Scope: This is a product data-flow note, not a completed legal privacy policy. A seller identity, support route, and final legal text are still required before public sales.

What Mac Prompt Rewriter handles

The draft you explicitly capture, its original text, and enough destination information to avoid replacing the wrong field.
Your rewrite guidelines, shortcut choices, model and effort choices, and other app settings on the Mac.
The rewrite request and result needed to complete the action you invoked.

Where authentication lives

Mac Prompt Rewriter uses the Codex App Server with your own ChatGPT sign-in. It does not copy or expose your login secret. Authentication, service processing, account access, and any provider retention follow the relevant Codex / ChatGPT behavior and terms.

Context and parent tasks

The launch scope is draft-first. Contextual history remains disabled until the account-isolation behavior is proven in the configured release environment. If a later release enables it, it must resolve an exact originating task and send rewrite work only to a fresh ephemeral child.

Mac Prompt Rewriter does not resume the selected parent, send rewrite turns to the parent, change the parent’s stored history, or choose history by recency or title. Account switching and external sign-in changes are not a complete account-isolation guarantee.

Local retention

Settings are kept locally so your choices survive relaunch. The latest original draft and result are retained for recovery during the app session. They can remain visible to someone using the same Mac account and app session. Clear recovery when the text is sensitive.

What this website collects

This static site has no configured analytics, account system, checkout, or contact form. The future commerce provider will be separate from rewrite processing. Mac Prompt Rewriter should not send your draft, task history, or ChatGPT credentials to a merchant provider for license activation.

Limits

Mac Prompt Rewriter cannot promise zero retention by Codex, account isolation during every external sign-in transition, permanent service availability, or protection against a modified local app. Use the supported release and review final terms before purchase.