How we handle data across our website, our apps, and our browser tools.
Effective 8 October 2026 · Version 1.1
The short version. Our software is built to keep your data on your own device. We do not run advertising, we do not sell or share personal information, and we do not use third party analytics or tracking on this website. Most of our products never send your working data anywhere at all.
Longleaf Software builds web applications, desktop applications, and browser based tools. This policy covers the website at longleafsoftware.app, the products listed below, and email you send to us. In this policy, "we" and "us" mean Longleaf Software, and "you" means the person or organization using our website or software.
We publish this as a table because the honest answer is different for each thing we make.
| Product or surface | What leaves your device | Where it is stored |
|---|---|---|
| longleafsoftware.app (this website) | Standard web server request data handled by our hosting provider: IP address, user agent, requested URL, timestamp. No cookies are set by us, and we run no analytics, advertising, or tracking scripts. | Our hosting provider's short term operational logs. We do not build profiles from them. |
| ClinicStudio | Your schedule template, settings, and entries stay in your browser's local storage on your own computer. Two optional exceptions: if you start a free trial or subscribe you give us an email address (see the next row), and the branding lookup described below. Your schedules themselves never leave your browser. | Schedules: your browser, on your machine. Clearing your browser data deletes them; we never receive a copy and cannot recover it for you. |
| ClinicStudio free trial & subscription | The email address you enter to start a trial or subscribe. If you subscribe, your card details go directly to our payment processor, Stripe; we never receive or store your card number. | Your email and subscription status are held by us (Cloudflare Workers KV) to run the trial, manage the subscription, and send product updates you can unsubscribe from. One trial per email. Payment details are held by Stripe under its own privacy policy. |
| ClinicStudio branding lookup (optional feature) | Only if you choose to use it: the website address you type into the branding field is sent to a Longleaf operated service, which reads that public page to pick up colors and a logo so the printed output matches your organization. | Used to answer that one request. The lookup is limited to the public web address you supplied. Do not enter a private or credentialed URL. |
| Longleaf Assistant | Your prompts and documents stay on your machine. The assistant runs a local engine on your own computer, so what you type is not transmitted to us. The application checks a version file on our site to see whether an update exists, and downloads updates from our site when you approve one. | Your computer. Update checks reach our servers as ordinary web requests. |
| Browser tools | Nothing, unless a specific tool says otherwise on its own page. These are single page tools that compute in your browser. | Your browser. |
| Email to us | Whatever you choose to write, plus your email address and the usual mail headers. | Our mail provider's servers and our mailbox. Kept as long as needed for support and business records. |
ClinicStudio is a scheduling template design tool. It is not built to hold patient information, and it does not ask for any. It works with counts, visit types, appointment lengths, and room and provider structure. It has no field for a patient name, date of birth, medical record number, diagnosis, or any other patient identifier, and its exports carry none.
Because your work stays in your own browser and never reaches us, we do not receive health information from you. We are not acting as a business associate under HIPAA for this product, and no business associate agreement is required for its intended use. If you type identifying information into a free text field anyway, that text stays on your machine like everything else, and it remains your responsibility under your own policies.
ClinicStudio is sold as a monthly subscription. Payments are processed by Stripe, which receives your card details in our place; we never see or store your card number. We store your email address and your subscription status so we can give you access and support your account. You can cancel at any time from the "Manage subscription" link in the app, which opens Stripe's billing portal. If you buy one of our applications through the Apple App Store instead, Apple handles that payment and provides us with aggregate sales reporting.
Our products are business tools intended for adults. They are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has sent us personal information, write to us and we will delete it.
Website request logs are kept only for the short operational window our hosting provider applies. Email correspondence is kept while it is useful for support and for as long as ordinary business records require. Product data is not kept by us at all, because it does not reach us.
Our website and downloads are served over HTTPS. Private downloads are restricted to the people we authorize. Because our products keep your data on your own device, the most important security control is the one you already run: your device password, disk encryption, and backups. No method of transmission or storage is perfectly secure, and we do not claim otherwise.
Depending on where you live, you may have the right to ask what personal information we hold about you, to get a copy, to correct it, to have it deleted, and to be free from discrimination for asking. Because we hold so little, most requests are answered quickly. Write to info@longleafsoftware.app and we will respond within 30 days. We do not sell or share personal information, so there is nothing to opt out of.
We operate in the United States and our servers and service providers are located there. If you use our website or products from outside the United States, you understand that the limited data described above is handled in the United States.
If we change this policy, we will change the effective date and version at the top of this page. Material changes will be summarized here so you can see what moved.
Longleaf Software
info@longleafsoftware.app