Privacy Policy

1. Scope

This Privacy Policy explains how Fog & Iron Labs LLC collects, uses, discloses, and protects personal information through our websites, apps, customer support, purchases, and related services. Product-specific notices or signed agreements may supplement this Policy. This Policy does not cover third-party services you access independently.

2. Information we collect

Information you provide

• Account and contact data: name, email address, organization, role, and login information.
• Commercial data: products selected, plan, transaction status, invoices, subscription status, and support history. Stripe processes full payment-card details; we generally receive only limited transaction and payment-method information.
• Custom App Studio inquiries: business contact details, high-level project details, intended users, selected platforms, requested workflows, timeline, budget range, and public links you choose to provide. Do not send confidential, regulated, or highly sensitive information through the project brief.
• StandPost founding-feedback cohort applications: business and contact details, public business links, a description of intended RFP work, referral platform, and review status. We use these to assess eligibility, assign up to eight qualifying cohort places, prevent duplicates, and contact applicants about the cohort or waitlist. Selected participants may also submit candid private feedback after first-workspace use. We do not use a cohort business name or quote publicly without separate permission. Applying does not enroll anyone in general marketing or authorize payment.
• User Content: documents, RFPs, job materials, post orders, prompts, instructions, drafts, and other content you choose to submit.
• Communications: support requests, feedback, security reports, and other correspondence.

Information collected automatically

• IP address, browser and device type, operating system, approximate location derived from IP, referring page, pages viewed, timestamps, session events, and diagnostic logs.
• Cookie or similar-technology identifiers used for security, authentication, preferences, payment flow, and limited analytics.

Information from others

We may receive information from payment processors, authentication providers, hosting and security vendors, referral sources, app marketplaces, and your organization’s account administrator.

3. Why we use information

• Provide, personalize, maintain, and secure the Services.
• Process purchases, subscriptions, receipts, taxes, refunds, and account access.
• Review Custom App Studio inquiries, assess potential projects, and reply to the person who submitted the request.
• Generate requested analysis, organization, drafts, and other product outputs.
• Respond to support, privacy, legal, and security requests.
• Monitor reliability, prevent fraud and abuse, debug problems, and improve functionality.
• Send transactional messages and, with any required consent, product updates or marketing.
• Comply with law, enforce agreements, protect rights and safety, and establish or defend legal claims.

Depending on applicable law, our legal bases may include performing a contract, legitimate interests, consent, and compliance with legal obligations.

4. How we disclose information

We may disclose personal information to:

• Service providers and processors supporting cloud hosting, security, authentication, customer support, communications, analytics, and AI-assisted product functions.
• Payment providers, including Stripe, to process payments, subscriptions, taxes, fraud controls, disputes, and receipts.
• Your organization, if your account is managed or paid for by an employer or other organization.
• Professional advisers and authorities when reasonably necessary for legal, accounting, audit, insurance, compliance, or safety purposes.
• Transaction participants in a merger, financing, acquisition, bankruptcy, reorganization, or sale of all or part of our business, subject to appropriate safeguards.

We do not sell personal information for money. The corporate website is not configured to use cross-context behavioral advertising. If that changes, we will update this Policy and provide required choices, including any required opt-out mechanism.

5. AI and User Content

When a feature uses an AI service provider, the content and instructions necessary to produce the requested result may be transmitted to that provider. Do not submit highly sensitive or regulated data unless a product expressly supports it. We do not use User Content to train a Fog & Iron general-purpose model. Our providers’ handling of data is governed by their applicable service terms and our arrangements with them.

6. Data retention

We retain personal information only as long as reasonably necessary for the purposes described here, including providing the Services, maintaining account and transaction records, resolving disputes, enforcing agreements, meeting tax and legal duties, preventing abuse, and maintaining security. Custom App Studio inquiry information is retained only as long as reasonably necessary to assess and respond to the request, manage an engagement if one begins, or meet legal and operational duties. Retention varies by data type and product. We may de-identify information and retain it where it can no longer reasonably identify you.

7. Security

We use safeguards designed to protect information appropriate to the nature of the Services. No system is completely secure. You are responsible for strong credentials and for choosing information appropriate to submit. Report suspected security issues to support@fogandironlabs.com.

8. Your choices and rights

You may request access, correction, deletion, or a copy of personal information, and may object to or restrict certain processing where applicable. You may unsubscribe from marketing emails using the link in the message; transactional communications may continue. Account deletion may be subject to legal and operational retention exceptions.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service if the CCPA applies to Fog & Iron. We accept reasonable privacy requests even when a particular statutory right does not apply. Because the corporate website is not configured to use cross-context behavioral advertising, there is no such activity to opt out of through this website.

Submit a request to support@fogandironlabs.com. State the right you wish to exercise and the Fog & Iron product involved. We may verify your identity and authority while using verification information only for that purpose. Authorized agents may submit requests with proof of authority. We will not discriminate against you for exercising an applicable privacy right.

9. Notice at collection

At or before collection, we collect the categories described in Section 2 for the purposes in Section 3 and retain them as described in Section 6. When you use the Custom App Studio brief, we use the contact and project information you provide to review the request, reply, and, if both parties choose to proceed, prepare a proposal. The brief does not enroll you in marketing, text messages, recurring charges, or a service agreement. A link to this Policy is provided where information is collected.

10. Online tracking

On fogandironlabs.com and www.fogandironlabs.com, we use Cloudflare Web Analytics to understand visits to our public pages and improve page performance. It reports page and referring-page URLs, browser and device characteristics, and performance measurements. Performance details may include page-element identifiers and image URLs. Cloudflare Web Analytics does not use cookies or persistent visitor identifiers. We do not forward the contact or project details entered in our project brief as analytics events. This setup measures the company website; individual apps have their own notices. See Cloudflare’s description of its analytics data.

The corporate website does not use cross-context behavioral advertising. Because it does not conduct that type of tracking, it does not change its corporate-site practices in response to browser Do Not Track signals. We do not knowingly allow third parties to collect information about visitors’ activity over time and across unrelated websites for behavioral advertising through the corporate website. Product-specific notices may describe different practices where applicable.

11. Children

The Services are intended for adults and business users. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

12. International use

Fog & Iron is based in the United States. If you use the Services elsewhere, information may be processed in the United States and other countries where providers operate. We will use any transfer mechanism required by applicable law when it applies.

13. Changes and contact

We may update this Policy as products and laws change. The revised date shows when it last changed; we will provide additional notice when required. Questions and privacy requests may be sent to support@fogandironlabs.com.