LATTIFORM
Updated 23 October 2026. This page covers the Lattiform website, the main Lattiform Mac app and the former free FEA Preview, including enquiries, beta requests, professional evaluation invitations, support communications, update checks, optional app analytics, licence purchases, your Lattiform account and optional licence activation.
On this page
Contact data
When someone contacts Lattiform or requests beta access, we use their email address and submitted answers to reply and coordinate access. For relevant professional evaluation invitations, we also research public professional names, roles, organisations, work email addresses and published engineering or design activity from company websites, portfolios, staff pages and public technical discussions. The first invitation identifies its specific sources. A published team inbox does not establish that a named person owns or reads it; invitations identify the intended professional recipient and allow the team to decline without forwarding. We also record sent messages, replies and objections.
Files and links
Project documents, geometry, filenames, study names, loads and results stay on your Mac unless you deliberately share them. Optional app analytics excludes these items, screenshots and free-text errors. Files shared with Lattiform are used as context for that support conversation. Some data does leave your Mac: update checks and, if you choose them, app usage sharing and optional licence checks and activation. These are described below.
AI agents and the MCP server
Lattiform includes an MCP server, lattiform-mcp, that an AI app you choose can use to work with your documents and studies. It runs on your Mac and makes no network connections of its own, and Lattiform receives nothing from it. Your AI app sends its conversation, which can include results the server returns, such as part and feature names, dimensions, study settings, result values, file paths and pictures of designs, to the AI provider you use. That provider’s own terms and privacy policy govern that data. Nothing is shared this way unless you connect an AI app to the server.
Updates
The Mac App Store distribution receives updates through Apple. The following update-check settings and requests apply to the website distribution, which checks downloads.lattiform.com for new versions when you choose Check for Updates or Check Now, and automatically if you allow automatic checks. You can turn automatic checks on or off in Settings. Each check, and each download of an update, sends your IP address and the app name and version to that server, which Cloudflare hosts. When you download the app from our website, your browser sends your IP address and browser details to the same server. We use these details to provide updates and keep the download service working and secure. If you turn on “Share anonymous system profile” in Settings, update checks also include your Mac model, processor type, speed and count, memory, macOS version and preferred language. That setting is off by default. Update checks never include your project files, geometry, study names or results. The former FEA Preview does not ask for, check or send licence keys. Versions with optional Settings → Licence are described separately below.
Operational use and optional analytics
Contact information helps us reply, coordinate beta access and improve the product. App usage sharing is off by default. If you enable it, selected workflow events, a random installation identifier, broad workload and duration bands, app version and build number, macOS version, processor architecture and timestamps are sent to PostHog Cloud EU. Automatic click capture, screen recording, session replay, person profiles, location enrichment and automatic crash upload are disabled. The service receives your IP address when connecting; the project is configured to discard it from stored analytics events.
Website licence purchases
Paddle sells new Lattiform licences as our reseller and merchant of record. It collects the email address, billing details and payment details needed to process your order, handle applicable taxes, send purchase confirmation and receipts, and run subscription billing. It handles this under its own privacy policy at paddle.com/legal/privacy. We do not receive your full card details. Our homepage and pricing page load Paddle.js and request localized prices from Paddle. Paddle receives your IP address and browser details when those requests are made, even if you do not buy. Our earlier reseller keeps its own records of purchases made through our earlier reseller, before we moved to Paddle, under its own privacy policy.
You need to provide the email address, billing information and payment details requested in checkout to start a trial or buy a licence. Without the required information, Paddle cannot process your order. Paddle handles payment and receipts; Lattiform provides your licence key through your Lattiform account after your purchase or trial is confirmed. Sign in with the email address used at checkout.
We receive the order information the reseller makes available to sellers, such as your name where provided, email address and country, the licence you chose, order and subscription IDs and status, and any VAT or tax number you enter. We also maintain the account-to-purchase link, licence identifiers, status, trial or paid-period expiry and update eligibility so that you can recover your key and manage billing. Records of purchases made through our earlier reseller, before we moved to Paddle may also contain a licence key. If you name someone else as the user of a licence, or a parent or guardian names a student under 16, we also receive the name and any email address you give us for that person. If you are named as the user of someone else’s licence, we will send you a link to this notice when we first email you.
