Privacy

Effective September 27, 2026 · MaterialLogix Studio™ is a product of LibraSide Technologies, LLC

Creative work we do not collect in local workflows

• Your locally processed images, video, audio, voice packs, scripts, prompts, filenames, or project names.
• Your recordings or biometric voice data. Local voice packs remain on your device. Personal Geometry, meaning a face map or reference Pack built from a photograph or video of you, is created and stored only on your device and is never sent to us.
• Exact hardware identifiers, precise location, contact lists, or unrelated files on your computer.

If you deliberately submit a packaged cloud job, that job and its media are uploaded for the processing you requested. The app shows the execution location before submission. Cloud media is not used for advertising or model training.

Required service information

• Account and license. Authentication identity, a hashed email reference, license status, activated-device status, and verification timestamps. On the website, sign-in is handled entirely by Cloudflare Access, which emails you a one-time sign-in code; MaterialLogix™ never receives or stores a password. The phone companion app signs in with its own emailed one-time code sent through Resend; MaterialLogix™ stores only the resulting session and a hashed email reference, never the code itself once it is used or expired.
• Phone companion pairing and relay. If you pair the phone companion app with a MaterialLogix Studio installation on your computer, we store a device name, a certificate fingerprint, and hashed device identifiers needed to route your session. Photos, video, and voice takes you capture on the phone, and job results sent back, are encrypted on your device before they leave it and can only be decrypted by your paired computer; our relay infrastructure temporarily stores and forwards that encrypted data (never the encryption key) and deletes it within about an hour, sooner once delivered. We do not receive scripts, prompts, or job settings in readable form. A separate cloud-rendering job you deliberately submit, for Photo, Video, Voice, or Music, is handled under the cloud-job notice above and the retention schedule below, not by the relay.
• Purchases and wallet. Stripe processes payment information. We receive the customer, plan, amount, payment state, Stripe transaction references, wallet entries, and information needed to issue access and receipts; we do not receive full card numbers.
• Optional automatic top-up. If you opt in, we store your low-balance trigger, refill amount, monthly cap, status, attempts, failure count, and notification history. Stripe stores the saved payment method; MaterialLogix™ stores only Stripe references and limited display details needed to manage the feature.
• Cloud jobs. Job type, processing state, packaged-object location, measured source duration, billable duration, quoted units, and settled units. These records operate the queue, usage meter, and billing.
• Security. Limited authentication, abuse-prevention, and security events needed to protect accounts and the service.
• Email you send us. If you write to admin@materiallogix.com, we have that email.

Optional diagnostics

If you actively opt in, MaterialLogix™ may receive the product area, app version, broad operating-system family, CPU/GPU/cloud lane, broad duration and input-size buckets, result status, and a controlled error code. Optional diagnostics never include media, prompts, scripts, filenames, project names, voice recordings, exact hardware identifiers, free-form error text, or stack traces. Raw diagnostic events are deleted after 90 days, and turning this choice off deletes the account-linked raw diagnostic history we can locate.

Limited attribution events, when enabled, are deleted after 397 days. Successfully processed Stripe event locks are deleted after 90 days; failed or unresolved events may be kept longer for payment and entitlement reconciliation.

Optional product research

If you actively opt in, you may provide broad region, professional role, industry, organization size, primary use, and experience level. We do not request exact age, address, precise location, race, ethnicity, religion, health, disability, sexual orientation, financial details, or biometric information for this research. Research and commercial-insights choices are for adult account holders; do not submit a child's information.

Grouped commercial insights

A separate opt-in allows information you chose to share above to be included in grouped, de-identified market trends that MaterialLogix™ may sell or license. We do not sell personal information, account-level records, raw diagnostic events, or creative content. Buyers do not receive a way to identify or contact individual participants. If this business model ever changes to involve personal information, we will ask for a new choice before doing it.

Where data lives

Your local projects auto-save on your device. Use the Studio's recovery-file feature to save a separate ZIP containing project data and original media. Account, consent, license, security, billing, cloud-job, and optional diagnostic records live in access-controlled service databases. Cloud job files live in access-controlled object storage only for the processing and retention period disclosed with that workflow.

Third parties

Stripe processes payments; we do not receive full card numbers. Cloudflare provides hosting, website and account infrastructure, our databases, security, and, for the website, the one-time-code sign-in itself (Cloudflare Access); Cloudflare also operates the short-lived, encrypted relay used by the phone companion app, described above. Resend delivers the one-time sign-in code email for the phone companion app on our behalf; it receives the destination email address and message content needed to send that one email and nothing else we collect. Google Fonts provides website typefaces. Premium stock-voice narration sends the script text you submit to Inworld; your voice recordings stay on your device for that feature. When cloud rendering is offered for a Studio, including Photo, Video, Voice, or Music, RunPod may process the specific job's files only if you deliberately opt in and approve that job; local and paired-desktop rendering are always available and keep your files off our cloud infrastructure. Optional local features may fetch disclosed open models from their public distribution locations. Service providers may process only the information needed to perform contracted services.

