Privacy Policy

1. Who we are and what this covers

Latter Logic is a personally operated business based in the United States. This policy explains how we handle personal information through our public website, customer portal, Fritz services, and support. Contact [email protected] with privacy questions or requests.

If your employer or another organization manages your workspace, it determines who can join, what resources are shared, and how its work is used. Contact that organization about information it controls. Its policies and any separate agreement with Latter Logic may also apply. Third-party websites, model providers, payment services, and connected applications have their own practices where they act independently.

2. Information we process

Account and security information includes your email address, authentication information, account and session identifiers, confirmation and invitation status, two-factor authentication status, company or workspace name, membership, roles, and seat assignments. This comes from you, the sign-in service, and administrators who invite or manage you.

Purchase information includes billing contact and address details, tax information where needed, payment-provider references, card brand and limited card details such as the last four digits, invoices, subscriptions, credit purchases, refunds, and payment status. Stripe processes card entry and payment authorization. We do not need your full card number or security code in support messages.

Usage and operational information includes the workspace and user associated with requests, model and request references, timestamps, measured usage, charges, balances, limits, errors, and security or administrative events. Hosting and network services may also process IP addresses, browser or device information, and request logs to deliver and protect the service.

Work content includes prompts, relevant conversation context, files or file excerpts, generated results, and information supplied by tools or connected services when needed for the work you request. Support information includes messages and attachments you choose to send us. Avoid sending passwords, authenticator keys, full card details, or unnecessary private work to support.

3. Why we use information

We use information to create and secure accounts, confirm email addresses, manage company access, provide AI processing and authorized integrations, process purchases, account for usage, apply spending controls, answer support requests, investigate errors or abuse, and meet legal and accounting obligations.

We send messages needed for account confirmation, invitations, security, billing, and material service changes. We do not need advertising trackers to provide Fritz. The interactive example on the public website runs with fictional prepared content and browser calculations; it does not send visitor files to a live AI model.

4. AI processing and local files

Fritz stores app settings and work-related data on your computer. To run a hosted AI task, relevant prompts, context, and other requested content pass through our service to the configured model provider. Our current managed model infrastructure uses Featherless. Models, capabilities, and providers can change; ask us before submitting content subject to particular confidentiality or processing requirements.

Connecting another service can send information to and receive information from that service within the access you authorize. The service may retain information under its own policies. Do not assume that a file stays entirely on your computer because you opened it in a desktop app, or that every model provider offers the same retention or training restrictions.

Usage and billing records are separate from your local conversation history. Removing a local file, signing out, or uninstalling Fritz does not automatically remove hosted account records, provider-held information, backups, or copies you exported or shared.

5. Who receives information

Service providers receive information needed for hosting and network delivery, authentication and account email, payments, AI inference, security, and support. Our current infrastructure includes OVHcloud hosting, Cloudflare network delivery, Supabase Auth software for authentication, Resend for account-email delivery, Apple iCloud Mail for support email, Stripe payments, and Featherless model processing. Using Supabase software does not mean every account record is hosted by Supabase’s cloud service.

Account-email delivery shares the recipient address, message content, and delivery information with our email provider. This includes confirmation, invitation, and password-recovery messages. Keep sign-in and recovery links private; receiving a service email does not subscribe you to marketing.

We use Apple iCloud Mail to receive and respond to support and privacy requests at [email protected]. Apple processes the sender and recipient addresses, message content, attachments, and email service information needed to provide that mailbox. Send only information needed for your request; do not include passwords, authenticator keys, or full payment-card details.

Your workspace administrators can see membership, seat, billing, spending, and usage information available to their role. Company resources and content you share are visible according to the relevant permissions. Administrative access to billing does not by itself give an administrator access to every private file on your computer.

We may disclose information when required by law, to respond to valid legal requests, or as reasonably necessary to protect people, rights, accounts, and the service. If our business is reorganized, sold, or transferred, relevant records may be transferred with appropriate protections and notice where required. We do not sell personal information or share it for cross-context behavioral advertising.

6. Cookies and browser storage

The portal uses browser storage for sign-in sessions, appearance preferences, safe navigation back to a task, and continuity of some in-progress operations. Payment and network providers may use cookies or similar technologies to operate checkout, authenticate requests, and prevent fraud. Blocking essential storage may prevent sign-in or checkout from working.

Our website uses Cloudflare Web Analytics to count visits and measure page speed. It doesn’t use cookies or track you across other sites.

You can manage cookies and local storage in your browser. Clearing them can sign you out or remove unfinished local state; it does not close your account or cancel a subscription. See Stripe’s own privacy and cookie information for its independent practices.

7. Retention and security

Retention depends on the type of information and the purpose it serves: maintaining an active account, providing the service, resolving billing questions, keeping required financial records, detecting abuse, and meeting legal obligations. Hosted account, billing, and security records do not currently have a single automatic deletion deadline. Closing an account or making a deletion request requires a review of which records can be removed and which must be retained.

A deletion request does not imply immediate removal from backups or from an independently operated third-party service. We will explain the applicable scope and limits when handling your request. Local copies, exported files, and device or operating-system backups may need to be removed separately by you or your organization.

We use technical and organizational controls appropriate to the service, including authentication, access restrictions, and transport encryption. No system can guarantee absolute security. Keep your software updated, protect your password and authenticator, and contact us promptly about suspected unauthorized access.

8. Your choices and privacy requests

You can manage available account, security, company, billing, and integration settings through the product. To request access, correction, export, deletion, or account closure, email [email protected] from the account email when possible. Tell us what you are requesting, without including passwords or other secrets. We may need to verify your identity and your authority over company information.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict some uses; opt out of certain processing; or appeal a decision. Contact us to exercise applicable rights or appeal a response. We will respond as required by applicable law and will not retaliate for exercising those rights. Some records may be exempt from deletion or controlled by your organization.

Latter Logic is intended for adults aged 18 and over. We do not knowingly offer accounts to children. If you believe a child has provided us with personal information, contact us so we can investigate.

9. Processing locations and updates

Latter Logic is based in the United States, but service providers may process information in other countries. A US billing address is not a promise of US-only data storage or processing. Contact us before using the service if your organization requires a particular data location or processing agreement.

We may update this policy when the service or our practices change. The published policy will show its effective date. We will provide additional notice of material changes where appropriate or required, and obtain consent when the law requires it. Questions and requests can be sent to [email protected].