Legal

Privacy Policy

Effective 2026-09-15

This is written in plain language on purpose. It covers this website; the messaging service, where clients text a phone number (or message Patch on Telegram or Discord) to change their own website or restaurant menu; calls and texts to Patchlamp's demo line; and the public chat room, when there is one. If anything here is unclear, email and Taylor answers directly.

Who we are

Patchlamp is operated by Plateful LLC, Taylor Remund's company in Utah. Taylor is the only person who handles your information. Contact: founder@patchlamp.com.

This website

patchlamp.com uses no advertising, no tracking cookies and no third-party analytics. It counts its own visits: when a page loads, your browser sends this server the page's address and the site you came from, and the server stores those with a one-way hash of your IP address and browser that changes every day — enough to count a day's visitors, not enough to know who you are or to recognise you tomorrow. Nothing about your visit is shared with anyone. A few other things happen in the background you should know about:

• Leaving your number. If you use the "leave your number" box, we store the number and what you typed, email it to Taylor, and Taylor texts you once about Patchlamp from a real number. Reply STOP and that's the end of it; ask and we delete the record.
• Hosting. The site runs on Laravel Cloud. Like any host, it may log the IP address and browser details of visitors under its provider's privacy terms. We don't use those logs to identify you.
• The chat bubble. If you open the chat and talk to Patch, what you type is sent to Anthropic to be answered, under Anthropic's privacy policy. We keep the conversation so the caps that keep it from being abused can work, along with a one-way hash of your IP address — not the address itself — and the page you opened it on. Don't type anything private into it: it's a sales conversation with a model, not a support desk. Ask and we'll delete a conversation.
• Fonts. The typefaces load from Google Fonts, so your browser requests them from Google's servers under Google's privacy policy.
• Payment. When you pay, you're on a Stripe checkout page. Stripe collects your card and billing details under Stripe's privacy policy; we receive your name, email, and the fact that you paid, never your card number.

The messaging service

Clients change their website or their restaurant's menu by messaging Patch: by SMS to a phone number, or by Telegram or Discord message. Patch is Claude, an AI model made by Anthropic, running under rules Taylor wrote.

What we collect. Your mobile phone number, or your Telegram or Discord user ID and display name; the content of the messages you send; any photos or attachments; and the time they were sent. We also keep a log of each piece of work Patch did in response (what it read, what it changed, the reply it sent), and a record of what was changed on your site or menu. In a Discord channel or Telegram group you've pointed at your project, Patch reads the messages addressed to it.

Why. Solely to do what you asked: make the change and tell you when it's done. Your number or user ID is also how the service knows you're someone authorized to change that site. It is never used for anything else: no marketing, no newsletters, no outreach. Messages from a number or account that isn't authorized aren't acted on.

Who processes it. Making this work involves a few services, each handling its piece under its own privacy terms:

• Twilio delivers SMS and MMS in both directions.
• Telegram and Discord deliver messages on those apps. Our system fetches your messages from them; nothing runs inside their apps.
• Anthropic provides the AI (Claude). The text of your message and any photos you send are sent to Anthropic to be interpreted and acted on, under Anthropic's privacy policy and the terms of the account the work runs on.
• GitHub stores your website's code and files, and Cloudflare serves the site from them (like any host, it may log visitors' IP addresses and browser details under its own privacy terms). Because your website is public, any photo you send to be published becomes public the moment it goes live.
• Pexels supplies stock photos when you ask for one. The search words are sent to Pexels; nothing else is.
• Google (Gemini) generates photos when you ask for a made-up image. The description, and a reference photo if you supplied one, are sent to Google.
• Stripe handles payment, as above.
• Resend receives the mail sent to your business's Patchlamp address and sends the replies you approve from it. The mail, its attachments and the reply pass through Resend under its privacy terms, and each mail is shown to Patch (so to Anthropic) to write the gist and the draft.
• Intuit (QuickBooks) When you connect your company and ask Patch to act, QuickBooks receives the requests and entries needed to carry out your request and returns the results under Intuit's own privacy terms.

What we don't do with it. We don't sell it. We don't share it with anyone for advertising or marketing. We don't build profiles. The only people and services who see your messages are Taylor and the services above, and only to carry out your request.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use-case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

Opting out. Reply STOP to any text to stop receiving SMS from the service number. Reply HELP for help. If you stop texts, the service can no longer reply to you; text START to turn it back on. On Telegram or Discord, block or leave the bot, or ask to be removed. Details on the SMS page.

