally removed within 30 days, subject to restoration and legal needs.
• Routine service and security logs: 30 days, unless needed longer for an incident or legal matter.
• Support correspondence: Two years after the matter closes, unless needed longer for a dispute or legal obligation.
• Purchase, subscription, and tax records: Seven years after the transaction or subscription ends, or longer if law or a dispute requires it.
• Marketing records: Until you unsubscribe or the list ends. We may keep a minimal record to honour your opt-out.

Deleting your account does not cancel a subscription or remove files stored on your device. Account deletion may be delayed while an active subscription, refund, dispute, or other billing matter is unresolved.

Your choices and rights

You can manage available sign-in, billing, and deletion controls through your 120.dev account. Use the unsubscribe link in a marketing email to stop product news. To request access, correction, or deletion of information we hold, or to question an automated access decision, email hello@120.dev. We may need to verify your identity and may retain information required for billing, security, or law.

Depending on where you live, you may also have rights to object to or restrict processing, receive a portable copy of certain information, withdraw consent, or complain to a privacy regulator. We will respond within the period required by applicable law and explain any lawful reason we cannot fulfil a request. If the Australian Privacy Act applies and you are dissatisfied with our response to a complaint, you can contact the Office of the Australian Information Commissioner.

Where EEA or UK law requires a legal basis, we rely on our agreement with you to provide accounts and products, legal obligations for required records, legitimate interests to secure and maintain the services, and consent where required for optional marketing. You can withdraw consent for future processing where consent is the basis.

Security, children, and changes

We use encrypted connections, access controls, protected device storage for credentials, and Stripe-hosted payment collection. No system is completely secure. We investigate breaches and notify affected people and regulators when law requires it.

Our online services are not directed to children. You must be at least 18 to create an account. Contact us if you believe a child has provided account information.

We may update this policy. If a change significantly affects how we use your information, we will tell you before it takes effect.

Contact

For privacy questions, requests, and complaints, email hello@120.dev.