Privacy Policy

1. Who this policy covers

This policy applies to LM, LayneMcDonald.com, LMOS, LM creator applications, related native/mobile builds, and services operated by Layne McDonald under the LM brand. “LM,” “we,” “us,” and “our” refer to that service operator. It does not replace the privacy policies of third-party websites or services you independently choose to use.

2. Information LMOS may access or collect

The exact information depends on which features you use. LMOS may process the following categories:

• Account and identity information: name, email address, password-derived authentication information, profile image, role, account status, and sign-in/session information.
• Profile and discoverability information: creator roles, skills, bio, public profile fields, or other information you intentionally make discoverable to other LMOS users.
• User-created content: projects, documents, scripts, books, audio, video, images, designs, websites, notes, tasks, comments, reviews, messages, calendar entries, and files you create, upload, import, or share.
• Communications: support requests, privacy requests, feedback, messages to LM, collaboration messages, and records needed to respond to you.
• Connected-service data: files, calendar information, email-related data, or other content you authorize LMOS to access through an outside service. Access is limited to the connection and permissions you choose.
• Optional AI inputs: prompts, selected project context, and outputs when you deliberately use an AI feature or connect your own supported AI provider/API credentials.
• Device, usage, and diagnostic information: browser/app type, device type, operating system, basic request/security logs, feature usage, app activity, crash/error information, and similar technical data used to operate and secure the service.
• Permission-based device data: microphone/audio, speech recognition, notifications, local files/media, camera or location only if a feature requests that capability and you grant permission.
• Billing and commerce information: plan, subscription status, transaction references, and purchase history. Full payment-card numbers are handled by payment providers or app stores rather than stored directly by LMOS.

3. How we use information

LM uses personal information to provide the feature you requested; authenticate accounts; save and sync projects; support collaboration; process subscriptions and purchases; respond to support or privacy requests; deliver notifications you enable; secure LMOS; prevent abuse or fraud; diagnose errors; maintain service reliability; improve product usability; comply with law; and communicate important service or account information.

Private creator content is not used for unrelated advertising. If LM uses aggregated or de-identified information for product improvement, we use reasonable measures to prevent it from being used to identify an individual.

4. When information is shared

LM shares information only when reasonably necessary to provide a service you requested, operate the platform, comply with law, protect users or LM, or complete a transaction. Categories of recipients may include:

• Infrastructure and hosting providers, including Floot and its underlying service providers, for application hosting, databases, storage, authentication, email delivery, and related infrastructure.
• Payment providers, such as Stripe, Apple, or Google, when you purchase a subscription, app, or service through them.
• Connected services, such as Google or Microsoft services, only when you authorize a connection and the requested feature requires it.
• AI providers you choose to use, such as OpenAI when you voluntarily connect your own supported API credentials or explicitly use a feature that identifies that provider.
• Collaborators and the public, only for content or profile information you intentionally share, publish, submit for distribution, or make discoverable.
• Legal or safety recipients when disclosure is reasonably necessary to comply with legal process, enforce agreements, investigate abuse, or protect rights and safety.

Where LM selects a service provider to process personal information on LM’s behalf, LM expects that provider to protect the information consistently with its contractual duties, this policy, and applicable law. A third-party service that you independently connect may also be governed by that provider’s own terms and privacy policy.

5. Device permissions and consent

LMOS asks for sensitive device permissions only when needed for a feature you choose to use. For example, recording or dictation can require microphone or speech-recognition permission; alerts can require notification permission; file workflows require the files you select; and location-aware features require location permission if offered. You may deny or later revoke these permissions in your device or browser settings. Some features will not work without the permission they require, but unrelated features should remain available where practical.

6. AI features and connected accounts

AI in LMOS is optional. LM does not require a public OpenAI API connection simply to use the website. When an AI feature is enabled, the interface should identify what service is being used and the user chooses whether to submit content. If you connect your own API key, the key is treated as account-private configuration and is not intentionally exposed to other LMOS users. Content sent to an outside AI or connected service is also subject to that provider’s privacy terms.

You should avoid submitting highly sensitive information to an AI or connected service unless you understand and accept that provider’s practices.

7. Security

LM uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include HTTPS encryption in transit, authenticated account access, permission controls, server-side access checks, and separation between public and private project surfaces. No online service can guarantee absolute security, so users should also protect their credentials and report suspected unauthorized access promptly.

8. Data retention and deletion

We retain information only for as long as reasonably necessary for the purpose for which it was collected, to provide the service, maintain security and transaction records, resolve disputes, or satisfy legal obligations. Account and project information is generally retained while an account or project remains active. Some security, billing, backup, audit, or legal records may remain for a limited period after deletion when reasonably necessary or legally required.

You may request deletion of your LMOS account and associated personal data at any time. Verified deletion requests are normally processed within 30 days. Deletion removes the account and associated data from active systems except information LM is legally required or legitimately permitted to retain, such as limited transaction, fraud-prevention, security, or legal records. Residual backup copies may remain until the applicable backup cycle expires.

Open the Account & Data Deletion page to initiate a request. Signed-in users can submit the request directly from LMOS. Users who cannot sign in can use the public contact method shown on that page.

9. Your privacy choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict certain processing of personal information; object to certain uses; or withdraw consent. LMOS also provides practical controls such as account/profile settings, project sharing controls, device-permission controls, connected-service controls, data export, communication preferences, and account deletion.

Withdrawing consent does not make prior lawful processing unlawful, and some information may need to be retained when required by law.

10. Children

LM creates family-friendly content, but the general LMOS account and professional creator tools are not directed to children under 13 for independent account creation. If LM learns that personal information was collected from a child in a way that required parental consent and that consent was not obtained, LM will take reasonable steps to delete the information. Parents or guardians may contact LM using the privacy contact below.

11. International users

LM is operated from the United States. If you use LMOS from another country, information may be processed in the United States or other locations where service providers operate. LM handles privacy requests in accordance with applicable law and uses service providers subject to appropriate privacy and security obligations.

12. Changes to this Privacy Policy

LM may update this policy as products, integrations, legal requirements, or data practices change. Material changes will be reflected by a new “Last updated” date and, when appropriate, an additional in-app or account notice. The current version will remain available at this permanent URL.