Privacy policy
How Freehold Software handles information on this website and in the Mortar systems we run for our clients. The short version: your data is yours. We keep as little as we can, we never sell it, and you can cut off our access whenever you like.
Who we are
Freehold Software Solutions LLC ("Freehold", "we") is a software company in Charlottesville, Virginia. Questions about this policy go to [email protected].
What this policy covers
- This website, freehold.software.
- Mortar instances: private, self-hosted systems that Freehold builds and runs for a specific household or organization. Each instance includes its sign-in, its connector for AI assistants, and the apps connected to it, such as "Mortar Home Mail". An instance is private to the people its owner invites. There is no public sign-up.
This website
The website has no accounts and no analytics, and it sets no tracking cookies. If you email us, we use your message only to reply to you.
Mortar instances
Each instance belongs to its owner and runs in infrastructure accounts the owner controls. Freehold operates it as an administrator, with the owner's permission. Data an instance processes stays in that instance. It is used only to provide the features the people using the instance ask for.
Google user data
Some Mortar apps connect to a person's Google account, but only after that person grants access on Google's consent screen. They may request:
- Google Sign-In, for your name and email address. This identifies you so the instance can show you your own data.
- Gmail (
gmail.modify). This lets you search and read your own mail, get summaries, write drafts you review, label or archive messages when you ask, and keep records you choose to keep, such as a list of bookings. A message is sent only after you approve that exact message. Background jobs never send mail. The app never creates forwarding rules or filters, never changes your Gmail settings, and never permanently deletes mail.
How it is stored. Access tokens are kept in the instance's own infrastructure and are never shared outside it. We do not keep a copy of your mailbox. Message content is processed to answer your request, and the instance clears it from its job records within minutes. What is kept long term is limited to:
- message identifiers and sync bookmarks;
- an audit log of actions, which records message IDs, never content;
- records you have chosen to keep.
Who sees it. Your mail is visible only to your own tools. Other people in the same instance cannot read it. Freehold staff do not read your mail except in these cases:
- you ask us to, for example to troubleshoot;
- it is necessary for security purposes, such as investigating abuse;
- it is needed to comply with applicable law.
Sharing. We do not sell Google user data, use it for advertising, or transfer it to data brokers. Content passes to the AI assistant you choose to use with the instance, such as Anthropic's Claude in your own account, and only when you ask for something. It also passes to the hosting provider that runs the instance, which processes it on our behalf.
AI training. We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models.
Freehold Software's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Your choices
- Disconnect anytime. Use Google Account → Security → Your connections to third-party apps, or ask us to do it. When access ends, the instance deletes its tokens and stops syncing.
- Deletion. Ask us to delete the records an instance keeps about you. We act on deletion requests within 30 days, and backups roll off on their normal schedule.
Security
We use least-privilege access, separate permissions for each person, encrypted connections, and audit logs. Sending mail always requires a person's confirmation. No system is perfectly secure. If we learn of a breach affecting your data, we will tell you promptly.
Children
Freehold's services are not directed to children. A child's access to a family instance, if any, is set up and managed by their parent.
Changes
If this policy changes, we will update this page and its effective date. We will tell the owners of affected instances about any material change.