Privacy Policy
Draft template, not legal advice. This document is a starting point adapted from a reputable open-source source and must be reviewed by your attorney and completed with your actual practices before you rely on it.
The privacy of your data -- and it is your data, not ours -- matters to us. This policy explains what LogicFurnace ("we", "us", "our"), operated by Avid Practice, LLC, collects through logicfurnace.com and our related services (the "Services"), how we use and share it, and the rights you have. We do not sell your personal information.
What we collect and why
We collect information for the purpose of providing the Services, improving them, and keeping them and your account secure. We aim to collect the minimum necessary.
Information you provide
password (stored only as a hash). If you enable two-factor authentication we store the secret needed to verify your codes, in encrypted form.
what you want built, project details, comments, and approvals.
keep a record of that communication.
payment processor; we do not store full card numbers.
- Account information. When you create an account we collect your name, email address, and a
- Content you submit. Information you provide through the Services, such as the description of
- Communications. When you contact us (for example, to request a scoping call or support), we
- Billing information. If and when paid plans are offered, payment details are processed by our
Information we collect automatically
approximate location derived from your IP address, browser and device type, and pages visited, used to operate, secure, and improve the Services.
secure. We do not use third-party advertising cookies. Where required, we ask for your consent before setting non-essential cookies.
- Usage and device data. Basic, aggregate information about how the Services are used, your
- Cookies. We use strictly necessary cookies to keep you signed in and to keep the Services
How we use your information
We use the information described above to: provide, maintain, and improve the Services; authenticate you and secure your account; communicate with you about the Services and your requests; comply with legal obligations; and detect, prevent, and address fraud, abuse, security, and technical issues. We do not use your content to train artificial-intelligence models for unrelated purposes.
When we access or share your information
We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only as follows:
(for example, hosting and infrastructure). Any software produced for you is built through our governed engine and, where you adopt compliance features, assessed against your chosen frameworks; these governed processors handle your project data only to deliver the Services.
only when compelled by a valid, legally binding request from an authority in the United States, or where necessary to protect the rights, safety, and property of you, us, or others.
information may be transferred; we will notify you of any change in ownership or use of your information.
We will ask for your express consent before accessing the content in your account for support, and we access logs and metadata only as needed to operate and secure the Services.
- Service providers (subprocessors). We use a limited set of vendors to run the Services
- Legal requirements. As a company based in the United States, we preserve or disclose information
- Business transfers. If we are involved in a merger, acquisition, or sale of assets, your
Data retention and deletion
We keep your information for as long as your account is active or as needed to provide the Services. When you cancel, your content becomes inaccessible promptly and is permanently deleted from active systems within 30 days and from backups within 60 days, except where we must retain it to comply with legal obligations or resolve disputes.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise any of these rights, email us at [email protected]. We will respond as required by applicable law and will not discriminate against you for exercising your rights.
U.S. state privacy rights (including California)
If you are a resident of California or another U.S. state with a comprehensive privacy law, you have the right to: know what personal information we collect and how we use and disclose it; access and delete your personal information; correct inaccurate information; and opt out of the sale or sharing of personal information and of certain targeted advertising. We do not sell or share your personal information, so there is nothing to opt out of in that respect. You may exercise your rights, or appeal a decision, by contacting [email protected]; you may use an authorized agent where the law permits.
Children's privacy
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
We take reasonable measures to protect your information, including encryption of data in transit, encryption of sensitive secrets at rest, access controls, and audit logging. No method of transmission or storage is completely secure, but we work hard to protect your data and to disclose incidents as required by law.
Location of data
Your information is stored and processed in the United States. If you access the Services from outside the United States, you understand your information will be transferred to and processed there.
Changes to this policy
We may update this policy from time to time. When we make a material change, we will update the date above and take appropriate steps to notify you.
Contact us
Questions about this policy or your information? Email [email protected].
--- Adapted from 37signals' open-source policies, used under CC BY 4.0, with U.S. state-privacy sections added. This is a draft template and not legal advice; have it reviewed by your attorney and confirm it matches your actual data practices before relying on it.