Privacy Policy

1. Information we collect

Information you provide. When you sign up and onboard, we collect your email address, a password (stored only as a secure hash by our authentication provider), and the brand and product information you enter, including your website URL, brand name, colors, fonts, product details, and the reference images and prompts you upload.

Generated content. We store the ads you generate and related metadata (such as the prompt used, the quality tier, timestamps, and cost and latency telemetry) to operate the library, enforce usage limits, and improve reliability.

Payment information. Subscription payments are processed by Stripe. We receive limited billing details (such as your subscription status, plan, and customer and subscription identifiers) but we do not collect or store your full payment card number.

Usage and device data. We and our infrastructure providers automatically collect basic technical data such as log information, IP address, and error reports to keep the Service secure and working.

2. How we use your information

We use your information to provide and operate the Service (including generating ads from your inputs), to analyze a website you provide in order to build your brand profile, to process payments and manage subscriptions, to enforce plan limits, to provide support, to maintain security and prevent abuse, to improve the Service, and to comply with legal obligations.

3. AI processing and sub-processors

To generate ads and analyze brands, we send relevant inputs (such as your prompts, brand context, and reference or website images) to third-party AI providers, currently OpenAI and Google. We also rely on Stripe for payments, Supabase for authentication, database, and file storage, and Vercel for hosting. These providers process data on our behalf under their own terms and security commitments. We do not permit them to use Your Content to train their models where an opt-out is available to us.

4. How we share information

We do not sell your personal information. We share information only with the service providers described above to operate the Service, when required by law or valid legal process, to protect the rights, safety, and property of Lothar Labs or others, and in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information consistent with this Policy.

5. Data retention and deletion

We retain your account and content data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by emailing info@lotharai.com. We will delete or anonymize your data within a reasonable period, except where we must retain it to comply with legal, accounting, or security obligations.

6. Security

We use industry-standard measures to protect your information, including encryption in transit, row-level access controls that isolate each customer's data, and access restricted to authorized systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising these rights; we do not sell personal information. To exercise any of these rights, email info@lotharai.com and we will respond as required by applicable law.

8. Cookies

We use cookies and similar technologies that are necessary to keep you signed in and to operate the Service. We do not use them to sell your data. You can control cookies through your browser settings, though disabling necessary cookies may prevent the Service from working.

9. International users

The Service is operated from the United States and your information is processed there and in the regions used by our providers. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.

12. Contact

Lothar Labs LLC, Miami, Florida, United States. For privacy questions or requests, contact info@lotharai.com.