← CANoli

CANoli Privacy Policy

Effective September 29, 2026 · Last updated September 29, 2026

This Privacy Policy explains how Salvatorre, LLC (“we”, “us”, or “the Company”) handles information in connection with the CANoli desktop application (“CANoli” or “the Software”) and the website at https://salvatorre.com/products/canoli.

The guiding principle is simple: CANoli is a desktop application, and your CAN bus data stays on your computer. CANoli is not a cloud service. We do not host your projects, logs, or vehicle data, and we cannot see them. The limited information described below is the only information that ever leaves your machine, and most of it is optional or required only to run your license.

1. Information that stays on your device

The following never leaves your computer and is never transmitted to us:

  • CAN traffic, traces, and logs you capture or replay.
  • Databases (e.g. DBC files), projects, transmit configurations, and decoded signals.
  • Application settings and preferences (theme, window layout, adapter configuration), stored in your operating system’s standard settings store.
  • Your license credentials, stored in your operating system’s secure keychain (macOS Keychain, Windows Credential Manager, or the Linux Secret Service), not in plain-text files.

2. Information CANoli sends, and why

2.1 License activation and validation

To verify your license, CANoli contacts our payments and licensing provider, Lemon Squeezy, and sends:

  • your license key, and
  • a one-way SHA-256 hash of a machine identifier used to count and bind activation seats.

The raw hardware identifier never leaves your device — only its irreversible hash is sent. We use this solely to enforce the terms of your license (for example, the number of devices a key may activate). See Lemon Squeezy’s privacy policy at https://www.lemonsqueezy.com/privacy.

2.2 Crash reports (opt-in, off by default)

CANoli can send anonymized crash reports to help us fix defects. This is disabled by default and is sent only if you explicitly turn it on (Help → Send Crash Reports). When enabled, a crash report is sent to our error monitoring provider, Sentry, and contains the exception type and a technical stack trace.

Before any report is sent, CANoli scrubs it: file paths, file names, usernames, license keys, activation tokens, machine identifiers, and CAN payload/data bytes are removed or redacted, and personally identifying request data is not collected. We use crash reports only to diagnose and fix software problems. You can disable crash reporting at any time from the Help menu. See Sentry’s privacy policy at https://sentry.io/privacy/.

2.3 Update checks

On launch, CANoli checks for a newer version by downloading a small public version.json manifest from our releases location on GitHub. This is an ordinary download request: no personal data, license key, or usage information is sent. As with any internet request, the server you contact (GitHub) may log your IP address under its own policy. You can disable this check from the Help menu (“Check for Updates on Launch”).

2.4 AI features — your data goes to your own AI agent, not to us

CANoli’s AI features use a bring-your-own-LLM model. CANoli does not embed an AI model and does not include an AI API key. Instead, CANoli exposes its tools and data locally (over a local-machine connection) so that an external AI agent you choose and run — such as Claude Code or Codex — can use them under your account.

This means that when you use AI features, your prompts and the bus data the agent reads are sent to your AI provider under your account and governed by that provider’s privacy policy and terms. They do not pass through our servers, and we do not receive them. Please review your AI provider’s privacy policy to understand how it handles that data.

3. Purchases

Payments for CANoli are processed by Lemon Squeezy, which acts as the merchant of record. When you buy a license, Lemon Squeezy collects the information needed to complete the sale (such as your name, email address, billing details, and payment information) and handles billing, taxes, and refunds. We receive order and license records (such as your email address and which product you purchased) to provide support and manage your license. We do not receive or store your full payment card details. Lemon Squeezy’s handling of your information is governed by its privacy policy at https://www.lemonsqueezy.com/privacy.

4. How we use information

We use the limited information described above only to:

  • deliver, activate, and validate your license;
  • provide customer support;
  • diagnose and fix crashes and defects (if you opt in); and
  • comply with legal obligations.

We do not sell your personal information, and we do not use your CAN data for any purpose (we never receive it).

5. Data retention

  • License and order records are retained for as long as needed to support your license and to meet tax and accounting obligations.
  • Crash reports are retained by our error-monitoring provider for a limited period in line with its standard retention settings, then deleted.
  • On-device data stays on your device until you delete it; uninstalling CANoli and clearing its settings removes its local data.

6. Your rights

Depending on where you live (for example under the EU/UK GDPR or the California Consumer Privacy Act), you may have rights to access, correct, delete, or port the limited personal information we hold about you, to object to or restrict certain processing, and to withdraw consent (for example, by turning off crash reporting). To exercise these rights, contact us at support@salvatorre.com. You also have the right to lodge a complaint with your local data protection authority.

Because most personal information involved in a purchase is collected and controlled by Lemon Squeezy as merchant of record, some requests may be directed to, or fulfilled by, Lemon Squeezy.

7. Children

CANoli is a professional engineering tool intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children.

8. International transfers

Our providers (such as Lemon Squeezy, Sentry, and GitHub) may process information in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above and post the updated policy at https://salvatorre.com/products/canoli. Material changes will be highlighted.

10. Contact

Questions about this Privacy Policy or your information:

Salvatorre, LLC Email: support@salvatorre.com