This Privacy Policy explains how Legal Entity Name Placeholder (“Company”, “we”, “us”) collects, uses, shares, and protects personal information when you access or use Platform Placeholder (the “Service”).
We run a productivity/workflow platform. We collect account identifiers (e.g., email, username), optional profile info (e.g., profile image, timezone), and content you store in your workspace. We also collect basic technical/log data for security and operations (e.g., IP and device data).
If you do not agree, do not use the Service.
This Privacy Policy is intended to satisfy common transparency obligations (including GDPR/UK GDPR-style notice requirements). If mandatory law in your jurisdiction requires additional disclosures, those mandatory disclosures apply.
The data controller responsible for your personal information is:
Legal Entity Name Placeholder (New Mexico LLC)
Address: Registered Agent Address Placeholder
Support: Support Email Placeholder
Legal: Legal Email Placeholder
This Policy covers personal information we process when you use the Service, including our website/app pages hosted via Webflow, our authentication via Memberstack, security/CDN services via Cloudflare, and support communications (including via Zoho Mail).
This Policy does not cover Third-Party Services you choose to access via outbound links (including affiliate links). Their privacy practices are governed by their own policies.
The Service allows you to create and store workspace information (e.g., stacks, notes, project/workflow documentation, tool selections, prompts, and other content you type in or upload). This may include personal data if you choose to put it there.
Like most online services, we and our infrastructure providers may automatically collect technical/log data when you access the Service:
If you contact us (email, support inbox, or a Webflow contact form), we receive the content of your message and any information you provide. Support messages sent via forms may be processed by Webflow and delivered to our email provider (Zoho Mail).
| Purpose | Examples | Typical legal basis (where applicable) |
|---|---|---|
| Provide and operate the Service | Account creation, login, workspace functionality, storing your content | Contract / performance of a contract; legitimate interests |
| Security, abuse prevention, and integrity | Rate limiting, bot detection, investigating suspicious activity | Legitimate interests; legal obligation (where applicable) |
| Support and communications | Responding to tickets, account deletion requests, operational notices | Contract; legitimate interests |
| Analytics and product improvement (optional) | Understanding feature usage, performance monitoring | Consent (where required); otherwise legitimate interests |
| Marketing/newsletters (optional) | Email newsletter, product updates | Consent (where required); opt-out where allowed |
| Legal compliance and enforcement | Responding to lawful requests, enforcing Terms | Legal obligation; legitimate interests |
Note: Legal bases vary by jurisdiction. Where consent is required (commonly for non-essential cookies/analytics in the EU/UK), we will request it before processing.
We do not “sell” your personal information in the ordinary sense. We share personal information only as needed:
We use vendors to run the Service. Depending on your use, these may include:
These providers process data on our behalf under contractual safeguards and access restrictions.
We may disclose information if we reasonably believe it is necessary to comply with law, protect rights/safety, prevent fraud/abuse, or enforce our Terms.
If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We may provide notice where required by law.
We are based in the United States, and our vendors may process data in the U.S. and other countries. If you are in the EEA/UK/Switzerland, cross-border transfers may occur. Where required, we rely on appropriate transfer mechanisms (for example, Standard Contractual Clauses or equivalent safeguards) and vendor commitments.
We keep personal information only as long as reasonably necessary for the purposes described above, unless a longer retention period is required or permitted by law. Typical retention approach:
We may use cookies/local storage/service-worker storage and similar technologies for:
Where required by law, we will ask for consent before setting optional cookies/trackers (such as analytics). You can withdraw consent at any time. If we implement analytics, we will (a) describe the tool(s), and (b) provide a cookie/consent management option.
Certain cookies or similar identifiers may be set by our infrastructure providers to enable the Service, security protection, and authentication.
We can add an explicit cookie table once your analytics/marketing tools are finalized.
Some outbound links may be affiliate links. When you click an external link, the third-party site may collect information under its own privacy policy (including via cookies). We do not control third-party data practices.
Workspace content is stored by the Service and is not end-to-end encrypted. This means:
We use reasonable technical and organizational measures to protect personal information (e.g., access controls, least privilege, and security monitoring). However, no system is 100% secure. You are responsible for maintaining the confidentiality of your credentials and for your own backups.
Depending on your location and applicable law, you may have rights including: access, rectification, deletion, restriction, portability, objection, and withdrawal of consent. You also may have the right to lodge a complaint with your local supervisory authority.
To exercise rights, contact: Support Email Placeholder (or Privacy Requests Email Placeholder if you prefer).
Some U.S. state laws provide rights such as access, deletion, correction, and opting out of certain processing (e.g., sale, targeted advertising, certain profiling). We currently do not run our Service as a data broker and do not offer targeted advertising as a core feature. If our practices change, we will update this Policy.
The Service is not directed to children. We require users to be 18+ under our Terms. If you believe a minor has provided personal information to us, contact us and we may take steps to delete it.
We do not use automated decision-making that produces legal or similarly significant effects about you as a core feature. If we introduce such processing, we will update this Policy and provide any required disclosures.
We may update this Policy from time to time. We will update the “Last updated” date. If changes are material, we may provide additional notice (e.g., in-app notice or email) where required or appropriate.