Privacy policy
Antonio Jacquaye, trading as LatticeSearch, is the data controller. The trading address is 83 Lynton Mead, London N20 8DH, United Kingdom. The contact route we invite for privacy matters is email: support@latticesearch.app.
Local search and network features
Core indexing and search run on your device. Licence requests do not send your files, paths, searches, results, document text, images, audio, video, embeddings or local index. They send only the fields listed below. A support request or optional bug report is separate and sends only what is described in this policy.
The website uses no analytics, advertising or tracking cookies. It stores only your light or dark theme choice in your browser's localStorage. Hosting services still receive the network information needed to deliver a page, such as the source IP address and request metadata. Before checkout reopens, the production website, Hostinger configuration and embedded resources will be audited to confirm that they set no undisclosed tracking technology.
Licence and release requests
The LatticeSearch client uses HTTPS JSON requests. The LatticeSearch-operated default server is https://license.stellargrid.cloud.
- Activation (
/api/lic/activate) sendskey, the licence key entered, andfp, the machine fingerprint. - Licence and release checks (
/api/lic/check) sendkey,fp,version,editionandplatform. The same response can carry release information. With no saved key,keyis empty but the other four fields can still be sent. Release information is cached locally for up to 24 hours. - Deactivation (
/api/lic/deactivate) sendskeyandfp. Deactivation releases a device. It does not cancel billing.
The fingerprint is the first 32 characters of a SHA-256 hash made from available device identifiers: the Windows MachineGuid or a Unix machine ID, the device MAC value and the host name. It is a device identifier, not a hardware inventory or a copy of your files. Licence requests contain no separate email field, advertising identifier or search telemetry. The server receives the source IP address as part of the network connection, not as a JSON field.
The client stores the key, fingerprint, tier, activation time, last successful check, expiry, revocation flag and offline-grace deadline on the device. It also stores a separate release cache. After a successful check, paid features can work offline for 10 days. If a check has not succeeded by the end of that period, paid features fall back to Free until entitlement is confirmed. Your local files and index are not removed.
If a different licence server is configured
The UK hosting statement below applies only to the LatticeSearch-operated default server. If you or your organisation deliberately configures a different server address, that server's operator receives the same request fields and network information. That operator is responsible for its own lawful basis, security, retention, recipients, transfers and privacy notice. Antonio Jacquaye is not the controller for an independently operated custom server unless a separate agreement says otherwise.
What we process and why
| Data | Purpose and UK GDPR basis | Recipient | Retention |
|---|---|---|---|
| Website IP address and request metadata | Deliver and secure the website. Legitimate interests: running a reliable and secure site. | Hostinger shared hosting. | Access and security logs: 30 days, unless relevant entries are needed for an active security incident or legal claim. |
| Licence key, hashed device fingerprint, tier, seats, issue and expiry times, activated devices, subscription status, app version, edition and platform | Activate paid features, apply device or seat limits, check entitlement, release devices and provide release information. Contract. Fraud, abuse and security checks also use legitimate interests in protecting customers and the service. | Antonio Jacquaye and the Hostinger VPS in the United Kingdom used by the default licence server. | While the subscription is active and for 12 months after it ends. Device fingerprints and operational status are then deleted or anonymised unless relevant to an active dispute or legal claim. |
| Name, purchase email, Stripe order, price and subscription identifiers, plan, seats, billing interval, amount and payment status | Take and administer an order, supply a key, renew or cancel the subscription, handle refunds and keep required accounts. Contract and legal obligation. | Stripe, Antonio Jacquaye, the default licence server and Titan for transactional email. | Transaction and accounting records are kept until the applicable HMRC deadline. A self-employed trader normally keeps them for at least 5 years after the 31 January filing deadline for the relevant tax year. |
| Support emails and any details you choose to send | Answer the request, perform the contract, resolve complaints and defend legal claims. Contract and legitimate interests in customer support and dispute handling. | Antonio Jacquaye and Titan email. | Up to 2 years after the support case closes, unless an active legal claim requires the relevant messages for longer. |
| Optional bug report: app version and codename, platform, Python version, time, your note and reply email, index item counts, scrubbed recent errors, jitter data and scrubbed crash-log tail; a screenshot only if you choose to attach one | Investigate a problem you report and improve reliability. Contract and legitimate interests in support and product security. | The default Hostinger VPS relays the report to the Titan support mailbox. | Up to 2 years after the support case closes. A local copy remains on your device until you remove it. |
| Email-delivery, refund, revocation and security event logs | Prove delivery, operate refunds, investigate errors, prevent fraud and keep the service secure. Contract and legitimate interests. | Antonio Jacquaye and the relevant Hostinger or Titan service. | 30 days, unless an entry is needed for an active incident, refund, dispute or legal claim. Then only the relevant entry is kept until that matter closes. |
What you have to provide
Licence and payment data are not statutory requirements, but they are contractual requirements for paid activation and contract administration. When checkout reopens, if you do not provide the required purchase email, payment and licence details, you will not be able to buy, activate or administer a paid plan. Some transaction records must then be kept to meet legal obligations.
