Canonical version: the authoritative copy of this policy is published at docs.switchmessage.com/legal/privacy-policy/. This page mirrors that document for reference. In the event of any discrepancy the canonical version prevails.
Effective date: 18 May 2026
Last updated: 25 May 2026
SwitchMessage (“the app”, “we”, “our”) is a macOS menu bar utility that reads messages from your local iMessage database and syncs them to your HubSpot CRM. This document explains exactly what the app processes, what it stores, and where your data goes.
If you are evaluating whether to install SwitchMessage, please read this in full. By signing in to HubSpot through the app, you consent to the processing described below.
Neko Venture Partners Limited (“we”) is the data controller for the data
the app stores about you on your own Mac and the limited operational data
our servers process when the app calls HubSpot through our proxy. We are a
company registered in England and Wales under company number 14784729,
with our registered office at 71–75 Shelton Street, Covent Garden, London,
WC2H 9JQ, United Kingdom. We do not operate a server that collects,
aggregates, or analyses your message content. The Cloudflare Worker we run
at api.switchmessage.com is a stateless proxy used only to inject API keys
into requests you make to HubSpot — it does not log message bodies or store
any user-identifiable data beyond standard request metadata required for
rate-limiting (hashed bearer tokens and IP addresses, retained for at most
24 hours).
For data we send to HubSpot, HubSpot, Inc. is the data controller. Their privacy policy governs what they do with it: https://legal.hubspot.com/privacy-policy.
For subscription payments, Paddle.com Market Limited is our Merchant of Record and the controller for payment data they process on our behalf. Their privacy policy: https://www.paddle.com/legal/privacy.
Our processing is governed by the UK GDPR and the UK Data Protection Act 2018.
SwitchMessage is not currently offered to residents of the European Economic Area (EEA), and checkout is restricted to non-EEA countries. Because the service is not offered there, this policy does not describe the additional rights, transfer mechanisms, and supervisory-authority routes that the EU GDPR would add — they do not currently apply. This policy will be updated before that changes.
If you are in the EEA and would like to use SwitchMessage, you can register your interest at [email protected] and we will let you know if and when we begin offering the service in the EEA.
California residents have additional rights described in Section 8.
~/Library/Messages/chat.db: message text,
timestamps, sender/recipient identifiers (phone numbers and email
addresses), and direction (incoming/outgoing). Reading this file requires
you to grant Full Disk Access in System Settings; the app cannot read it
otherwise.SUEnableSystemProfiling) is
disabled, so no analytics or system information is sent with update checks.| Data | Location | Retention |
|---|---|---|
| Cached iMessage records (including messages held for review) | Local SwiftData database in the app’s container | Until you “Clear Local Cache”, “Full Reset & Sign Out”, or Drop a held message |
| OAuth access / refresh tokens | macOS Keychain (your user account) | Until you sign out |
| Sync configuration and privacy-filter settings (mode, force-review list, keywords) | macOS user defaults (com.switchmessage.app) |
Until you reset macOS preferences or run a Full Reset |
| Dropped-message GUID list | macOS user defaults (com.switchmessage.app) |
Until you run a Full Reset; the message body is deleted at the time of the Drop action |
| Debug log | A file under ~/Library/Application Support/SwitchMessage/Logs/ (one per app launch) |
Until you delete it; the app also rotates older files |
| Communication records | Your HubSpot portal | Per your HubSpot retention policy |
| Proxy request metadata | Cloudflare Worker (api.switchmessage.com) |
At most 24 hours |
| Subscription record | Paddle and our subscription database | For the life of your account plus 7 years for tax records, as required by UK law |
Most API calls go directly from your Mac to api.hubapi.com using your OAuth
access token; we never see them. A small subset (HubSpot’s “Custom Channels”
endpoints and the OAuth token-exchange endpoint) route through our Cloudflare
Worker at api.switchmessage.com, which:
The Worker does not log request or response bodies. It logs only HTTP status codes, paths, hashed bearer tokens, and IP addresses (for rate-limit enforcement), retained for at most 24 hours.
We use a small number of subprocessors to run the service. Each is bound by a data-processing agreement that requires them to process personal data only on our instructions and to maintain appropriate security measures.
| Subprocessor | Purpose | Data shared | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosts the marketing site, docs site, and the API proxy Worker | Request metadata (IP, path, hashed bearer token) for ≤ 24 h | Global edge — request routed to nearest data centre |
| Paddle.com Market Limited | Merchant of Record — checkout, billing, tax, invoicing, refunds | Name, email, billing address, payment details, subscription state | United Kingdom (Paddle HQ); payment networks operate globally |
| HubSpot, Inc. | The CRM your iMessage data syncs into (you choose to connect it) | The communication records the app sends to your HubSpot portal | United States |
We will give at least 30 days’ notice in this policy before adding a new subprocessor or replacing one of the above. If you object to a new subprocessor, your remedy is to cancel your subscription (see the Refund Policy).
You have the right to access, rectify, erase, restrict, or port the personal data we hold about you, and to object to processing. We hold almost none — only what you’ve configured locally on your own Mac, the limited proxy metadata described above, and your subscription record at Paddle. To exercise these rights, contact us at [email protected].
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) if you believe we have processed your personal data unlawfully.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you:
To exercise any of these rights, email [email protected] from the address associated with your SwitchMessage account. We will verify your identity by replying to that address and will respond within 45 days (extendable by a further 45 days if reasonably necessary, in which case we will tell you).
Our infrastructure is hosted on Cloudflare’s global edge network; your requests are routed to the nearest Cloudflare data centre, which may be outside the UK. Transfers of UK users’ personal data to Cloudflare are protected by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as applicable.
HubSpot is a US-headquartered company. Data you sync to your HubSpot portal is transferred to HubSpot’s US infrastructure under HubSpot’s certification to the UK Extension to the EU–U.S. Data Privacy Framework, with the UK IDTA as a fallback safeguard for any transfer not covered by that certification.
Paddle is a UK-headquartered company; payments are processed by Paddle’s UK entity, with onward transfers to global payment networks under the safeguards described in Paddle’s own privacy policy.
We follow the breach-notification requirements of the UK GDPR:
This policy is primarily about the SwitchMessage Mac app. The marketing site
at switchmessage.com is a static site with no analytics, no third-party
trackers, and no cookies set by us. We do load the Inter font stylesheet
from rsms.me; that request transmits your IP address and User-Agent to
rsms.me as any HTTP request would, but no cookies are exchanged and we
receive no analytics about your visit.
Our documentation site (docs.switchmessage.com) and download host
(download.switchmessage.com) behave the same way.
SwitchMessage is not directed at children under 16 years of age, or any higher minimum age required by the law of your country, and we do not knowingly process data about them. If you believe we have done so in error, please contact us and we will delete it.
Any material change will be reflected in a new version of the app and this document; the “Last updated” date above will change accordingly. Material changes will also be communicated through the in-app release notes.
Questions about this policy, or to exercise your data-protection rights, email [email protected].
Neko Venture Partners Limited 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom Registered in England and Wales · Company number 14784729