Legal
The agreements and policies that govern Substratal Apps, its API, and the Substratal Hub apps. Each has a stable URL below, suitable for app stores, sign-in providers, and partner platforms that ask for one.
Substratal Apps is operated by Composite Code LLC, a Washington limited liability company (“Composite Code”, “we”, “us”). Each document shows its own effective date; they were first published on October 23, 2026, and the Privacy Policy, Terms of Service, Data Processing Addendum, Account and Data Deletion page and Sub-processors list were updated on October 27, 2026.
Documents
| Document | URL | Who it’s for |
|---|---|---|
| Terms of Service | https://docs.substratalapps.com/legal/terms/ |
Everyone who uses Substratal’s apps, the Hub, or the API |
| Privacy Policy | https://docs.substratalapps.com/legal/privacy/ |
Everyone |
| End User License Agreement | https://docs.substratalapps.com/legal/eula/ |
People who install a Substratal Hub app (web, macOS, Windows, Linux, iOS, Android) |
| Developer and API Terms | https://docs.substratalapps.com/legal/developer-terms/ |
Developers who register an Application or use an API Key |
| Acceptable Use Policy | https://docs.substratalapps.com/legal/acceptable-use/ |
Everyone |
| Data Processing Addendum | https://docs.substratalapps.com/legal/dpa/ |
Organizations and developers who need a GDPR or CCPA processor agreement |
| Sub-processors | https://docs.substratalapps.com/legal/subprocessors/ |
Anyone reviewing where personal data goes |
| Cookie Notice | https://docs.substratalapps.com/legal/cookies/ |
Visitors to the web Hub and this site |
| Account and Data Deletion | https://docs.substratalapps.com/legal/data-deletion/ |
Anyone who wants their account or data deleted |
| Security and Vulnerability Disclosure | https://docs.substratalapps.com/legal/security/ |
Security researchers |
| Copyright, Licenses and Trademarks | https://docs.substratalapps.com/legal/copyright/ |
Rights holders, and anyone reusing this site or code |
For platform reviewers
Fields that sign-in providers, app stores, and payment providers commonly ask for:
| Asked for as | Use |
|---|---|
| Privacy policy URL | Privacy Policy |
| Terms of service / terms of use / user agreement URL | Terms of Service |
| End user license agreement (EULA) | End User License Agreement |
| Data deletion instructions URL, or a “delete account” link | Account and Data Deletion |
| Developer or API terms | Developer and API Terms |
| Support or contact email | legal@substratalapps.com (privacy requests: privacy@substratalapps.com) |
| Security contact | security@substratalapps.com |
| Business name and jurisdiction | Composite Code LLC, Washington State, USA |
| Website / app homepage | https://docs.substratalapps.com/ |
Contact
| For | Write to |
|---|---|
| Privacy and data-protection requests (access, deletion, correction, objections) | privacy@substratalapps.com |
| Legal notices, contracts, the Data Processing Addendum, copyright claims | legal@substratalapps.com |
| Security vulnerabilities | security@substratalapps.com |
Changes
When a document changes materially, we update its effective date, announce it in the Changelog, and, for the Terms of Service and Privacy Policy, notify account holders by email or in the Hub at least 30 days before the change takes effect, unless the change is required sooner by law. Earlier versions stay available in this site’s git history.