Bodycam Reader — Privacy Policy
Effective date: October 1, 2026
Version: 1.3
Provider: SaveYa Tech LLC, a Massachusetts limited liability company ("SaveYa Tech," "we," "us")
This policy explains what Bodycam Reader (the "Software") and the bodycamreader.com website do with information. It is written to be read, not to be survived.
What changed from version 1.2. Deleting your account now also deletes your sign-in record (email address, hashed password, two-step setup and backup codes) and the log of account emails sent to you. Version 1.2 said we kept those after deletion. Section 5 sets out what is removed and what is kept, and its "where your firm first came from" row now names the versions it applies to. Nothing else changed.
What changed from version 1.1 to 1.2. Version 1.1 said the Software contacts us in three situations only and keeps working offline for a grace period. Both were wrong, and Section 3 now lists every connection the Software makes. Section 4 now names the provider and lists everything the optional Claude setting sends. Section 5 now lists the account records we keep, and server logs. Section 6 is new and covers the website. If you agreed to version 1.1 or earlier, this version applies to you 14 days after we email you about it; until then the version you agreed to applies. If you agreed to version 1.2, this version applies to you now, because it only removes more of your information when you ask us to delete your account. Earlier versions stay published at bodycamreader.com/legal/versions.
1. The short version
Your recordings never reach us. The Software transcribes and analyzes your audio and video entirely on your own computer. We do not receive, store, see, or have any means of retrieving your recordings, your transcripts, your review documents, your case names, or the names of anyone in them.
The one exception is a choice you make. If you choose Claude for a recording or a question (Section 4), transcript text, your note about the recording, and the questions you ask go to Anthropic, the company that makes Claude. They still never come to us. Claude is never used for a new recording unless you choose it for that recording.
What we do hold is the small amount of information needed to run an account: who you are, that your license is valid, and how many cases you have processed.
2. What stays on your computer
All of the following are created and stored on your machine and are never transmitted to us:
- The recordings you supply
- Transcripts generated from them
- Speaker labels and diarization
- Summaries, flagged moments, statements, inconsistencies and open questions
- Anything you type into the question box, and the answers returned
- Review documents, exports and printed reports
- File names, case names, matter numbers and party names
We have no copy. We cannot produce these in response to a subpoena, because we do not have them. We also cannot restore them if you lose them — backup is yours.
If you choose Claude for a recording or a question, some of these items are sent to Anthropic, as Section 4 sets out. None of them are sent to us in either setting.
3. Every connection the Software makes
Connections to us
3.1 License check — before each case. Sends: a device token identifying this installation, and your Software version. Nothing else. Receives: whether you may run this case, and why not if you may not. If a case fails or is stopped before it produces a transcript, the Software sends a reference number for that case so it can be released and not counted against you.
3.2 Sign-in. Sends: your email address, your password, your two-step verification code if you have turned two-step verification on, and a label for the computer ("Mac app" or "Windows app") so you can tell your devices apart. Your password is used to verify you and is not stored by the Software on your computer. Your email address is saved on your computer so the Software can show who is signed in.
3.3 Sign-in checks while you work. Before you ask a question, check a passage, set up the passage check, or retry a case, the Software sends its device token to confirm this computer is still signed in. Signing out sends the device token so we can switch it off.
None of these send any recording, transcript, analysis, question, answer, file name, case name, or party name.
3.4 Without a connection. The Software will not start a new case unless it can reach us to check your license. There is no offline grace period.
Connections to other companies
3.5 Updates. The Software checks for and downloads updates from GitHub, where our releases are published, not from us. Like any download, GitHub sees your computer's internet address and the file requested.
3.6 Setup downloads. The first-run setup, and some features the first time you use them, download free speech and analysis models and tools from Hugging Face, Ollama and GitHub, and, on a Mac, Homebrew. On Windows, setup may also download tools from the publishers that host them, such as gyan.dev for ffmpeg. These companies see your computer's internet address and the file requested. Nothing about your cases is sent.
3.7 The optional Claude setting. See Section 4.
The Software sends no crash reports, usage statistics, or other telemetry.
4. Optional third-party analysis (Claude) — never used unless you choose it
The Software includes an optional setting that uses Claude, made by Anthropic, PBC, instead of running the analysis on your machine. It uses an Anthropic account key that you provide.
Claude is never used for a new recording unless you choose it for that recording. Each new recording starts on local processing. A recording you ran with Claude keeps using Claude for its questions and for any retry. For a recording you ran locally, you can also choose to send a single question to Claude, and the Software asks you to confirm before it does.
When Claude is used, the following leave your computer and go to Anthropic, under Anthropic's terms and your agreement with Anthropic:
- The transcript text, including speaker labels and timestamps
- The note you add about the recording, if you add one
- Every question you send to Claude
Recordings themselves are never transmitted, and none of this is sent to us. Do not choose Claude for privileged, sealed, or protected material without first deciding for yourself that it is consistent with your professional and contractual obligations.
