Privacy policy

Last updated 11 November 2026

Showyland is a Mac app. Everything it keeps about your meetings stays on your own Mac. We run no server that receives meeting data, the app has no analytics or tracking, and we never sell or share personal data.

1. Who we are

Showyland is published by Ori Topolansky, a registered business in Israel ("we", "us"). This policy covers the Showyland app for macOS, our sign-in service at auth.showy.land, our update service at updates.showy.land, and this website. Write to us at support@showy.land.

2. Two kinds of data

• Data that reaches us (section 3) is little: what passes through our sign-in and update services, and what you send us when you write. We are responsible for it.
• Data the app keeps on your Mac (sections 4 to 7) never reaches us. If you are a presenter using Showyland, you decide what it keeps about the people in your meetings and what you do with it, and you are responsible for it under the privacy law that applies to you. We can't see it, and we can't access, change or delete it for you.

3. What reaches us

Signing in with Zoom

When you sign in, Zoom sends your browser to our sign-in service with a one-time code, and the service exchanges it with Zoom for your access tokens on the app's behalf. Later the app sends your token through the service to renew it, to get a Meeting SDK signature, and to revoke it when you sign out. The service passes these between the app and Zoom and stores none of them: it has no database. Our own logs record only the type of each Zoom notice it receives (for example, that an app was removed) and Zoom's status codes, never a person, token or code.

Updates

A minute after it starts and every six hours, the app reads a short file at updates.showy.land that names the newest version, and it downloads new versions from there. The request carries nothing about you or your meetings.

Your IP address

Our services and this website run on Cloudflare. Like any website, they see your device's IP address when you connect. Cloudflare uses it to deliver the request and protect the services from abuse, and our sign-in service counts requests per IP address for one minute to limit abuse. We keep no record of IP addresses ourselves.

This website

This website sets no cookies of its own, uses no analytics and loads nothing from other sites.

When you write to us

If you email us, we receive your email address, your name if you give it, and what you write, including any file you attach, such as the app's log file (see Support). We use it only to answer you and keep our records of support. Our email is forwarded by Cloudflare and kept in our mailbox at Google.

4. What the app keeps on your Mac

None of this is sent to us. It stays on your Mac until you delete it (section 9).

• Your Zoom sign-in: your Zoom tokens and the profile Zoom gives the app (section 5), encrypted with a key held in your Mac's Keychain, and a copy of your Zoom profile picture.
• Your meetings list: the last 200 meetings you opened, with their links, passcodes and topics, encrypted the same way.
• Your shows: your shows, slides, media, settings, and the keys of the connections you set up (encrypted).
• For each meeting you hold with Showyland: who came, when they joined and left, and name changes; the chat to everyone (never private chat); answers to your questions; game points; clicks on your tracked links and visits to your invitation; an email address for a person when they gave it through your invitation, you typed it, or Zoom's participant list had it; what your own CRM says about them (section 7); transcripts, made on your Mac or imported from your Zoom cloud recording; and notes and summaries you, or an AI assistant you connected, write.
• Media: your recordings (with the meeting's sound, and, if you turn it on, each participant's sound in a file of its own), small pictures of the people in each recording, and photo booth pictures.
• A diagnostic log of the app's Zoom part, which includes the names of people in your meetings. It is replaced after 5 MB, keeping one older copy.
• Backups of the library, made before an app update changes its structure. The 5 newest are kept.
• Chat you save: if you choose to save a meeting's chat to a file, it includes the private messages sent to or from you.

Tokens and keys are encrypted. The rest of the library and your recordings are ordinary files on your Mac, protected by your Mac's login and by FileVault disk encryption when it is on. We recommend turning FileVault on.

5. Data from Zoom

With your permission, the app reads from Zoom only what its features need. Everything it reads stays on your Mac and is used only to give you those features.

• Your profile (user:read:user): your name, email address, Zoom user ID, personal meeting ID and link, and profile picture, to show who is signed in and open your personal room.
• A start token (user:read:zak), to open your meetings as their host. It is kept in memory only.
• Your cloud recordings (cloud_recording:read:list_user_recordings, cloud_recording:read:list_recording_files), only when you choose to import one: the list of recent recordings, and a recording's transcript and chat files. The app never downloads a cloud recording's video or audio, and it drops the private messages from the chat file.
• Who took part (meeting:read:list_past_participants), on the same import: names, email addresses where Zoom has them, and join and leave times.
• A meeting's host: when you open a Zoom link that isn't your personal room, the app may ask Zoom only who hosts that meeting, to know whether to open it as host or as a participant.
• The meeting itself: the app takes part in your meetings through Zoom's Meeting SDK. Zoom processes the meeting under its own privacy statement.

We never use data from Zoom to advertise, to build profiles of people, or to train AI, and we never receive it.

6. People in your meetings

If you take part in a meeting run with Showyland, the presenter's app can see what Zoom shows a host: your name in Zoom, your video and sound, and what you write in the chat. The presenter may put your video on air, record the meeting on their Mac, and keep the items listed in section 4. While the app receives participants' video, Zoom tells everyone in the meeting that it is being recorded. Private chat is never stored in the presenter's library.

