Privacy Policy

This Privacy Policy explains how Legal Entity Name Placeholder (“Company”, “we”, “us”) collects, uses, shares, and protects personal information when you access or use Platform Placeholder (the “Service”).

Effective: Date Placeholder
Last updated: Date Placeholder
Controller: Legal Entity Name Placeholder (New Mexico LLC)
Contact: Support Email Placeholder

Quick Summary (Not a substitute for the full Policy)

We run a productivity/workflow platform. We collect account identifiers (e.g., email, username), optional profile info (e.g., profile image, timezone), and content you store in your workspace. We also collect basic technical/log data for security and operations (e.g., IP and device data).

If you do not agree, do not use the Service.

This Privacy Policy is intended to satisfy common transparency obligations (including GDPR/UK GDPR-style notice requirements). If mandatory law in your jurisdiction requires additional disclosures, those mandatory disclosures apply.


1. Data Controller / Who We Are

The data controller responsible for your personal information is:
Legal Entity Name Placeholder (New Mexico LLC)
Address: Registered Agent Address Placeholder
Support: Support Email Placeholder
Legal: Legal Email Placeholder

2. Scope

This Policy covers personal information we process when you use the Service, including our website/app pages hosted via Webflow, our authentication via Memberstack, security/CDN services via Cloudflare, and support communications (including via Zoho Mail).

This Policy does not cover Third-Party Services you choose to access via outbound links (including affiliate links). Their privacy practices are governed by their own policies.

3. Personal Information We Collect

3.1 Account & Profile Data

  • Email address (required for account)
  • Username (required)
  • Optional profile image (if you upload one)
  • Optional timezone (if you set one)
  • Authentication metadata (e.g., login timestamps, account IDs) handled by our auth provider

3.2 Workspace Content / User Content

The Service allows you to create and store workspace information (e.g., stacks, notes, project/workflow documentation, tool selections, prompts, and other content you type in or upload). This may include personal data if you choose to put it there.

Do not store sensitive personal data. Do not input secrets, credentials, or highly sensitive data into your workspace. You control what you put into the Service.

3.3 Technical, Usage & Log Data

Like most online services, we and our infrastructure providers may automatically collect technical/log data when you access the Service:

  • IP address and approximate location derived from IP
  • Device/browser type, OS, language, referrer, pages/actions, and timestamps
  • Security events (e.g., failed logins, rate limits, suspicious activity)
  • Cookies or similar technologies (see Section 8)

3.4 Support & Communications

If you contact us (email, support inbox, or a Webflow contact form), we receive the content of your message and any information you provide. Support messages sent via forms may be processed by Webflow and delivered to our email provider (Zoho Mail).

4. How We Use Personal Information

Purpose Examples Typical legal basis (where applicable)
Provide and operate the Service Account creation, login, workspace functionality, storing your content Contract / performance of a contract; legitimate interests
Security, abuse prevention, and integrity Rate limiting, bot detection, investigating suspicious activity Legitimate interests; legal obligation (where applicable)
Support and communications Responding to tickets, account deletion requests, operational notices Contract; legitimate interests
Analytics and product improvement (optional) Understanding feature usage, performance monitoring Consent (where required); otherwise legitimate interests
Marketing/newsletters (optional) Email newsletter, product updates Consent (where required); opt-out where allowed
Legal compliance and enforcement Responding to lawful requests, enforcing Terms Legal obligation; legitimate interests

Note: Legal bases vary by jurisdiction. Where consent is required (commonly for non-essential cookies/analytics in the EU/UK), we will request it before processing.

5. How We Share Personal Information

We do not “sell” your personal information in the ordinary sense. We share personal information only as needed:

5.1 Service Providers / Processors

We use vendors to run the Service. Depending on your use, these may include:

  • Webflow (hosting; forms)
  • Cloudflare (DNS, CDN, security/performance services)
  • Memberstack (authentication and account management)
  • Zoho Mail (email processing)
  • Future: analytics, email/newsletter, storage/database tools (e.g., Supabase) if enabled later

These providers process data on our behalf under contractual safeguards and access restrictions.

