Node Composer is built around a privacy-first, local-first architecture. Most creative content remains on your own device. We do not provide proprietary AI models, do not resell AI credits and do not host your projects. We only process the minimum information required to operate the software, validate licenses and deliver essential services.
01Introduction
This Privacy Policy explains how Node Composer processes personal data when you visit our website, purchase a subscription, download, activate or use the desktop application. It also explains the role of our selected service providers and the choices available to you.
02Data Controller
03About Node Composer
Node Composer is desktop software for AI-assisted creative workflows. Users connect supported third-party AI providers with their own API keys.
Node Composer:
- does not operate proprietary AI models;
- does not perform proprietary inference;
- does not resell AI credits;
- does not require a Node Composer account.
04Privacy by Design
- local-first processing wherever possible;
- user-controlled AI providers and API keys;
- minimal cloud processing;
- transparent data processing;
- secure handling of credentials and licensing.
05Data That Stays on Your Device
| Stored locally | Where it lives |
|---|---|
| Projects & workflows | Remain in the local library. |
| Prompts & history | Stored locally. |
| Generated media | Stored on the user’s computer. |
| API call history | Stored locally. |
| API keys | Stored in secure operating-system storage. |
| License cache | Stored locally for offline validation. |
06Data Shared With AI Providers
When generation is requested, prompts and any reference media required for the selected workflow are transmitted directly to the AI provider selected by the user — currently WaveSpeed and Runware — using the user’s own API credentials.
Node Composer does not retain copies of this content on its own infrastructure.
07Purchases and Licensing
Subscriptions are sold through Polar, acting as Merchant of Record. Polar manages checkout, billing, taxes and subscription administration. Node Composer receives only the information required to validate licenses and provide software access.
08Node Composer Cloud Services
Node Composer uses Supabase only for essential backend functions:
- license validation;
- realtime operational services;
- webhook verification;
- temporary avatar audio storage;
- limited technical usage tracking.
09In-App Usage Tracking
The application records a limited set of technical lifecycle events:
- first launch;
- first generation;
- upgrade;
- version update.
These events are used to understand software adoption and product quality. They do not include projects, prompts, generated media or payment information.
10Website Download Measurement
The website measures software downloads through a server-side mechanism, without Google Analytics, Meta Pixel or advertising trackers. No marketing cookies are used for this purpose.
The technical information recorded when a download is requested is listed in the Cookie Policy.
11Information We Do Not Store
| Data | Node Composer servers |
|---|---|
| Projects | Not stored |
| Prompts | Not stored |
| Generated images | Not stored |
| Generated videos | Not stored |
| AI outputs | Not stored |
| Payment information | Not stored |
| API keys | Not stored |
12Third-Party Providers
- Polar, Merchant of Record;
- Supabase, backend services;
- WaveSpeed, AI provider;
- Runware, AI provider.
What each provider handles is detailed in Third-Party Services & Subprocessors.
13Data Retention
Retention periods are determined according to the type of information processed. Local data remains under the user’s control. Operational data is retained only as necessary to provide the service and comply with legal obligations.
14Security
We implement appropriate technical and organisational measures, including:
- encrypted communications;
- secure credential storage;
- restricted backend access.
15International Transfers
Where service providers process data outside the European Economic Area, appropriate safeguards are applied in accordance with applicable law.
16Your Rights
Users may request access, correction, deletion, restriction, objection and data portability where applicable under the GDPR.
Requests may be submitted to info@node-composer.studio.
17AI Transparency
Node Composer provides software that orchestrates third-party AI services. Transparency obligations regarding AI-generated content may apply depending on applicable law and user context. See the AI Transparency & EU AI Act Notice.
18Changes
This Privacy Policy may be updated to reflect changes in the software, legal requirements or service providers.