Privacy

Lodge builds and runs a work hub for companies: tasks, messages, the team calendar, customers and documents in one place. In this policy “Lodge”, “we” and “us” mean the people who run it, and “workspace” means one company’s hub.

Questions about privacy go to hello@joinlodge.app. A person reads every message.

This website. For what you send us here, such as a trial request, we decide what is collected and why. This policy covers it in full.

A company’s workspace. Inside a workspace, the company that uses it decides what goes in and who can see it. We handle that information on the company’s behalf and only to run the service for it, under our agreement with that company. If you use Lodge at work, your employer’s own policies apply too, and your administrator is the first person to ask.

• The trial and “talk to us” forms: your name, work email, company, company size, and anything you choose to write in the optional fields, with the page you sent it from.
• With each request, your browser’s name and version, and a salted hash of your network address (never the address itself), kept only to spot abuse and limit repeated requests.
• One cookie that remembers whether you chose the light or dark theme. Your browser also keeps your place in the sandbox and your preferred code language. Those stay on your device; we never receive them.
• Our hosting provider keeps standard request logs (network address, page, time) to run and protect the site.

This site has no analytics, no advertising, no tracking pixels and no third-party trackers.

We use a request to reply to you, to set up a trial if you asked for one, and to keep the forms free of abuse. We do not sell personal information, use it for advertising, or add you to a mailing list you didn’t ask for.

• Account details: your name, work email, and the photo, title and role your company sets or you add.
• What your team puts in: tasks, projects, messages, calendar events, customers and contacts, documents, tickets and their history.
• Sign-in: an emailed link or your Google account. Lodge never stores a password. A cookie keeps you signed in on each device.
• Calendars: if you add a calendar by its link, Lodge reads its events every 15 minutes. If your company turns on Google Calendar and you connect it, Lodge reads your events and adds the meetings you schedule in Lodge; the access it keeps for that is stored encrypted.
• Notifications: if you allow them, your browser maker’s push service (for example Apple, Google or Mozilla) relays encrypted notifications to your device.
• Your own AI assistant: a member can connect their own assistant, such as Claude or ChatGPT. It sees only what that member can see, and what it reads goes to that AI provider under the member’s or the company’s own agreement with it. Lodge does not send workspace content to an AI provider by itself; the built-in assistant is off unless the company turns it on.

Each company’s workspace has its own database, kept apart from every other company’s, in the region chosen when it was set up (the Americas, Europe or Asia-Pacific).

We look inside a workspace only to set it up, to help when the company asks us to, to keep it secure, or when the law requires it.

A few providers run parts of Lodge for us. Each handles information only to provide its part:

• Supabase: the database and sign-in.
• Vercel: hosting for this site and every workspace.
• Resend: delivery of sign-in links and notification emails.
• Google: sign-in and calendars, only when a company turns them on.

We will list any new provider here before it handles workspace information.

A website request is kept while we are talking with you and deleted within 24 months of our last contact, unless your company becomes a customer.

A workspace is kept while the company uses Lodge. When it stops, the company can export its information, and we delete the workspace within 30 days. Copies in backups expire within a further 30 days.

Information travels over encrypted connections and is stored encrypted by our providers. Every table in a workspace’s database checks who is asking before it returns a row, and the access Lodge keeps for connected calendars is encrypted again on top of that.

No system is perfectly secure. If a breach affects a company’s information, we will tell that company without undue delay and help it tell anyone it needs to.

You can ask us for a copy of what we hold about you, to correct it, or to delete it, by writing to hello@joinlodge.app. For information inside a workspace, start with your company’s administrator, who can change or remove most of it directly; we help them with the rest.

Depending on where you live (for example the EU, the UK or California), the law gives you further rights, such as objecting to some uses or complaining to a data-protection authority. We answer every request within 30 days, and we never treat you differently for making one. We do not sell or share personal information as California law defines those words.

Our providers operate in the United States and other countries. When information about people in the EU or the UK leaves those places, we rely on the safeguards the law provides, such as the European Commission’s standard contractual clauses.

Lodge is a tool for work, not meant for anyone under 16, and we do not knowingly collect information about children.

When this policy changes we update it here with a new date. If a change matters for how a company’s workspace is handled, we tell its administrators by email before it takes effect.

Questions, requests or complaints: hello@joinlodge.app.