Website network data are collected automatically because they are technically necessary to deliver and secure the Hostinger-hosted site. If your device does not send the information needed for the connection, the site cannot be delivered to it. Support notes, bug reports and screenshots are optional. You may contact us without sending a bug report or screenshot, but withholding information may limit our ability to investigate the particular problem.
We apply the shortest period that fits the row above. A legal hold applies only to records relevant to the incident, dispute or claim. Other records continue to be deleted on schedule. We do not treat device fingerprints, app versions or general access logs as tax records. Before checkout reopens, the stated periods will be enforced by tested scheduled deletion or anonymisation jobs, with separate controls for documented legal holds.
Founding Pro waitlist
If you join the Founding Pro waitlist on the pricing page, we collect your email address and record that you agreed, with the date and time and the wording version you saw. We do not collect your name. The waitlist record does not include your IP address; a one-way hash of it, used only to limit repeat submissions, is discarded once it is more than an hour old, and the ordinary web-server logs described above still apply. The details are stored in a private file on the web hosting that serves this site (Hostinger), not with a third-party list service. The lawful basis is your consent, which you can withdraw at any time. We use the address only to send you one email when Founding Pro opens. We delete it after that email is sent or within 12 months of you joining, whichever comes first. To have it deleted sooner, email support@latticesearch.app and we will delete it and confirm.
Providers and international transfers
| Provider | Data and role | Destination and safeguard |
|---|---|---|
| Hostinger | Processor for the website and default licence service. It receives website request data, the licence fields above and any optional bug report sent through the default server. | The default licence VPS is in the United Kingdom. The country of the shared-hosting account has not yet been confirmed. Hostinger says its services may process data in the UK, Netherlands, Lithuania or Cyprus and through listed subprocessors elsewhere. UK-to-EEA transfers use UK adequacy regulations. Hostinger's data processing addendum incorporates the UK International Data Transfer Addendum for a transfer to a country without UK adequacy. |
| Stripe | Stripe is our processor for payment processing carried out on our instructions under its standard terms. Stripe is an independent controller for its own payment-service and fraud-prevention data. It receives card, billing, contact, device and transaction data on its pages. We do not receive your full card number. | Stripe identifies Ireland and the United States as main destinations and uses providers globally. UK-to-Ireland transfers use UK adequacy regulations. Stripe says certified UK-to-US transfers use the UK Extension to the EU-US Data Privacy Framework, with its UK Addendum where required. Its Privacy Center and data processing agreement explain the roles and safeguards. |
| Titan | Processor for support and transactional email. It receives email addresses, message content and delivery information. | Titan's public subprocessor list names the United States, Canada, Spain and Estonia. Its public addendum refers to EU standard clauses, but the account-specific routes and the UK safeguard for any restricted transfer have not been confirmed. Support email is already in use, so this is a current compliance issue and is not deferred until checkout reopens. The account routes and safeguard must be confirmed, a transfer-risk assessment completed where required, and this policy updated. See Titan's data processing addendum and subprocessor list. |
Email support@latticesearch.app to request a copy of a confirmed applicable transfer safeguard. We may remove confidential business information, but we will provide the substance needed to understand the protection. Until Titan's account-specific position is confirmed, please send only the personal data needed for us to deal with your request.
Automated licence checks
The client and server automatically compare the key, fingerprint, paid period, seat use and revocation status. This is a technical validity check. No solely automated decision with legal or similarly significant effect is made. If a check restricts paid features, we will tell the affected user the result and how to request review. You may make representations, contest the result and obtain meaningful human intervention by emailing us. A person will consider the information, can reverse an incorrect restriction and will explain the outcome. An error will be corrected and access reinstated. If contracted access was wrongly withheld, the terms provide for any refund or price reduction required by law.
Your right to object
You may object at any time to processing based on our legitimate interests. This includes licence-abuse, fraud, access-log and security processing. Email support@latticesearch.app and explain the processing you object to. We will stop unless we show compelling legitimate grounds that override your rights, or the processing is needed for a legal claim. An objection does not stop processing needed to perform the contract or meet a legal obligation.
Your other rights and complaints
Depending on the processing and legal exceptions, you may ask for access, correction, erasure, restriction or portability. Where consent is used, you may withdraw it for future processing. Email support@latticesearch.app. We may need enough information to confirm your identity. A privacy request does not by itself cancel a subscription.
You have the right to complain to us about our use of your personal data by emailing support@latticesearch.app. We will acknowledge your complaint within 30 days, investigate it, keep you appropriately informed and communicate the outcome without undue delay. You may also complain to the UK Information Commissioner's Office or another supervisory authority available to you. The terms, cancellation and refund policy and software licence explain the contract rules.
Further information: ICO guidance on privacy notices.