Your information.
The clear version.

A fictional product. A real website.

Foundry is a fictional startup and this website is a product demonstration. It is not an operating AI service. This notice describes the information handling built into the prototype and the optional deployment configuration.

It does not promise legal compliance, establish a verified commercial operator, or describe a production service that does not exist. A future real service would require its own accurate privacy notice and applicable safeguards.

Sample content stays local.

The workspace, workflow builder, and developer example use illustrative content and local browser interactions. They do not upload documents, send sample prompts to an AI provider, or perform real inference. Copying the developer example places code text on your device’s clipboard.

No personal information is necessary to explore these samples. Please do not enter confidential or sensitive material.

Two possible storage paths.

Contact and demo-request forms may ask for contact fields such as your name, email address, company, role, and message or use-case details. Only provide information you are comfortable sharing in a demonstration.

Without a storage backend

Forms attempt a same-origin submission before falling back to browser storage when the handler is unavailable or reports no configured backend. In that fallback mode, submitted form details are saved to sessionStorage for the current tab under foundry-submissions. They are not delivered to a Foundry inbox. This browser storage generally lasts until the tab session ends and may remain across reloads; browser session restore can preserve it.

With the optional Cloudflare binding

A configured Cloudflare deployment can use a KV binding named SUBMISSIONS. Accepted submissions store contact fields in Cloudflare KV with a 30-day expiration. This is storage, not a guarantee of email delivery or staff review. The optional backend also uses a SHA-256 hash of the connecting IP address for a best-effort rate-limit counter with a 10-minute expiration; the raw IP address is not included in the stored submission record. Hosting or infrastructure logs may have separate provider-controlled handling; the KV expiration is not a promise about every provider log or backup.

Read the result message

The form distinguishes a local save from a backend-accepted submission. Do not assume delivery when the form indicates local storage or an error. If the connection fails, a local copy can be saved while remote acceptance remains unconfirmed; check deployment storage before retrying to avoid duplicates. Avoid passwords, payment information, sensitive personal data, or confidential business content.

No analytics SDK. Some network requests.

This prototype does not include analytics or tracking SDKs. The site typography uses licensed, self-hosted fonts. Font loading does not send requests to Google or another external font provider.

The site’s hosting infrastructure also receives the requests needed to load pages and assets, and an optional form backend receives a request when used. Provider practices and logging can vary. “No analytics SDK” should not be read as “no network information is processed.”

The website does not send interactive demo content to Claude or another AI model.

You can explore without submitting.

• Use the local samples without completing either form.
• Submit only non-sensitive contact information if you choose to test a form.
• Close the tab or remove the site’s session storage in your browser to clear locally saved form details, accounting for browser restore behavior.
• Use browser controls to restrict scripts or local storage if desired; this may change interactive behavior.

Clearing your browser does not remove a submission already accepted by a configured backend. KV entries use the stated expiration. This prototype does not provide an authenticated account or self-service remote data-management interface.

Know the limits before sharing.

The prototype guide explains how the form modes work. The contact page is itself a demonstration and may save information only locally; it is not a guaranteed monitored privacy-request channel.

A real deployment operator should provide an identified privacy contact, confirm its infrastructure practices, and update this notice before collecting real customer information. Nothing here guarantees regulatory compliance, absolute confidentiality, or production security.