Privacy Policy

Privacy Policy – MachineFabric

1. Data Controller MachineFabric is operated by Bahram Joharshamshiri, sole proprietor (Partita IVA: 04755640614), Italy. Contact: [email protected]

2. Nature of the Service MachineFabric is a local-first application. All file processing occurs on the user’s device by default.

3. Data We Collect

a) No-collection by default We do not collect or transmit user files or content.

b) Optional telemetry (opt-in only) If the user explicitly enables analytics, we collect:

• Anonymous usage events (feature usage, performance)
• Device-level metadata (OS version, app version)

Analytics is provided via PostHog.

4. Legal Basis

• Service operation → contract (Art. 6(1)(b) GDPR)
• Analytics → explicit consent (Art. 6(1)(a))

5. Data Processing Location

• Core processing: local device
• Analytics (if enabled): processed by PostHog infrastructure (EU where possible)

6. Data Sharing We do not sell data. Analytics data is shared only with PostHog as a processor.

7. Data Retention

• No user content retained
• Analytics data retained only as necessary for product improvement

8. User Rights Users may request access, deletion, or restriction. Contact: [email protected]

9. Opt-out Users can disable analytics at any time in the application settings.

Third-Party Cartridges

MachineFabric supports modular plugins (“cartridges”) which may be developed by third parties.

Cartridges execute locally on the user’s device. However, their behavior is defined by their respective developers.

MachineFabric does not control or audit the internal logic of third-party cartridges.

If a cartridge transmits data externally or performs independent processing, the cartridge provider acts as an independent data controller.

Users are responsible for reviewing the behavior and policies of any third-party cartridges they install.

MachineFabric disclaims responsibility for data processing performed by third-party cartridges.

10. Security We minimize data collection and rely on local processing as the primary security model.

11. Changes Updates will be communicated via the website or application.

12. Authority Complaints may be filed with the Garante per la Protezione dei Dati Personali (Italy).