Reference
Privacy Policy
What information Lines handles, why it is used, and the choices available to you.
Last updated: October 6, 2026
This Privacy Policy explains how Nearform Physical AI Inc. (“Nearform,” “we,” “us,” or “our”) handles personal information when you use Lines, visit a Lines website, create a Lines account, or contact us.
The short version
Lines project documents are local files by default. Ordinary editing does not upload their contents to a Lines account.
We collect the information needed to create and protect an online account, deliver verification email, and respond to you.
Personal information is not sold under existing paid, complimentary, or legacy free-access consent. Optional Lines Sponsored requires separate explicit consent before Nearform may share or sell contact details, ad engagement, and basic device/app data. Documents, recordings, and transcripts remain excluded.
You can contact us to ask about, correct, or delete personal information associated with your account, subject to applicable law and necessary verification.
Information handled by the desktop app
Project documents
You choose where Lines project files are saved on your Mac. A file may include product pages, Nodes, relationships, Views, bindings, drawings, images, guides, and Markdown content that you add.
Lines does not upload the working document to a Lines account as part of ordinary editing. Your file may still be copied by services you choose or by operating-system features you enable, such as cloud-synced folders, device backups, source control, or file-sharing tools. Those services are governed by their own terms and privacy practices.
Local application data
To provide features such as Recents and previews, Lines stores local application-support data on your Mac. This may include file paths, display names, document types, created or modified dates, last-opened dates, local identifiers, and generated thumbnails. Lines may also create local recovery data to help protect unsaved work.
Removing a file from Recents removes it from the recent-file list; it does not delete the project file from the location where you saved it.
Exports
When you create a Ship export, Lines writes a separate package to the location shown by the app. You decide whether and how that package is shared. Review an export before sending it to another person, service, or agent.
Information handled by the account service
Account information
When you create an account, we collect your name and email address. We store a bcrypt hash of your password, not the plain-text password. We also keep account timestamps such as when the account was created, when the email address was verified, and the most recent successful login.
Verification and session information
We process single-use email-verification tokens, which are stored as hashes and expire after 30 minutes. When you sign in, we use an opaque session cookie. The server stores a hash of the session token together with creation, expiry, and last-seen timestamps, whether “remember me” was selected, a hashed network identifier, and the browser user-agent string.
A standard session expires after 24 hours. A remembered session expires after 30 days. Signing out revokes the current session.
Security and abuse-prevention information
We process network and request information to validate origins, rate-limit authentication attempts, detect suspicious login activity, and protect the service. Security records may include an event type, timestamp, account reference, hashed email or other identifier, hashed IP address, user-agent information, cooldown state, and request outcome.
Cloudflare Turnstile may process device, browser, network, and interaction signals to determine whether a request appears legitimate.
Communications
If you contact us, we receive the information you provide, such as your name, email address, message, and attachments. Please do not send confidential project content unless it is necessary for us to respond.
Cookies and local browser storage
The account service uses a strictly necessary secure session cookie to keep you signed in. The site also uses browser local storage to remember your light or dark theme preference. Cloudflare Turnstile may use browser storage or cookies as part of its abuse-prevention service.
We do not use Lines account information for targeted advertising under existing paid, complimentary, or legacy free-access consent. This exclusion does not apply to users who separately and explicitly consent to optional Lines Sponsored advertising and its disclosed data uses. Necessary session cookies and theme storage do not themselves constitute Sponsored consent.
Why we use information
We use personal information to:
Create, verify, authenticate, and support your account.
Deliver transactional messages such as verification email.
Maintain sessions and protect restricted pages.
Prevent fraud, abuse, and unauthorized access.
Diagnose problems and improve reliability.
Respond to support, privacy, security, and business inquiries.
Comply with legal obligations and enforce applicable agreements.
Where required, our legal bases may include performing a contract with you, pursuing legitimate interests such as service security, complying with law, and consent for activities where consent is appropriate.
How information is shared
We share personal information as needed to operate the service, follow your instructions, protect rights and safety, complete a business transaction, or comply with law. Optional Lines Sponsored sharing or sale requires the separate explicit consent described below.
Current account-service providers include:
Cloudflare for website delivery, edge security, Turnstile, serverless application execution, and account database infrastructure. See Cloudflare’s Privacy Policy — https://www.cloudflare.com/privacypolicy/.
Resend for transactional account email. See Resend’s Privacy Policy — https://resend.com/legal/privacy-policy.
These providers may process information in countries other than your own under their applicable terms and safeguards. Personal information is not sold under existing paid, complimentary, or legacy free-access consent. Optional Lines Sponsored requires separate explicit consent before Nearform may share or sell contact details, ad engagement, and basic device/app data, including platform and app version. Specific buyers have not been selected, and no external transfer for Sponsored sharing or sale is configured. Documents, recordings, and transcripts remain excluded. Existing consent and grandfathered customer terms are not expanded by this optional plan.
Review current Sponsored disclosures and withdraw consent at accounts.nearform.co/privacy
Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including account operation, security, dispute resolution, and legal compliance.
Account records generally remain while the account is active. Verification tokens and sessions have technical expiry times, and expired session, rate-limit, and cooldown records are eligible for cleanup. Security and audit records may be retained longer when reasonably necessary to investigate abuse or protect the service. Support communications are retained as needed to resolve the request and maintain appropriate business records.
Local project documents and application-support files remain on your device until you move or delete them, remove the application data, or your operating system or backup service does so.
Your choices and rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to object to or restrict certain processing; or to withdraw consent where processing relies on consent.
To make a request, email hello@nearform.co — mailto:hello@nearform.co?subject=Privacy%20request with “Privacy request” in the subject line. We may need to verify your identity before acting on a request. Some information may be retained where required by law or where an exception applies.
You can control local Lines files directly through Finder and the storage or backup services you selected. A privacy request sent to us cannot remove copies held only on your devices or in third-party services that you control.
Security
We use technical and organizational safeguards designed to protect personal information. These include password hashing, hashed session and verification tokens, secure cookie settings, rate limiting, abuse detection, encrypted runtime secrets, and web security headers. No transmission or storage system is completely secure. See our Security page — /security for more detail and reporting instructions.
Children
Lines and its account service are not directed to children. If you believe a child has provided personal information without appropriate authorization, contact us so we can review and take appropriate action.
Changes to this policy
We may update this Privacy Policy as Lines and its services evolve. We will post the revised policy and change the “Last updated” date. If a change is material, we may provide additional notice where appropriate or required.
Contact us
Questions or requests about this policy can be sent to hello@nearform.co — mailto:hello@nearform.co?subject=Privacy%20question.
Nearform Physical AI Inc.