Privacy Policy
Effective date: June 9, 2026
Last updated: June 9, 2026
Phoundry Lab ("Phoundry," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you use our websites (including phoundry.app, phials.phoundry.app, and account.phoundry.app), create an account, purchase Phials, or use licensing and download services connected to those sites.
Draft notice: This policy is written to match our current product behavior. Have qualified counsel review it before taking live payments.
Who we are
Phoundry Lab
2041 S Plaza St NW
Albuquerque, NM 87104
United States
Contact: [email protected]
Information we collect
Account and identity
When you create an account or sign in (for example via email link or OAuth), we collect:
- Email address and authentication identifiers managed by our auth provider (Supabase Auth)
- Account profile fields you provide
- Session cookies required to keep you signed in across our subdomains
Purchases and licensing
When you buy Phials or manage a license, we collect and store:
- Order and license records (license type, status, activation limits, subscription expiry where applicable)
- Email address associated with your purchase (from Stripe and/or your account)
- Machine activation data: a one-way hashed machine fingerprint (SHA-256 digest derived from a platform identifier plus an app-specific salt—not your raw hardware serial stored in plain text), optional computer name, operating system name, and activation timestamps
- License validation and update-check requests that include your license key (sent over HTTPS)
We use this data to issue licenses, enforce activation limits, deliver updates you are entitled to, and support billing/refunds.
Waitlist and marketing
If you join a waitlist before launch, we collect your email address to notify you about availability. You can ask us to remove it at any time.
Payment information
Payments are processed through Stripe Managed Payments, under which Link (a Stripe company) acts as merchant of record and handles tax calculation, collection, and remittance. We do not store full payment card numbers on our servers. Stripe provides us with transaction metadata needed to fulfill your purchase (such as customer email, amount, and payment status).
Website and app telemetry
We do not use third-party analytics or advertising trackers on our websites at launch, and Phials does not include crash reporting or usage telemetry in the desktop app. Standard server and hosting logs (IP address, user agent, request timestamps) may be generated by our hosting providers for security and reliability.
Files on your computer
Phials runs locally on your device. We do not upload the contents of your files, folders, or vials to Phoundry servers as part of normal app use. Metadata extraction and previews happen on your machine unless you explicitly use a feature that contacts an external service you configure.
How we use information
We use the information above to:
- Provide, secure, and maintain our websites and account portal
- Process purchases, refunds, and license fulfillment
- Activate and validate licenses, including offline-capable signed license files cached on your device
- Send transactional messages (receipts, license delivery, account notices)
- Respond to support requests
- Comply with law, prevent fraud, and enforce our Terms of Service and Phials EULA
We do not sell or share your personal information.
Legal bases (EEA/UK visitors)
Where applicable, we process personal data based on: contract (to provide purchases and accounts), legitimate interests (security, fraud prevention, product operation), and consent where required (for example optional marketing if we add it later).
Cookies and similar technologies
We use cookies primarily for authentication (keeping you signed in on *.phoundry.app). We do not use advertising cookies. You can control cookies through your browser; disabling auth cookies may prevent account login.
Service providers (subprocessors)
We use trusted providers to operate the service, including:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing and tax (Managed Payments) |
| Supabase | Authentication, database, file storage for release artifacts, edge functions for licensing |
| Sevalla (or successor host) | Website and application hosting |
These providers process data under their own terms and privacy policies, limited to what we need them to perform their services.
Data retention
We retain account and license records for as long as your account or license remains active and as needed for legal, tax, and accounting obligations. You may request deletion of personal data subject to exceptions (for example, we may retain transaction records required for tax law).
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. To exercise these rights, email [email protected] with enough information for us to verify your account.
California residents may have additional rights under the CCPA/CPRA. We do not sell personal information or share it for cross-context behavioral advertising, as those terms are defined by those laws.
If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office).
International transfers
We are based in the United States. If you access our services from other countries, your information may be processed in the U.S. and where our subprocessors operate. Where required for transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or UK and Swiss equivalents) entered into by us or our subprocessors, or our subprocessors' certification under the EU–U.S. Data Privacy Framework.
Children
Our services are not directed to children. You must be at least 18 (or the age of majority where you live, if higher) to create an account or make a purchase; minors may use our services only with the involvement and consent of a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
Changes
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. Material changes may also be communicated by email or in-app notice where appropriate.
Contact
Questions about this Privacy Policy: [email protected]
Phoundry Lab
2041 S Plaza St NW, Albuquerque, NM 87104