EgoCraftAI
Your privacy matters to us. This policy explains how EgoCraft, Inc. (“EgoCraft,” “we,” “us,” or “our”) handles personal information in connection with the EgoCraftAI website at egocraftai.com (the “Website”). Personal information means information that identifies you or can reasonably be linked to you.
1. Scope and responsibility
This policy covers the Website and communications about it. EgoCraft is responsible for the personal information it processes for the purposes described here, including as a controller where applicable data protection law uses that term.
Avalogica has a separate Avalogica Privacy Policy. This Website policy does not describe how the app handles conversations, reflections, journal entries, profiles, or other product data. Future products, including Avalogica Legacy, will have privacy information appropriate to their services when they become available.
Visiting the Website does not connect to your Avalogica account or give the Website access to your private app content. This policy is a notice about our practices; simply visiting the Website does not substitute for consent where consent is required by law.
2. Information you provide
If you email us, we receive your email address, any name associated with it, the content of your message, and any attachments you choose to send. We use that information to handle your inquiry and related correspondence. Please provide only what is needed for your request, and do not send passwords, payment credentials, or sensitive personal material through general support email.
The Website has no account registration or payment checkout. Email links open your email application; they do not send a message until you choose to send one.
The Avalogica Legacy waitlist form asks for your email address. We use MailerLite to collect and manage signups and send the development and availability updates you request. The form uses double opt-in: you must confirm your email address through an email link to complete signup. MailerLite also processes subscription and confirmation records and technical information associated with the form, such as IP address and browser information.
You can unsubscribe using the link in an update email or by contacting service@egocraftai.com. If you request to join by email instead, we use your email address to handle that request and the updates you ask for. Joining the waitlist does not create an Avalogica account or provide access to your app content.
3. Information processed when you visit
Delivering a web page requires technical information such as your IP address and the page or file requested. Our hosting provider, StableHost, confirms that its Apache access logs record visitor IP addresses in full, without IP masking or anonymization configured for our account. Access and error logs may also contain request dates and times, requested URLs, response status, browser or device information supplied by your browser, and referring pages where your browser supplies them.
These records support delivery, security, troubleshooting, and operation of the Website. Our hosting account has AWStats, Webalizer, and Analog enabled to produce traffic reports from server logs. Information such as an IP address can be personal information; we do not assume that technical records or traffic reports are anonymous.
The Website does not request access to your microphone, camera, contacts, or precise device location. Its animation and page controls run in your browser without sending your interactions to an analytics service.
4. Cookies, analytics, and tracking choices
The Website’s own code does not set cookies or store visitor information in browser local storage. We do not currently embed Google Analytics, Yandex.Metrica, advertising pixels, session-replay tools, or social-media tracking widgets. Website images, fonts, and animation assets do not require embedded third-party tracking services.
The Legacy page embeds a MailerLite signup form. Loading that page contacts MailerLite to retrieve the form, which provides MailerLite with technical request information even if you do not submit an email address. The embedded service may use cookies or similar technologies for form operation and abuse prevention. For more information, see MailerLite’s Privacy Policy.
Hosting or security infrastructure may process technical requests and use mechanisms necessary to deliver or protect the Website. The hosting traffic reports described in Section 3 are generated from server logs and are separate from the browser-embedded tracking tools listed above. If we add nonessential cookies or tracking, we will update this policy and provide the choices or consent controls required by applicable law before enabling them.
We do not track visitors across other websites for targeted advertising. The Website does not change its behavior in response to a browser’s Do Not Track signal. We do not sell personal information or share it for cross-context behavioral advertising, whether or not a Global Privacy Control signal is enabled; there is currently no such sale or sharing to opt out of.
You can manage cookies and site storage through your browser settings. Those controls do not prevent the basic network requests needed to load a page or the associated hosting logs.
5. Purposes and legal bases
We use the information described above to:
- Deliver, maintain, and troubleshoot the Website.
- Respond to inquiries and keep relevant correspondence.
- Manage waitlist subscriptions and send the updates you request, with your consent.
- Detect and prevent spam, abuse, fraud, and security incidents.
- Comply with legal obligations and establish, exercise, or defend legal claims.
Where the European Union or United Kingdom data protection rules apply, we rely on our legitimate interests in operating a secure website and responding to inquiries, balanced against your rights; on a legal obligation where processing is required by law; or on steps you request before entering into a contract, where relevant. If a particular use requires consent, we will seek it separately and you may withdraw it.
We do not use Website visits or correspondence to build personality profiles or make solely automated decisions that produce legal or similarly significant effects about you. The features described on our product pages are governed by the relevant product’s privacy policy.
6. When information is disclosed
We do not rent or sell personal information. We disclose information only as appropriate for the purposes in this policy:
- Service providers: Hosting, email delivery and storage, security, and technical support providers may process relevant technical records or correspondence to provide services for us. StableHost provides our website hosting. Google Workspace receives and stores support correspondence sent to service@egocraftai.com. We do not use generative AI tools to summarize support correspondence or draft replies. Access to the support mailbox within EgoCraft is currently limited to one authorized person. We retain support correspondence while handling an inquiry. We review resolved routine support messages every three months and delete those that have been resolved for at least 12 months and are no longer needed. Relevant records may be kept longer for an ongoing matter or dispute, a security investigation, or a legal obligation. Provider recovery and backup cycles remain separate. You can request deletion through our Contact page, subject to applicable legal limits and separate provider recovery or backup cycles. MailerLite processes waitlist signup information and delivers confirmation and update emails for us. We limit disclosures to what is needed for the service and require appropriate protection where applicable law requires it.