The usage ledger. Each message Patch handles, and each photo it generates, is one line in a usage ledger: when, which project, who sent it, what it cost, and what you were charged. It does not hold the content of your message. That ledger is the record for billing. Because it's a financial record, it's kept after you leave, for as long as tax and accounting rules require.

How long we keep the rest. Message logs and Patch's work logs are kept for as long as you're a client, plus a short period afterward for troubleshooting. They're stored on equipment Taylor controls. When our agreement ends, or any time you ask, they're deleted. Photos you asked to have published stay on your website or menu, because those are yours.

Calls and texts to our phone line

Plateful LLC operates Patchlamp's demo line, (385) 462-1704. The demo represents Juniper Flats Pool & Spa, a made-up pool company.

When you call or text the line, we keep your phone number, the time of your call, the texts exchanged and any booking request you make. We use this only to answer you and to tell the business owner about your call. We don't use it for marketing.

Twilio carries the texts. Your messages are processed by Patch, which is Claude, an AI model made by Anthropic, working under Taylor Remund's rules, to write the replies.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Reply STOP to stop texts from the line; you receive one confirmation, then no more texts. Text START to turn them back on. Reply HELP for help, or email founder@patchlamp.com. See the SMS page for how calling or texting starts the conversation and how often we text.

Google user data

If you connect your Gmail so that replies go from your own address, Google gives us one permission: to send email as you (Gmail's "send email on your behalf", the gmail.send scope), along with your email address, so we know which account it is. We use it only to send the replies to your customers that you approved, or that Patch wrote while you had auto-reply on. We never read, search or keep your inbox: the permission doesn't allow it. What Google gives us is stored encrypted, used for nothing else, never sold, never used for advertising, and never used to train AI models; no person reads it unless you ask us to look into something, or security or the law requires it. Patchlamp's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can remove it any time in your Google Account (Security → Third-party apps with account access) or from your account page, and replies go from your Patchlamp address again.

QuickBooks data

Connecting gives us accounting access to the QuickBooks Online company you choose. It covers vendors, customers, bills, invoices (including sending them), expenses and bill PDFs. We read your company name once to label the connection. Your company ID and tokens are stored encrypted in our database. Access tokens last an hour; refresh tokens last 100 days and are replaced each refresh.

Anthropic processes your request and QuickBooks' responses to carry it out. Under Anthropic's API terms, inputs and outputs are retained under its data-retention terms and aren't used to train models. Patch enters nothing without your word. It reads every entry back from QuickBooks before saying done.

Apart from connection details, we keep QuickBooks data only in your conversation with Patch. We do not sell it. Message and work logs stay on equipment Taylor controls while you're a client, plus a short troubleshooting period afterward. We delete them whenever you ask. QuickBooks calls add no usage-ledger entry.

Disconnect on your account page, or in QuickBooks: Settings → Apps → Connected apps. We revoke the connection and tell you and Taylor within ten minutes either way.

Facebook and Instagram data

When you connect your Facebook Page, we store its access token encrypted, the Page name, and the username and ID of its linked Instagram account. We keep a one-way hash of your Facebook app-scoped ID, not the ID itself, and copies of the photos and captions we post for your business.

We read only the connected Page's and linked Instagram account's own recent posts, the comments on them (including commenters' names or usernames and their words), and insights: followers, reach, new follows, and each post's reach, likes and comments. We don't read visitor posts, mentions, tags, ratings or direct messages.

We post a photo and caption when you ask. Patch replies to a comment as your business only on your word or a standing instruction you set. It hides spam or abuse, never complaints. We never delete comments or posts.

Patch is our AI operator, Claude, made by Anthropic. Comment text, names or usernames, and the insight numbers are sent to Anthropic to answer you. Under Anthropic's API terms, inputs and outputs are retained under its data-retention terms and aren't used to train models. Laravel Cloud hosts our site and database. Twilio, Telegram and Discord carry Patch's replies to you; a reply can quote a comment. We don't sell this data, use it for advertising or build profiles from it.

The last comment list is kept in your workspace on our relay machine, alongside relay logs, on equipment Taylor controls. These are kept as described in “How long we keep the rest” above.

Disconnect from your account page or by asking Patch, and we delete the stored Page token. Removing the app in Facebook (Settings → Business integrations) tells us automatically, and we delete your Page tokens. Posts already made stay on Facebook and Instagram until you remove them.

