Lattice

Privacy Policy

Last updated: October 30, 2026

The short version

This summary is for convenience. The full policy below is what applies.

  • We never see your code, prompts, conversations, files or Rhino and Grasshopper models. Lattice runs on your computer, and AI requests go directly from your computer to the AI provider you choose, using your own key.
  • We collect only what we need to run Lattice: your account details, your subscription status, and basic information about the computers where Lattice is activated.
  • Payments are handled by Stripe and Link. We never see your full card details.
  • We don't sell your personal information and we don't use advertising trackers.
  • You can ask us to see, correct, export or delete your data by emailing hello@latticecode.dev.

1. Who we are

Lattice is made by FREEFORGE LLC, a Wyoming limited liability company (30 N Gould St Ste R, Sheridan, WY 82801, USA). Our team operates from Mexico City, Mexico. We are responsible for (the "controller" of) the personal information described in this policy.

Contact: hello@latticecode.dev

This policy covers the website at latticecode.dev, the Lattice editor, the Lattice Bridge plugin for Rhino and the Lattice tools for third-party coding agents (together, "Lattice").

2. What we don't collect

Lattice is designed so that your work stays with you. We do not collect, receive or store:

  • your code, scripts or files;
  • your prompts or conversations with the AI agent;
  • your Rhino or Grasshopper models or their contents;
  • your AI provider API keys. Your key is stored encrypted on your own computer and is sent only to the provider it belongs to.

When the agent works, your requests go directly from your computer to the AI provider you've connected (for example, through OpenRouter) and, for web searches, to the search provider (for example, Exa). Those providers process that data under their own privacy policies, not ours.

3. What we collect

Information you give us

  • Account details: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google.
  • Feedback and support: what you write to us, and any screenshots or files you choose to attach (for example, through our feedback form or by email).

Information about your subscription

  • Your plan, subscription status, renewal and cancellation dates, and your Stripe customer reference.
  • Payments are processed by Stripe, and for many purchases Link (a Stripe service) is the reseller or merchant of record. They collect your payment details, billing address and tax information directly. We never see your full card number.

Information collected automatically

  • Website and sign-in: your IP address and browser information when you sign in, stored with your login session, plus standard server logs kept by our hosting provider.
  • Licensing: when you activate Lattice on a computer, we store the computer's name, operating system, processor type, Lattice version, and the dates it was activated and last checked in. We also keep a history of licence activity (such as activations, refreshes and device removals) to run the licence system and prevent abuse.
  • Update checks: your Lattice version and platform, to offer the right update.

Product analytics and crash reports

We don't currently collect product analytics or crash reports. If we add them to improve Lattice, they will follow these rules, and we'll update this policy before they're turned on:

  • they may include basic usage events (for example, that the app started or a feature was used), the Lattice version, your operating system, and crash reports or error messages;
  • they will never include your code, prompts, conversations, files, models or API keys;
  • they will be linked to a random identifier, not your name or email;
  • you'll be able to turn them off in the editor's settings.

4. How we use your information, and why

What we do Legal basis (EU/UK)
Create and run your account, and let you sign in Performing our contract with you
Check your licence, manage your devices and prevent misuse Performing our contract; our legitimate interest in preventing abuse
Process subscriptions, invoices and taxes (with Stripe and Link) Performing our contract; legal obligations
Send account emails (verification, password resets, welcome and service notices) Performing our contract
Respond to support requests and feedback Our legitimate interest in helping you and improving Lattice
Keep the Service secure and working (logs, rate limiting) Our legitimate interest in security
Comply with the law and enforce our Terms Legal obligations; legitimate interests

We don't send marketing emails without your permission, and every marketing email will include a way to unsubscribe.

We don't use your information for advertising, and we don't make automated decisions about you that have legal or similarly significant effects.

5. Cookies

We use only essential cookies that keep you signed in and keep the website secure. We don't use advertising or cross-site tracking cookies.

Our feedback form is provided by Tally, which may set its own cookies when you use it, under Tally's privacy policy.

6. Who we share information with

We don't sell or rent your personal information, and we don't "share" it for cross-context behavioral advertising.

We use trusted service providers to run Lattice. They process data only on our instructions or as independent providers for the services they offer:

Provider What for Where
Vercel Website and API hosting, server logs United States and global edge network
Neon (on Amazon Web Services) Database United States (US East)
Cloudflare Storing and delivering installers and updates Global
Stripe and Link Payments, subscriptions, invoices and taxes United States and global
Resend Sending account emails United States
Google "Continue with Google" sign-in Global
Tally Feedback form European Union

We may also share information:

  • if required by law, or to protect the rights, safety and property of our users, FreeForge or others;
  • with a buyer or successor if FreeForge is involved in a merger, acquisition or sale of assets, in which case this policy continues to protect your information.

7. International transfers

We're based in the United States and Mexico, and our providers process data in the United States and other countries. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses included in our providers' data processing terms.

8. How long we keep information

Information How long
Account, devices and licence history While your account exists. Deleted within 30 days after you ask us to delete your account
Sign-in sessions Until they expire or you sign out
Payment, invoice and tax records Kept by Stripe and Link for as long as tax and accounting laws require
Feedback and support messages As long as useful to help you and improve Lattice, or until you ask us to delete them
Server logs A short period, according to our hosting provider's retention
Backups Deleted data is removed from our database backups within about 35 days

9. Security

We protect your information with encryption in transit (HTTPS), hashed passwords and licence tokens, restricted access to our systems, and regular backups. Access to personal information is limited to the people who need it to run Lattice.

No system is completely secure. If a data breach affects your personal information, we'll notify you and the authorities where the law requires.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and get a copy of it;
  • correct inaccurate information;
  • delete your information;
  • object to or restrict certain processing;
  • withdraw consent where we rely on it;
  • not be discriminated against for exercising your rights.

In Mexico, these include your ARCO rights (access, rectification, cancellation and opposition). In the EU and UK, you can also complain to your local data protection authority. In California and other US states, you have the rights described above; we don't sell or share personal information as those laws define it.

To use any of these rights, email hello@latticecode.dev from the email address on your account. We may need to confirm your identity, and we'll respond within 30 days.

11. Deleting your account

To delete your account, email hello@latticecode.dev from your account's email address. We'll cancel any active subscription, remove your devices and delete your account and related data within 30 days. Records that Stripe and Link must keep for tax and accounting purposes are kept by them as the law requires.

12. Children

Lattice is not intended for children. You must be at least 16 to use it, and under 18 only with permission from a parent, guardian or school. If you believe a child under 16 has given us personal information, contact us and we'll delete it.

13. Changes to this policy

We may update this policy. If we make significant changes, we'll notify you (for example, by email or in the app) before they take effect. The "Last updated" date at the top shows when it last changed.

14. Contact

FREEFORGE LLC 30 N Gould St Ste R, Sheridan, WY 82801, USA hello@latticecode.dev

Lattice
TermsPrivacyCancellation
© 2026 FreeForge LLC · Private beta