Privacy Policy

Last updated: February 2026

OpenForte ("we", "us", "our") operates Lemmatica, a web-based Goal Structuring Notation (GSN) editor for collaborative assurance case development. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

We collect information in the following categories:

• Account information — your name and email address, provided through our authentication provider (Kinde) when you create an account.
• Document content — assurance cases, GSN nodes, edges, and related data that you create and store within the service.
• Usage data — page views, feature usage, and interaction patterns collected to help us understand how the service is used and where to improve it.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Lemmatica service.
• Authenticate your identity and manage your account.
• Enable real-time collaboration features, including shared editing, presence indicators, and document synchronisation.
• Analyse usage patterns to improve the service, fix issues, and develop new features.
• Communicate with you about service updates, security notices, and support inquiries.

3. Third-Party Services

We use the following third-party services to operate Lemmatica. Each service processes data in accordance with its own privacy policy:

• Kinde — authentication and user management. Processes your name, email, and login credentials.
• Liveblocks — real-time collaboration infrastructure. Processes document content and presence data during active editing sessions.
• Railway — hosting infrastructure. Hosts our application and PostgreSQL database.
• Vercel Analytics — usage analytics. Collects anonymised page view and performance data.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Railway. All data is encrypted in transit using TLS. We use Australian-hosted infrastructure where possible and take reasonable measures to protect your information from unauthorised access, alteration, disclosure, or destruction.

While we implement industry-standard security practices, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your account data for as long as your account remains active. Document content is retained for as long as your account is active or as required by the project owner. If you request deletion of your account, we will remove your personal data within 30 days, subject to any legal obligations requiring us to retain certain information.

Document data is owned by you and your organisation. You may export or delete your data at any time through the service.

6. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your personal information and account.
• Export your data in a portable format.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

To exercise any of these rights, contact us at hello@openforte.com.au.

7. Cookies

Lemmatica uses minimal cookies, limited to those required for authentication session management. We do not use advertising cookies or third-party tracking cookies. Session cookies are essential for the service to function and cannot be disabled while using Lemmatica.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or an in-app notification. Your continued use of the service after any changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

OpenForte
Canberra, Australia
hello@openforte.com.au