5.2 Legal, Safety, and Enforcement

We may disclose information if we reasonably believe it is necessary to comply with law, protect rights/safety, prevent fraud/abuse, or enforce our Terms.

5.3 Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We may provide notice where required by law.

6. International Data Transfers

We are based in the United States, and our vendors may process data in the U.S. and other countries. If you are in the EEA/UK/Switzerland, cross-border transfers may occur. Where required, we rely on appropriate transfer mechanisms (for example, Standard Contractual Clauses or equivalent safeguards) and vendor commitments.

7. Data Retention

We keep personal information only as long as reasonably necessary for the purposes described above, unless a longer retention period is required or permitted by law. Typical retention approach:

  • Account data: retained while your account is active.
  • Workspace content: retained while your account is active and until deletion is processed.
  • Deletion requests: we aim to process account deletion requests within 14 days, unless technically impracticable or legally required to retain certain data.
  • Support communications: retained as needed to resolve issues and maintain records, then deleted/archived per internal policy.
  • Logs/security records: retained for a limited period for security and troubleshooting, then rotated/deleted (exact periods may vary by system).
  • Backups: residual copies may persist for a limited time due to backup/archival systems.
Important: Backups and logs may delay complete deletion. We do not promise immediate deletion from all systems.

8. Cookies, Analytics, and Similar Technologies

8.1 Essential vs. Optional

We may use cookies/local storage/service-worker storage and similar technologies for:

  • Essential: login/session, security, load balancing, basic functionality.
  • Optional (if enabled): analytics/measurement, product improvement, marketing.

8.2 Consent (EU/UK and similar jurisdictions)

Where required by law, we will ask for consent before setting optional cookies/trackers (such as analytics). You can withdraw consent at any time. If we implement analytics, we will (a) describe the tool(s), and (b) provide a cookie/consent management option.

8.3 Webflow/Cloudflare/Memberstack Technical Cookies

Certain cookies or similar identifiers may be set by our infrastructure providers to enable the Service, security protection, and authentication.

We can add an explicit cookie table once your analytics/marketing tools are finalized.

9. Affiliate Links & Third-Party Sites

Some outbound links may be affiliate links. When you click an external link, the third-party site may collect information under its own privacy policy (including via cookies). We do not control third-party data practices.

10. Administrative Access to Workspace Content

Workspace content is stored by the Service and is not end-to-end encrypted. This means:

  • Our systems can technically access workspace content.
  • We do not routinely review workspace content.
  • We may access content if reasonably necessary for support, troubleshooting, security, or legal compliance.

11. Security

We use reasonable technical and organizational measures to protect personal information (e.g., access controls, least privilege, and security monitoring). However, no system is 100% secure. You are responsible for maintaining the confidentiality of your credentials and for your own backups.

12. Your Privacy Rights

12.1 EEA/UK/Switzerland (GDPR/UK GDPR-style rights)

Depending on your location and applicable law, you may have rights including: access, rectification, deletion, restriction, portability, objection, and withdrawal of consent. You also may have the right to lodge a complaint with your local supervisory authority.

To exercise rights, contact: Support Email Placeholder (or Privacy Requests Email Placeholder if you prefer).

12.2 United States State Privacy Rights (where applicable)

Some U.S. state laws provide rights such as access, deletion, correction, and opting out of certain processing (e.g., sale, targeted advertising, certain profiling). We currently do not run our Service as a data broker and do not offer targeted advertising as a core feature. If our practices change, we will update this Policy.

13. Children / Minors

The Service is not directed to children. We require users to be 18+ under our Terms. If you believe a minor has provided personal information to us, contact us and we may take steps to delete it.

14. Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects about you as a core feature. If we introduce such processing, we will update this Policy and provide any required disclosures.

15. Changes to This Privacy Policy

We may update this Policy from time to time. We will update the “Last updated” date. If changes are material, we may provide additional notice (e.g., in-app notice or email) where required or appropriate.

16. Contact Us

  • Support: Support Email Placeholder
  • Legal: Legal Email Placeholder
  • Privacy requests: Privacy Requests Email Placeholder
  • Company: Legal Entity Name Placeholder
  • Address: Registered Agent Address Placeholder