Privacy policy

BMD Pat LLC ("we", "us") operates bmdpat.com and the related software products and acts as the data controller for personal information collected through the site and service.

Information we collect

• Email address and consent source/version you submit to subscribe to the Local AI Lab Notes or create a product account
• Account identifiers and billing metadata from Stripe when you start a paid subscription (we do not store card numbers)
• Usage data via optional privacy-friendly analytics (page views, referrers). IPs are anonymized
• Support correspondence you send us by email

How we use information

• To deliver the software product you paid for
• To send transactional emails about your account and billing
• To send the requested artifact and, if you explicitly opted in, at most one evidence-backed Local AI Lab Note on Friday when there is something worth sharing
• To respond to support requests
• To improve the site and products using aggregate analytics, only with your consent

Legal bases

• Contract (delivering the paid service)
• Consent (newsletter, analytics cookies); we retain an opt-out/suppression record so an unsubscribed address is not mailed again
• Legitimate interests (responding to support, site security)

Sharing

We do not sell personal data. We use a small number of processors to provide the service (Stripe for billing, Supabase for data storage, Resend for transactional and opted-in newsletter delivery, Clerk for authentication, Vercel for hosting and analytics). These processors are bound by their own agreements with us and only process data on our instructions.

Retention

Account and billing records are retained for the life of the account plus any period required by tax and accounting law. Newsletter consent and delivery records are retained while needed to honor the subscription and suppression request. After unsubscribe we retain the minimum opt-out record needed to prevent future mail. You may request deletion of other personal data. Support correspondence is retained for routine business records and then deleted.

Your rights

You may request access, correction, deletion, or portability of your data, and you may object to or restrict certain processing. You can withdraw newsletter consent at any time by clicking unsubscribe in any email, and analytics consent in the Cookie policy.

International transfers

Data is processed in the United States. Where applicable we rely on appropriate safeguards for cross-border transfers.

Children

This site is not directed to children under 16 and we do not knowingly collect information from them.

Contact

For privacy requests email pat@bmdpat.com.