Legal
ilimcraft LLC — Privacy Policy
Last updated:
1. Who we are and what this covers
This policy explains how ilimcraft LLC ("IlimCraft", "we") handles personal information on ilimcraft.com and across our business units. IlimCraft is based in San Francisco, California.
The policy works in two layers. This company-level policy sets the principles that apply everywhere. Each business unit then publishes its own policy describing the data its product or service collects and how long it keeps it (section 9). If the two differ, the business unit policy controls for that product or service, but it may never weaken the commitments in section 2.
2. Our commitment
We do not sell your personal information, and we do not share it with third parties. We never use it for advertising, and we do not build advertising profiles.
We collect data only to run, support and improve our products and services. Three narrow cases are not "sharing", and they are the only ways information leaves our control:
- Processors. Companies that host, store, bill or support our products on our behalf, under contract. They may use your data only to provide their service to us. Section 5 names the ones for this website, and each business unit's policy names the ones for its own product or service.
- Your direction. When you ask a product to send data somewhere, for example pushing a Mnemox note to Linear or Jira, we send what you chose to the service you chose.
- Legal and safety. We disclose information if the law requires it, or to protect people's safety or our legal rights. If IlimCraft is ever acquired, we will tell you before your information is handled under a different policy.
3. Information we collect on ilimcraft.com
IlimCraft's own website collects very little.
- What you send us. If you email contact@ilimcraft.com, we receive your name, email address and whatever you write.
- Automatic data. Like any website, our host records your IP address, browser and device type, the pages you request and the page that referred you. We also derive an approximate location (city or region) from the IP address.
- Cookies and similar technologies. ilimcraft.com does not use advertising or cross-site tracking cookies.
- Inside our products. Accounts, content and usage data collected inside Mnemox or our advisory work are covered by each unit's own policy, not this section.
4. How we use information
We use the information we collect for these purposes, and no others:
- Analytics. Understanding how our sites and products are used, in aggregate.
- UX improvements. Finding what is confusing or slow and fixing it.
- Support. Answering your questions and resolving problems you report.
- Customization. Remembering your settings and tailoring a product to how you use it.
- Enhancements. Building and testing new features and fixing bugs.
- Security and legal. Preventing abuse and meeting our legal obligations.
We do not use personal information to train advertising models or to make decisions with legal or similarly significant effects on you.
5. Processors for this website
These companies process personal information for ilimcraft.com on our behalf. Each is bound by contract to use the data only to serve us, and none may use it for its own advertising. We update this table when we add or change a processor.
| Processor | Used for | Data it handles |
|---|---|---|
| Vercel | Hosting and delivery of this website | IP address, request logs, pages requested |
| Sanity | Content management for this website | Website text and images; standard request logs when files load |
| Google Workspace | Email for the contact@ address | Messages you send us, with your name and email address |
Processors for our products and services are listed in each business unit's own policy, together with the data each one handles. To learn who processes your data in Mnemox or our advisory work, see the policy linked in section 9.
6. How long we keep information
This section covers the company website and general correspondence. Retention for product data (notes, accounts, usage) is set in each business unit's policy.
- Emails to us: kept while we are helping you and for 24 months after the last message, then deleted.
- Hosting logs: kept by our host for 30 days.
- Billing and tax records: kept for as long as the law requires 7 years, then deleted.
- Legal holds: if we are legally required to preserve information, we keep it until the obligation ends.
7. Your rights and choices
You can ask us to tell you what personal information we hold about you, correct it, delete it, give you a copy, or limit how we use it. Residents of California have these rights under the CCPA/CPRA. People in the EEA, UK and Switzerland have them under the GDPR, which also gives a right to object to processing. Where the GDPR applies, we rely on our legitimate interests in running and improving our products, on contract for services you sign up to, and on consent where we ask for it.
Because we do not sell or share personal information, and do not use it for targeted advertising, there is nothing to opt out of. Browser privacy signals such as Global Privacy Control therefore make no difference to how we handle your data.
To make a request, email contact@ilimcraft.com from the address linked to your data. We may need to confirm your identity first, and we will respond within 30 days. We will not treat you differently for making a request. For data inside a product, the product's own policy describes any in-app tools for export and deletion.
8. Security, children and international transfers
- Security. We encrypt data in transit, limit access to the people who need it, and choose processors that maintain recognized security practices. No system is perfectly secure. If a breach affects you, we will notify you as the law requires.
- Children. Our websites and services are not directed to children under 13, and we do not knowingly collect their information. If you believe a child has sent us data, contact us and we will delete it.
- International transfers. We are based in the United States, and our processors may handle data in the United States and other countries. Where the GDPR applies to a transfer, we rely on standard contractual clauses with the processor.
9. Business unit policies
Each unit publishes the details this policy leaves out: what its product collects, why, how long it keeps it, how to delete it, and the processors it uses, with the data each one handles.
| Business unit | What it is | Privacy policy | Terms |
|---|---|---|---|
| ilim (Advisory) | AI transformation advisory for SaaS and PE-backed companies | ilim.ai/privacy | Set by each signed engagement agreement |
| Mnemox | Notes app that turns lines into Linear and Jira issues | mnemox.so/privacy-policy | mnemox.so/terms-of-service |
Other IlimCraft apps, including Rihla, publish their own policies on their own sites.
10. Changes and contact
We will update this policy when our practices change. The date at the top shows the latest revision. For material changes we will post a notice on ilimcraft.com and email anyone who has given us their address for this purpose. We will never make a change that lets us sell your information or share it with third parties without your clear opt-in.
ilimcraft LLC, San Francisco, CA
Email: contact@ilimcraft.com