A deletion request through Facebook automatically deletes the token, Page name, Instagram username and hashed ID for every Page you connected. Facebook shows a confirmation code; check its status at patchlamp.com/connect/meta/deletion/<code>, replacing <code> with your confirmation code. That automatic deletion does not cover our post copies, comment copies or logs. To delete those too, email founder@patchlamp.com, including the code if you have one, as described under Deleting your data.

The count on a client's website

A website we host for a client counts its own page loads, and that is all it counts. When a page loads, your browser sends patchlamp.com the page's address and the address of the page that linked to it. We keep the page's path, the name of the linking site (not the full address) and the day, and nothing about you: no cookie is read or set, and no IP address, hash or other identifier is kept, so two visits can't be told apart or tied to anyone. To stop a flood of fake counts, a one-way hash of your IP address is held for one minute and then forgotten; our host may log the request like any other, as above. Automated browsers aren't counted. The business sees the totals (page loads by day, which pages, which sites sent people) and nothing else. A preview website we make for a business that hasn't asked for one also counts page loads: we keep the time of each load and the page for 90 days, then delete them, with nothing about you kept in the count. Only we see it, and only to know whether the business we sent the link to opened it.

The chat on a client's website

A client's website can carry a chat that answers visitors' questions about that business. It is an AI (Claude, made by Anthropic, through Anthropic's API) and says so in its first line. It answers only from facts the business gave us and has no access to anything else. What you type is sent to Anthropic to write the answer. The chat sets no cookie: its script and every message to patchlamp.com are sent without cookies, so none is kept, whether or not you use it. We keep each conversation, with a one-way hash of your IP address, for 30 days, to stop abuse, and then delete it; the business doesn't see it. If you leave your name and number, they go to that business by text with your question, so they can get back to you.

The public chat room

When there is a public Telegram or Discord room where anyone can talk to Patch, it's public: anyone in the room sees what you write. Everything Patch handles there is logged, and every few hours the AI condenses those logs into a short memory file so it remembers people and running jokes; that file is kept and may be edited by Taylor. Patch in that room has no access to any client's site or data. Don't share anything private there. To have what you said removed, ask.

Your rights

You can ask at any time what information we hold about you, ask to correct it, or ask to delete it. Email and it's done: no forms. How deleting works is just below. If you're somewhere with specific privacy laws (California, the EU, the UK), those rights apply and we honor them.

Deleting your data

What we may hold, depending on what you've used:

• Your account. What you gave the sign-up form (name, business, email, city, who may text Patch, the plan) and the record of your SMS consent, including the IP address and browser it was given from.
• Your messages. The texts and Telegram or Discord messages you sent Patch, the photos and attachments, and the log of the work Patch did, kept on equipment Taylor controls.
• Your calls and texts to our phone line. Your phone number, the time of your call, the texts exchanged and any booking request you made.
• Your connected accounts. If you connected your Google listing, Facebook Page, X account or Gmail, the access that gave us (stored encrypted), and the photos and captions we posted for you, with what each network answered.
• Your business's email. The mail sent to your Patchlamp address (and mail you forward to it), its attachments, Patch's drafts, and the replies that went out.
• Your website's visitors. If your site has a form or a mailing list through us: what people sent through the form (with a one-way hash of their IP address, not the address), and the email addresses on your list, held at Resend, our email provider. The page-load count (above): paths, linking sites and days, nothing about any visitor.
• This website. A number you left in the "leave your number" box, and a chat bubble conversation. The visit counts are stored against a daily one-way hash that can't be traced back to you, so there is nothing there we could find as yours.

To delete it, email founder@patchlamp.com from the address on your account (or, if you only left a number, called or texted our phone line, or used the chat, tell us the number or roughly when) and say what you want deleted, or all of it. We delete it within 30 days and email you when it's done.

Three things stay: the usage ledger, which is a financial record kept as long as tax rules require (it holds no message content); what Stripe holds about your payments, under Stripe's own policy; and anything already published — your website is yours and we transfer it to you as the terms say, and a post already on Facebook, Instagram or X stays there until you remove it from your own account. We delete our copy.

Children

Nothing here is directed at anyone under 18, and we don't knowingly collect information from anyone under 18.

Changes

If this changes, the new version goes here with a new effective date. If the change affects how clients' messages are handled, those clients are told directly.

Contact

Plateful LLC · founder@patchlamp.com