Privacy Policy

Last updated: 2026-07-27

Lodestone is a service provided by Studio Corsair LLC ("we", "us"). This policy explains what we collect when you use lodestone.studiocorsair.com, how we use it, who we share it with, and the choices you have. If anything here is unclear, email jordan@alastor.space.

What we collect

• Email address. Used to create your account and to send you sign-in links.
• Sign-up form information. Anything you enter when you request access or sign up — for example, the integrations you tell us you want.
• Tool-usage logs. When your AI calls a Lodestone tool, we record the tool name, a timestamp, and how long the call took (latency). We keep these to operate the service, debug problems, and understand which integrations people use.
• API keys you choose to add. If you connect an integration by bringing your own API key (for example, a Meta or fal.ai key), we store that key so we can make calls on your behalf.

Your API keys are encrypted at rest

Any API key you add is encrypted at rest using AES-256-GCM. We decrypt a key only to make your own calls to the provider it belongs to. We never use your keys for anything else, and we never share them with other users or third parties.

How we use your data

• To authenticate you and send sign-in links.
• To run the tools and integrations you ask your AI to use.
• To operate, maintain, debug, and improve the service.
• To understand demand for integrations (from usage logs and sign-up info).

Who your data flows through

We use a small number of third-party providers to run Lodestone. Your data passes through them only as needed to provide the service:

• Cloudflare — hosting, and storage of account data and encrypted keys (KV).
• Mailgun — sending your sign-in emails.
• Each integration provider you connect — for example Meta, fal.ai, and others. When you have your AI use an integration, the relevant request (and any data it needs) goes to that provider using your key. Those providers handle that data under their own privacy policies.

What we don't do

We do not sell your data. We do not share your API keys. We do not use your keys to make calls that aren't yours.

Data retention and deletion

We keep your account data, keys, and usage logs for as long as your account is active. You can ask us to delete your data at any time by emailing jordan@alastor.space, and we will delete your account data and stored keys.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above.

Contact

Questions, requests, or deletion requests: jordan@alastor.space.