Privacy Statement

Last updated: 14 May 2026

This Privacy Statement explains what information we collect when you visit the licensefoundry.com website (the "Site"), how we use it, and your rights. The Site is operated by [Legal entity name + form, as in Terms of Use] ("we", "us", or "licensefoundry").

This Statement covers the marketing Site only. Privacy practices for the licensefoundry service itself (accessed via app.licensefoundry.com under a signed Master Services Agreement) are addressed in a separate Data Processing Addendum ("DPA") provided to commercial customers.

1. What we collect

The Site is intentionally minimal in data collection. We collect:

• Server access logs. IP address, browser user agent, timestamp, and URLs requested. Collected automatically when you visit any page. Used to detect abuse, diagnose technical issues, and produce aggregate traffic statistics. Retained for 30 days, then deleted.
• Email content if you contact us. If you send a message to any address at licensefoundry.com, we receive your email address and the contents of your message. Used to respond to your inquiry and to maintain our commercial conversations with you. Retained for as long as we maintain active discussions, or 36 months from last contact, whichever is shorter.

We do not collect any other personal data on the marketing Site.

2. What we don't collect

To be specific about what we are not doing:

• No analytics tracking. No Google Analytics, Mixpanel, Amplitude, Segment, Plausible, or equivalent. The Site loads no tracking pixels.
• No advertising tags. No Facebook Pixel, LinkedIn Insight Tag, Google Ads conversion tracking, or equivalent.
• No persistent fingerprinting. No device-fingerprint collection beyond standard server logs.
• No third-party cookies. See "Cookies" below.
• No session recording. No Hotjar, FullStory, LogRocket, or equivalent.

3. Cookies

The Site does not use cookies for tracking, advertising, or analytics purposes. Cookies that may be set by the underlying content delivery network (Cloudflare) for security, abuse prevention, and basic site operation are described in Cloudflare's privacy documentation: cloudflare.com/privacypolicy.

4. Service providers

We use the following third-party services to operate the Site:

• Cloudflare — DNS, content delivery, TLS, and basic security. Cloudflare may process IP addresses and request metadata for security purposes.
• GitHub — source code hosting (does not handle visitor data directly).
• Email provider — when you email us, your message is delivered through the email provider associated with the licensefoundry.com domain [provider name, e.g. "Cloudflare Email Routing forwarding to Google Workspace"].

Each of these providers operates under its own privacy policy.

5. Your rights

Depending on where you are located, applicable data protection law (including the EU General Data Protection Regulation ["GDPR"], the UK Data Protection Act 2018, and the California Consumer Privacy Act ["CCPA"] as amended) gives you rights regarding personal data we hold about you, including:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Objection — object to certain processing
• Portability — receive your data in a structured, machine-readable format
• Complaint — lodge a complaint with a supervisory authority

To exercise any of these rights, contact info@licensefoundry.com. We will respond within the timeframe required by applicable law (typically 30 days under GDPR).

6. International data transfers

We are based in [Country, e.g. "the United Kingdom"]. If you contact us from outside that jurisdiction, your message will be transferred to and processed in [Country]. Where applicable, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses, or the UK International Data Transfer Addendum) for such transfers.

7. Data retention

• Server access logs: 30 days
• Email correspondence: up to 36 months from last contact, or as required by applicable law
• We do not maintain marketing databases of Site visitors who have not contacted us

8. Children

The Site is intended for business audiences. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently received such data, please contact us and we will delete it.

9. Changes to this Statement

We may update this Privacy Statement from time to time. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of the Site after changes constitutes acceptance of the updated Statement.

10. Contact

Privacy questions can be sent to info@licensefoundry.com.

For commercial customers, the Data Processing Addendum forms part of your Master Services Agreement. Contact your account manager (or info@licensefoundry.com) for the current DPA.