5. Account information we hold
| What | Why | How long |
|---|---|---|
| Email address and firm or organization name | To identify your account and contact you about the Software | While your account is open |
| Your password, held by our account provider in hashed (scrambled) form; your two-step verification setup, held by our account provider; and your backup codes, hashed | To sign you in | While your account is open |
| License status, plan, seat count, and the people you invite to your firm | To operate the license and manage seats | While your account is open |
| Count of cases processed, and the date and Software version of each | To apply the free first case and enforce your plan | While your account is open |
| Each computer signed in: its label, when it was added and last used, and whether it was signed out | So you can see and remove your devices | While your account is open |
| A log of account emails we sent you (for example password resets), with your email address and the time | To stop misuse and to answer support questions | While your account is open |
| Where your firm first came from, as a short label such as "linkedin" or "google.com", for accounts opened under version 1.2 or later | To learn which of our efforts actually reach firms | While your account is open |
| Your agreement record: the email address you agreed with, the version and fingerprint of the documents you accepted, when, your internet address, and your browser's description of itself | To prove what you agreed to | Kept after your account closes, as proof of the agreement |
| Support correspondence | To answer you | While your account is open |
| Server logs: the internet address of each request to our servers, and, for a password reset, the email address it was sent to | To run and secure the service | Kept by our hosting provider under its log retention settings |
When your account is deleted, we remove your sign-in record (email address, hashed password, two-step setup and backup codes, and our login provider's record of your sign-ins), your computers, your membership, the log of account emails sent to you, and any invitation sent to your address. If no one else in your firm still has access, we also remove the firm, its case counts and where it came from. If colleagues remain, the firm's case counts stay with the firm without your name, so the firm's single free case stays used, and if you were its only active owner, the active colleague who has been in the firm longest becomes its owner so someone can still manage it. We keep your agreement record (Section 5 table) as proof of what you agreed to. Stripe keeps its own billing records under its own policies.
We keep the rest while your account is open. We do not delete it automatically on a fixed schedule — if you want it removed, ask us and we will do it (see Section 10). We would rather tell you what we actually do than publish a timetable we do not keep.
Payment. Card payments are processed by Stripe. We never see or store your card number. We hold only Stripe's customer and subscription references, the plan and seats you chose, whether a payment succeeded, and a record of the payment events Stripe sends us.
6. The bodycamreader.com website
6.1 Visit counts. The website uses Vercel Web Analytics to count visits. It uses no cookies and does not follow you to other websites. For each page view it records the page, the website that sent you, your country, and your type of device and browser. It also counts a few actions: a download, starting or finishing sign-up, signing in, starting, cancelling or finishing a checkout, using the sample on the home page, following a link off the site, reaching a page that does not exist (with that page's address), and a short code for why a form failed (never what you typed). Each count carries the short label for where you first came from (Section 6.2). Before anything is sent, the page address is stripped of everything except campaign labels (the "utm" and "ref" parts of a link), so reset links and email addresses are never sent.
6.2 What the website keeps in your browser. The website sets no cookies. When you sign in on the website, it keeps you signed in with a sign-in token in your browser's local storage, which is removed from your browser when you sign out there. It also saves two small notes in local storage: where you first came from, so a sign-up a few days later is still counted toward the right source, and, on our own computers only, a note that switches counting off. After a payment, it keeps a note for that browser tab so the payment is counted once. You can clear all of these by clearing your browser's site data.
6.3 Fonts and downloads. Pages load their typefaces from Google Fonts, so Google sees your internet address when a page loads. The website's download buttons send you to GitHub, where the installers are published.
7. What we do not do
- We do not sell your information.
- We do not share it with advertisers or data brokers.
- We do not use your recordings, transcripts or questions to train any model. We could not — we never receive them.
- We do not use tracking that follows you across other websites.
- We do not use advertising pixels, and the website sets no cookies.
8. Who we share account information with
Only the service providers needed to run the product, and only for that purpose:
- Stripe — payment processing
- Vercel — hosting the website and our servers, and the visit counts in Section 6
- Supabase — the database that holds account and license records, and sign-in
- Resend — sending account and support email
Each processes information on our instructions. We will also disclose information where legally compelled, and if we are ever compelled to produce information about you, we will tell you unless we are prohibited from doing so.
GitHub, Hugging Face, Ollama, Homebrew, the publishers of Windows setup tools, Google Fonts and, if you choose it, Anthropic receive connections from your computer or browser as Sections 3, 4 and 6 describe. We do not send them your account information.
9. Security
Account data is encrypted in transit and at rest. Access is limited to personnel who need it. Because your recordings and their contents never leave your computer, the most sensitive material you handle is outside our systems entirely — which is the single most effective security measure available and the reason the Software is built this way.
Security of the computer the Software runs on is yours: full-disk encryption, device access control, and physical security of that machine.
10. Your choices
- Access or correction — email us and we will provide or correct what we hold.
- Deletion — cancel and ask us to delete your account record. We will do so within 30 days, except for what Section 5 says we keep after deletion and anything we must retain for tax or legal reasons.
- Export — ask and we will send you the account information we hold.
- Marketing email — unsubscribe at any time. Account and billing email continues while your account is open.
There is nothing to request about your recordings or transcripts, because we do not have them.
11. Other points
11.1 Not for consumers. The Software is sold to legal professionals and organizations. It is not directed to children and we do not knowingly collect information from anyone under 18.
11.2 Where we operate. We are in the United States and account information is stored in the United States.
11.3 Changes. If we change this policy materially, we will notify account holders before the change takes effect. Each version is numbered and dated.
11.4 Contact. support@saveyatech.com — SaveYa Tech LLC, 120 Commerce Way, Apt 138, Woburn, MA 01801