- Legal and security needs: We may disclose information where required by law or where reasonably necessary to protect rights and safety, investigate abuse or fraud, or establish, exercise, or defend legal claims.
- Business transitions: Information may be transferred in connection with a merger, acquisition, reorganization, or sale of assets, subject to applicable protections. We will provide notice of changes in control or materially different uses and any choices required by law.
- At your direction: We may disclose information when you ask us to or provide any necessary consent.
Links to app stores, social platforms, and other websites lead to services with their own privacy practices. This policy does not govern those independent services. Our responsibility for providers processing information on our behalf is not waived by linking to their policies.
7. Retention and security
Retention depends on the type of information, the purpose for keeping it, the status of the matter, and applicable legal requirements. For routine support email, we use the three-month review and 12-month resolved-matter retention rule described in Section 6. This is periodic review and deletion, rather than automatic removal exactly 12 months after a message was sent.
Our hosting account is configured to archive raw access logs after statistics processing and remove the previous calendar month’s archives at the end of each month. StableHost has confirmed that monthly archive creation and removal are enabled, with no account-specific override. This monthly rule is not a rolling 30-day limit. StableHost reports that its server Apache logs rotate daily, retaining 90 rotated copies, or approximately 90 days. These server logs are separate from account-level raw-log archives. StableHost has confirmed that no automatic pruning period is configured for AWStats, Webalizer, or Analog reports, so those reports have no defined automatic expiry under the current configuration. StableHost has also confirmed that its standard 14-day R1Soft backup retention policy applies to this account. There is no uniform 14-day deletion limit for hosting records.
Waitlist subscription information is retained while you subscribe or while needed to administer your request. After you unsubscribe, limited records may be retained to honor your opt-out and document your subscription choices.
You may ask us to delete personal information as described below. Some records may need to be retained for lawful reasons, and residual backup copies may remain until their normal replacement or deletion cycle. We will explain applicable limits when responding to a request.
We use reasonable administrative and technical measures appropriate to the information and risks. No internet transmission or storage system is completely secure. If a breach requires notification, we will provide it in accordance with applicable law.
8. International processing
EgoCraft is based in the United States. Information may be processed in the United States and in other locations where our service providers operate. Privacy laws in those locations may differ from those where you live.
Where applicable law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism. You can contact us for information about safeguards relevant to your information. We do not treat your use of the Website as blanket consent to international transfers.
9. Your choices and privacy rights
You may contact us to request access to, correction of, or deletion of your personal information. Depending on your location and applicable law, you may also have rights to receive a portable copy, restrict processing, object to processing based on legitimate interests, withdraw consent, or complain to a data protection authority. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
California residents may have rights under the California Consumer Privacy Act, as amended, where it applies. These include knowing the categories and specific pieces of information collected, their sources, purposes, and categories of recipients; requesting deletion or correction; opting out of sale or sharing for cross-context behavioral advertising; and limiting certain uses of sensitive personal information. We do not sell or share Website personal information for that advertising purpose, or use sensitive personal information to infer characteristics about visitors.
To make a request, email service@egocraftai.com. Describe what you would like us to do and provide enough context to locate the relevant information, such as the email address used to contact us. No special subject line or account is required. Please do not send identification documents unless we request them through an appropriate process.
Where needed and permitted, we may request proportionate information to verify your identity or an authorized agent’s authority before disclosing or changing records. We use verification information for that purpose and to document our handling of the request. We will work with providers processing information on our behalf when needed to fulfill applicable rights.
We aim to respond within 30 days and will meet applicable legal deadlines, explaining any permitted extension or reason we cannot fulfill a request. We will not discriminate against you for exercising your rights. Rights are subject to applicable exceptions, and deleting correspondence may limit our ability to continue handling an inquiry. Where applicable law gives you a right to appeal a decision, you may contact us to request review or contact the relevant regulator.
10. Younger visitors
The Website is intended primarily for adults. Our Website Terms of Use permit visitors aged 13 to 17 to browse with a parent or guardian’s permission and supervision, subject to the terms’ emancipation exception; children under 13 may not use the Website.
We do not knowingly solicit personal information from anyone under 18 through the Website. If you are under 18, please do not submit personal information or contact us with personal details; ask a parent or guardian to contact us instead. If you believe a minor has provided personal information contrary to this policy, contact us so we can investigate and delete it as appropriate, subject to applicable legal obligations.
11. Changes to this policy
We will post revisions on this page and update its date. For material changes, we will provide a notice on the Website or other appropriate notice and obtain consent where required by law. New features that collect information will be covered by appropriate disclosures before collection begins.
12. Contact
For privacy questions or requests, contact:
EgoCraft, Inc.
Aliso Viejo, California, United States
Back to top