We use this information to provide your licence, send reminders and other emails about it, give support, handle cancellations and refunds, check eligibility for the Student licence, prevent fraud, and keep business, tax and accounting records.
We or the reseller for your purchase will email you about your licence. These emails include purchase confirmation and receipts, a reminder before a free trial ends, reminders before each yearly renewal, written confirmation when you cancel by email, and the notices our licence terms describe, such as changes to prices or terms. Emails about purchases made through our earlier reseller, before we moved to Paddle may also include a licence key. They are about your licence, not marketing.
If we ask for evidence of student status, we use it only to check that you are eligible for the Student licence. We delete the evidence once we have checked it, and keep only a note of the result and the date. You may hide details we do not need, such as a photo or ID number. If you do not send the evidence we ask for, we may end your Student licence, as sections 8.6 and 23 of our licence terms describe.
Section 25 of the Lattiform Licence and Purchase Terms at lattiform.com/licence-terms also covers this.
Your Lattiform account
We use the email address you enter to request a sign-in link, confirm access to your account and link the verified account to purchase records received from Paddle. The account records include your authentication user ID and email, customer/purchase/subscription identifiers and status, plan references, relevant dates and licence mappings. Supabase provides sign-in; Cloudflare hosts the account service. Supabase sends the sign-in email through Resend using noreply@auth.lattiform.com. Resend therefore processes the recipient address and message content, including the sign-in link, plus delivery information. The account uses a secure, HTTP-only session cookie on accounts.lattiform.com to keep you signed in. When you are signed in and choose to open checkout, our account service verifies your current sign-in email and passes it to Paddle to prefill checkout. Your account lets you recover an owned licence key, view subscription status and request access to Paddle’s hosted billing portal. We do not receive your full payment-card details. The former free FEA Preview did not require an account and is no longer offered. You can buy a main-app licence without signing in. Sign-in is required to view an owned key or open billing from Your Lattiform account.
App Store purchases and website activation
The Mac App Store distribution uses Apple StoreKit 2. It reads verified product and entitlement information, including product, transaction, expiry and revocation state, on your Mac to provide access. It does not send receipts or Apple transaction identifiers to a Lattiform server or link them to Paddle/Keygen accounts. Apple handles Apple Account, payment and purchase information under its own privacy terms. App Store purchases require no Lattiform account or licence key; Apple also delivers app updates. Optional analytics remains opt-in in both distributions. The website distribution uses Keygen to issue and maintain licence keys after confirmed purchases or trials. Licence records include the plan, licence and purchase/customer references, trial or paid-period expiry, licence status and update eligibility. In the main Lattiform Mac app with Settings → Licence, adding a key is optional at present and does not unlock different features. If you choose to add a key, the app sends that key, the product reference and a pseudonymous installation identifier to Keygen. Activation also sends the platform (macOS), a generic label (Lattiform on Mac) and licence reference, and Keygen records a machine ID. The installation identifier is derived from a random value stored on that Mac; it is not your Mac serial number. Requests also reveal your IP address to the receiving service. The app keeps the key and random installation identity in this Mac’s Keychain without iCloud synchronisation. These licensing requests do not contain project files, geometry, study names or results. The former FEA Preview does not make these requests.
Checkout records and security
When you review a purchase, we keep the terms version and document checksum, selected plan, Paddle product and price references, currency and displayed amounts, applicable trial and renewal dates, and the time of your acceptance. Paddle confirmation and verified purchase records are used to check those details before fulfilment and purchase notices. Necessary checkout cookies and one-time request identifiers keep your review attached to the checkout you approved and prevent repeated submissions from creating unintended purchases. These records support your contract, fraud prevention and the purchase-retention periods described below.
Retention
Early-access contact records are kept only as long as useful for the relationship or required for ordinary operational records. Research for the September 2026 outreach batch was scheduled for a retention review on 5 October 2026. Completion of that review has not yet been confirmed for this notice; continuing replies are retained while the conversation is relevant. Objections retain only the information needed to prevent further contact, with periodic review. Disabling app usage sharing stops future reporting and clears the local event queue and installation identifier. It does not erase events already received by PostHog. The retention period and deletion handling for events already received by PostHog have not yet been confirmed for this notice. We keep licence purchase records, such as order, payment, subscription and licence details and emails about them, while your licence continues. An Individual licence bought as a single payment has no end date, so we keep its records while you hold it. After a licence ends, we keep its records for six years after the end of the financial year in which it ended. This lets us provide your licence, send the notices our licence terms describe, meet tax and accounting rules and deal with any claims. Student evidence is deleted once we have checked it. Contact us for questions or requests, using the details under Controller and contact.