The presenter is responsible for this data. To see, correct or delete it, contact the presenter: we have no access to it.

7. Connections you choose to set up

Each of these is off until you set it up, and sends data only to the place you chose.

• Your own website and CRM (WordPress with FluentCRM, through a plugin on your site). The app reads your contacts' tags to show next to people, and, only when you click after a preview, adds a note to each known contact: minutes attended, answers, link clicks and up to 12 chat messages. It can also run on your site: invitations, tracked links (a click records which link, the contact and their email when known), personal pages for each person (their name, a small picture and their answers, for 1 to 365 days as you choose; visitors get a cookie from your site), share pages of a meeting's summary (names, chat and transcript only if you include them; never emails or clicks), and the page your browser guests open. All of this is on your site, under your control.
• Live to YouTube. Your show, including anyone you put on stage, streams from your Mac to your channel, encrypted (RTMPS). If you enter your own streaming server instead, it may be unencrypted (RTMP).
• Browser guests. A guest you invite by a link opens a page on your website. Their camera and microphone go directly to your Mac, encrypted (WebRTC), and they hear the meeting's sound. To connect, both sides ask Google's public STUN server for their own network address, so Google sees both IP addresses. Connection messages pass through your site and are deleted when read or after 2 minutes; an invitation lasts 12 hours.
• An AI assistant on your Mac (for example Claude, through MCP). Off by default. When you connect one, it can read your library (meetings, people, chat, answers) and look at the picture going out. What it then sends to its provider is under that provider's terms.
• Web pages you show. A website you add to your show loads from that site, which sees your Mac's IP address.
• Devices on your Mac or home network: Stream Deck, a Flic button, NDI video sources and the remote control from your phone. These stay on your Mac or your local network.

If you stream or bring browser guests into a meeting, tell the people in it.

8. What we never do

• No analytics, telemetry, tracking or advertising, in the app or on this website.
• No automatic crash reports or log uploads: logs leave your Mac only if you send them to us.
• We don't sell, rent or share personal data, and we don't build profiles of anyone.
• We don't use your data to train AI.

9. How long data is kept, and deleting it

With us

• The sign-in and update services keep no user data. Request counts per IP address last one minute.
• Support email is kept while we need it to help you and for our records. Ask us and we delete it, unless the law requires us to keep it.

On your Mac

The app keeps what it stores until you delete it; nothing on the Mac expires by itself.

• A meeting: מחיקת המפגש (Delete the meeting) removes its attendance, chat, answers, clicks, the people's details and its imports, and first takes down its share pages on your site.
• A recording: moving it to the Trash also deletes its pictures of people, and the transcripts, summaries and notes made from it.
• What stays after deleting a meeting: the results of your show's questions (each question keeps its answers, with names, until the library is deleted), the backups of the library until newer ones replace them, and the diagnostic log until it is replaced.
• Everything: signing out deletes your Zoom tokens, profile and picture; deleting the app's folders deletes the rest (how).

On your website

Guest invitations expire after 12 hours, and personal and share pages after the days you set. Contacts and notes in your CRM stay there until you delete them.

10. Security

• All network traffic of the app and our services uses TLS 1.2 or above, except a streaming server you enter yourself and NDI sources on your local network, as described above.
• The Zoom app's secret lives only in our sign-in service, never in the app. Tokens and keys on your Mac are encrypted with a key in your Keychain.
• The app and installer are signed with our Apple Developer ID and notarized by Apple, and updates are checked against that signature before they install.
• If an incident affects Zoom user data, we notify the affected users and Zoom within 72 hours of confirming it. Report security issues to security@showy.land.

11. Your rights

You may ask us to see the personal data we hold about you, to correct it, or to delete it, and you may object to our use of it. Write to support@showy.land; we answer within 30 days. Depending on where you live, you may have further rights under your local law, such as the GDPR in the European Union and the United Kingdom, and you may complain to your data protection authority. In Israel that is the Privacy Protection Authority.

For data in a presenter's Showyland or on their website, contact that presenter: only they can access it.

12. Notice under Israeli law

Under Israel's Protection of Privacy Law, 5741-1981, as amended (including Amendment 13):

• No law requires you to give us personal data. You give it by your own choice: without an email address we can't answer you, and without signing in with Zoom the app can't open your meetings.
• We use what reaches us only for the purposes in section 3: to sign you in, deliver updates, protect our services and answer you.
• It is processed for us by Cloudflare (our services and email forwarding) and Google (our mailbox), only to provide those services. We pass it to no one else, unless the law requires it.
• You have the rights in section 11, including to see and correct your data.

13. Children, transfers and changes

• Children: Showyland is for presenters aged 18 or over. A presenter who holds meetings with minors is responsible for the consents their law requires.
• Transfers: Cloudflare and Google may process the data in section 3 outside Israel, under their data protection terms.
• Changes: we post changes on this page with a new date. If a change affects what the app keeps or sends, we also say so in the app's update notes before it takes effect.

14. Contact

Ori Topolansky, Israel. Privacy questions and requests: support@showy.land. Security: security@showy.land.