Privacy Policy

Effective October 27, 2026

This policy explains what personal information Substratal Apps ("we", "us") collects when you use substratalapps.com, the Substratal Hub (hub.substratalapps.com), the Platform API (api.substratalapps.com), and the apps built on them (together, the "Services"), and what we do with it.

Who we are

Substratal Apps is based in Bellevue, Washington, USA. Questions about this policy or your information go to admin@interlinedlist.com.

Information we collect

Information you give us

• Account details: your name, email address, and a password (stored only as a one-way hash), plus multi-factor sign-in settings if you turn them on.
• Profile and settings: your display name, avatar, time zone, language, theme and notification preferences.
• Organizations: organizations you create or join, your role in them, and invitations you send or receive.
• Builder information: applications you register, API keys, webhook endpoints and related configuration.
• Support messages: what you send us when you ask for help.

Information collected as you use the Services

• Sign-in and security records: sessions, the devices and browsers you sign in from, IP addresses, and security events such as password changes.
• Audit records: actions taken in an account or organization, with when and by whom.
• Usage records: API requests per application, key and operation, used for limits, usage reports and troubleshooting.
• Notification details: device push tokens if you allow notifications, and the notifications in your inbox.

Billing

Payments are handled by Stripe. You enter card details on Stripe's pages; we never see or store your full card number. We keep the subscription status, plan and billing history Stripe tells us about.

How we use it

• To provide the Services: create and secure your account, sign you in, apply roles and access, and deliver notifications and webhooks.
• To bill for subscriptions.
• To keep the Services secure and reliable: detect abuse, investigate problems, and enforce limits and our Terms of Service.
• To send account and service email, such as verification, security alerts and invitations.
• To answer support requests.
• To meet legal obligations.

We do not sell your personal information, share it for targeted advertising, or use it to build advertising profiles.

Apps built on Substratal Apps

When you use an app another developer built on the Services, we process your information on that developer's behalf to provide the app's accounts, access, billing and notifications. That developer decides how their app uses your information, and their own privacy policy applies to it.

Cookies and similar technology

• Sign-in cookie (hub.substratalapps.com): keeps you signed in to the Hub. It can't be read by page scripts.
• sub_theme cookie (substratalapps.com and its subdomains): while you're signed in to the Hub, it holds your light, dark or system choice and your chosen themes, so this site and the blog look the same as the Hub. It holds nothing that identifies you and is removed when you sign out.
• Local storage in the Hub: a copy of your theme and similar preferences on your device.

This website has no analytics, advertising or tracking scripts. Our hosting provider processes standard request information, such as IP addresses, to deliver pages.

Who we share it with

We share personal information only with:

• Service providers that run the Services for us under contract: Amazon Web Services (hosting, storage, email delivery) and Stripe (payments), plus Apple, Google and web push services to deliver notifications you've allowed.
• Your organization: its owners and admins can see members, roles and audit records for the organization.
• App developers, for apps you use that are built on the Services, as described above.
• Authorities, when the law requires it, or to protect the rights, safety and security of our users and the Services.
• A successor, if Substratal Apps is merged or sold, under the same protections as this policy.

Where it's stored and how long we keep it

Information is stored in the United States on Amazon Web Services. We keep account information while your account is open. When you delete your account, we delete or anonymize your personal information within 30 days, except what we must keep for legal, tax, billing or security reasons, and copies in backups, which expire on their normal schedule.

Security

We encrypt information in transit and at rest, hash passwords, offer multi-factor sign-in, and limit access to people and systems that need it. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.

Your choices and rights

• See and change your account, profile and settings in the Hub.
• Export a copy of your information from the Hub, or ask us for one.
• Delete your account, or ask us to.
• Turn notifications off at any time, in the Hub or on your device.

Depending on where you live, you may have more rights, such as to access, correct, delete or move your information, or to object to some uses. To make a request, email admin@interlinedlist.com. We'll verify the request and respond within the time the law requires, and we won't treat you differently for exercising your rights.

We do not collect consumer health data as defined by Washington's My Health My Data Act.

Children

The Services are not directed to children under 13, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We'll post changes here and update the date above. If a change is significant, we'll also tell you by email or in the Hub before it takes effect.

Contact

Substratal Apps, Bellevue, Washington, USA — admin@interlinedlist.com