Controller and contact
Lattiform Ltd, registered in England and Wales (company 17466405), is the controller of the website, app and professional outreach data described here, and of the order information we receive about licence purchases. Paddle is responsible for the data it collects to process new Paddle purchases, under its own privacy policy. Our earlier reseller remains responsible for the data it collected for purchases made through our earlier reseller, before we moved to Paddle, under its own privacy policy. Contact founder@lattiform.com for privacy questions and requests.
Lawful basis
Enquiry and beta-access data is handled to respond to requests, take steps toward a potential product relationship, and support legitimate product operations. We use minimal public professional data for a relevant evaluation invitation under our legitimate interest in finding engineering evaluators and receiving product feedback, where applicable electronic-marketing rules permit it. A public address is not consent. We assess relevance and recipient rules, offer an easy objection and keep suppression records to honour it. For licence purchases, we use order information to perform our contract with you, or to take steps you ask for before it starts. This covers providing your licence, sending reminders and other licence emails, giving support and handling cancellations and refunds. We keep tax and accounting records because the law requires it. We check Student eligibility, and look into suspected fraud or licence misuse, under our legitimate interest in making sure each licence is used as sold. When a buyer names someone else as the user of a licence, we use that person’s details under our legitimate interest in managing the licence. Update checks rely on our legitimate interest in keeping the app secure and up to date. Loading Paddle.js and requesting localized prices on our homepage and pricing page relies on our legitimate interest in letting you buy a licence there. If you turn on app usage sharing or the system profile, we rely on your consent. You can withdraw it at any time by turning the setting off in Settings. This does not affect data already sent. We do not make automated decisions with legal or similarly significant effects.
Who else handles your data
Framer hosts the website and forms; Cloudflare hosts downloads, update checks and the Lattiform account service at accounts.lattiform.com. Resend handles account sign-in and licence purchase emails; our other email providers handle messages and replies. Cloudflare may process download, update-check and account-service requests outside the UK, including in the United States. Instantly (Foo Monk LLC) and its service providers process outreach contact records and connected-mailbox messages, including in the United States. Instantly’s incorporated Data Processing Addendum provides EU standard contractual clauses and the UK Transfer Addendum for applicable restricted transfers. Paddle processes new purchases under its own privacy policy. Our earlier reseller and its payment providers continue to process purchases made through our earlier reseller, before we moved to Paddle under their own privacy policies, including in the United States. We access the order information each reseller makes available to us through its service. We may share licence purchase records with our accountant and, where the law requires, with HMRC or other authorities. Ask us for transfer-safeguard details or a copy. Outreach open and click tracking are disabled. PostHog Cloud EU processes optional app analytics only after you enable usage sharing. Supabase provides sign-in and stores our account, billing and licence-mapping records. Our primary Supabase project is in London, UK (eu-west-2); its service and support arrangements can involve processing elsewhere. Keygen processes our licence and activation records on its US-hosted service. Resend delivers account sign-in and licence purchase emails from our auth.lattiform.com sending domain, configured for Ireland (eu-west-1). That selection controls email routing and dispatch, not storage: Resend stores customer data, including message content, delivery logs, webhook payloads and account records, in the United States.
Your rights
You can object to direct marketing at any time by replying “no thanks” or contacting us. We stop outreach to that person and retain a minimal suppression record. Depending on the applicable law, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, withdraw any consent you have given, and complain to the UK Information Commissioner’s Office or your local data-protection authority. We may need to keep order records for the period set out under Retention even if you ask us to delete them. For purchase data held by Paddle, you can also contact Paddle as its privacy policy explains. For purchases made through our earlier reseller, before we moved to Paddle, contact us and we will tell you how to reach that reseller. Requests can be emailed to founder@lattiform.com.