Cookies and local storage

Authentication and security technologies may be required for accounts. Non-essential analytics or advertising storage is not enabled before the applicable choice. The applications store projects, settings, and license information locally on your device; clearing local data may remove them.

Voice data, specifically

The written retention schedule, destruction guideline, and consent terms for voice profiles are in Voice and biometric data. Voice packs and Personal Geometry can be sensitive biometric data. Local voice packs stay on your device and are excluded from diagnostics and research. Premium stock-voice narration sends script text only to the disclosed narration provider; it does not upload your voice recordings. A separate cloud media job, when offered, uploads only the packaged job you deliberately submit and is governed by the cloud-job notice and the Acceptable Use policy.

Why we are allowed to use this information

Where the law requires us to identify a legal basis for processing, including for people in the European Economic Area and the United Kingdom, we rely on the following:

• To perform our contract with you: account, license, purchase, wallet, and cloud-job records. Without these we cannot provide the Service.
• Our legitimate interests: securing accounts, preventing abuse and fraud, and keeping the Service working, balanced against your rights.
• Your consent: optional diagnostics, product research, commercial insights, and any personal voice profile. You can withdraw consent at any time in Privacy settings, which stops that use going forward.
• Legal obligation: tax, accounting, and records we are required to keep.

Where a voice profile or Personal Geometry constitutes biometric information under laws such as the Illinois Biometric Information Privacy Act, we rely on your separate written consent, keep it only for the purpose you gave it for, and delete it when you withdraw consent, close the profile, or let the retention period lapse. The Biometric data policy sets out the full retention schedule and destruction guideline for both.

How long we keep things

• Raw optional diagnostic events: deleted after 90 days.
• Limited attribution events: deleted after 397 days.
• Cloud job media: deleted on the retention schedule disclosed with that workflow.
• Phone companion relay media (encrypted captures and job results in transit): deleted within about an hour, sooner once your paired computer or phone retrieves it.
• Account, license, consent, and security records: kept while your account is open, then for the period needed to resolve disputes and meet legal obligations.
• Purchase and tax records: kept as long as tax and accounting law requires.

Where information is processed

We operate from the United States. Processing locations depend on the workflow and the providers used for it. Information sent to a cloud service may be processed outside your country and may be subject to different data-protection laws. Where required for transfers out of the European Economic Area or the United Kingdom, we use appropriate transfer safeguards with the providers concerned, such as Standard Contractual Clauses, the UK Addendum, or another lawful transfer mechanism. Contact admin@materiallogix.com for information about the processing locations and safeguards applicable to your workflow.

Your privacy rights

Use the on-computer free tier without an account. In an account, open Privacy at any time to change optional choices. Global Privacy Control is honored for commercial-insights use. MaterialLogix™ does not discriminate against people who exercise privacy choices.

Depending on where you live, you may have the right to: know what we hold and why; get a copy in a portable form; correct it; delete it; withdraw consent; object to or restrict certain processing; opt out of sale, sharing, or targeted advertising; and limit the use of sensitive personal information.

To exercise a right, email admin@materiallogix.com or use Privacy in your account. We answer within the time the applicable law allows, being 45 days under most US state laws and one month under European and UK law, and will tell you if we need longer. We may need to verify your identity before acting, and an authorized agent may act for you with proof of authority.

If we say no. We will explain why. You may appeal that decision by replying to the same address with the word "appeal"; a different person reviews it and responds within the period the applicable law allows.

Complaints. You can complain to your data protection authority or attorney general. In the United Kingdom that is the Information Commissioner's Office; in the European Economic Area it is your national supervisory authority. We would rather hear from you first so we can fix it.

California

In the last twelve months we have collected the categories of information described above: identifiers, commercial information about purchases, limited internet activity where you opted into diagnostics or attribution, professional information where you opted into research, and, where you create a personal voice profile, biometric information. We collect it for the purposes described above and keep it for the periods listed under "How long we keep things".

We do not sell personal information and we do not share it for cross-context behavioral advertising. The grouped commercial insights described above are de-identified and are not sold as personal information. We do not use or disclose sensitive personal information beyond the purposes permitted without a right to limit; you may still withdraw consent to any optional use at any time.

Children

The Service is not directed to children, and account holders must meet the age requirement in the Terms of Service. We do not knowingly collect personal information from a child. If you believe a child has provided information, write to admin@materiallogix.com and we will delete it.

How we protect information

We use access-controlled databases and object storage, encryption in transit, hashed identifiers where a raw value is not needed, scoped credentials, and rate limiting. Security measures reduce risk; no service can promise that no incident will ever occur. Our current practices are described in the Security page.

If a breach affects your personal information and the law requires notice, we will notify affected account holders and the relevant regulators within the time the applicable law sets.

Automated decisions

We do not make decisions producing legal or similarly significant effects about you by automated means alone. Automated abuse and rate controls may temporarily block a request; you can reach a person at admin@materiallogix.com.

Who is responsible

The controller of this information is LibraSide Technologies, LLC, a District of Columbia limited liability company. Privacy contact: admin@materiallogix.com.

Changes

If this policy or an optional purpose changes materially, the effective date changes and affected account holders are notified. A new purpose requiring consent receives a new, separate choice.