Privacy Policy

Obsidian Research Group (“we”, “us”) built Obsidian Lattice to be local-first. Your files, their contents, and the search index never leave your Mac. This policy explains the limited account and billing data we do process.

What stays on your device

• Your files and folders, and any content read from them.
• The search index, embeddings, OCR/caption data, and AI prep results.
• Encryption keys for any vaults you create.

We have no access to the above. There is no file telemetry and no content uploading.

What we store on our servers

To run your account and subscription, our backend (Supabase and Stripe) stores only:

• Account: your first and last name, email address, and a hashed password (managed by Supabase Auth).
• Subscription: your plan, status (trialing/active/cancelled), renewal date, and a Stripe customer/subscription identifier.
• Devices: a per-Mac hardware identifier and device name used to enforce the device limit and activation, plus the last-seen time.
• Billing: handled by Stripe; we never receive or store your full card number.
• Download lead (optional): if you request the download link by email, we store that email so we can send it.

How we use it

We use this data only to authenticate you, provide and bill your subscription, enforce device limits, and send essential service emails (confirmation, receipts, important notices) via our email provider (Resend). We do not sell your data or use it for advertising.

Sub-processors

• Supabase — authentication and account/subscription database.
• Stripe — payment processing and billing.
• Resend — transactional email delivery.
• Vercel — website and API hosting.

Retention & deletion

We keep account data while your account exists. You can delete your account from within the App; this cancels billing and removes your account, profile, subscription, and device records. Some records may be retained as required for legal, tax, or fraud-prevention purposes.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us at support@obsidianlattice.app and we will respond as required by applicable law (including the Australian Privacy Act and, where relevant, the GDPR).

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We will post any updates here and, for material changes, notify you in the App or by email.