Privacy Policy
Last updated: September 2026
This policy describes how we handle personal information when you use Cloud Lattuce at lattuce.app — including when you sign in or subscribe.
Scope
Cloud Lattuce includes Writer (papers, sources, Polish, and missions), Study (courses and exam prep), Learner (reading and vocabulary), Contribute (community translation micro-tasks), Notes (vault, tasks, and calendar), and Library (a shared catalog across papers, sources, and notes).
For privacy and data-protection requests, contact [email protected] or our contact page. We will provide the name and address of the data controller in our reply when required by law.
Card numbers and billing addresses for tax are collected by our payment processor, not stored on our application servers.
Information we collect
Depending on how you use Cloud Lattuce, we may collect:
- Account data — email, display name, household membership, and sign-in identifiers from your chosen sign-in method.
- Content you store — papers, sections, sources, notes, learner imports, tasks, and calendar events needed to provide the features you use.
- Billing information — subscription status, plan, and billing identifiers needed to grant plan access (not full payment card numbers).
- Usage & technical data — information required to operate and secure the service, including device and browser type, IP address, and session timestamps.
- Optional campaign measurement — if you consent to analytics, a random identifier, campaign and post identifiers, social channel, landing page, and funnel event (visit, demo use, sign-up start, or completed new account). This record does not include your email, account ID, raw IP address, or full browsing URL.
- Support communications — messages you send to [email protected] or through our contact page.
How we use information
We use personal information to:
- Provide, maintain, and secure Cloud Lattuce.
- Authenticate you and apply your plan features.
- Process subscriptions and respond to billing inquiries.
- Operate AI-assisted features included in your plan (see below).
- Send service-related notices (for example security, billing, or material policy changes).
- Diagnose abuse, fraud, and technical issues.
- Measure whether our organic social posts lead to demo use and new accounts, only with your consent.
We do not sell your personal information. We do not use your stored papers or notes for third-party advertising.
AI features
When your plan includes AI features, relevant text (for example selected passages, outlines, or prompts you submit) may be sent to third-party AI providers to generate responses. Do not submit sensitive personal information you do not want processed for that purpose.
Grammar and writing assistance may process note text in your browser or through our service to show suggestions.
Retention
We retain account and content data while your account is active and for a reasonable period afterward to comply with law, resolve disputes, and maintain backups. Billing records may be retained longer where tax or accounting rules require.
Consented organic-social attribution and funnel events are retained for no more than 180 days. Withdrawing analytics consent removes the attribution cookie and requests deletion of events linked to its random identifier.
You may delete your account and associated personal data from Account settings (Data & account). For edge cases, you may also request deletion by emailing [email protected]. Some data may persist in backups for a limited time or where we must retain it by law (including open-access bibliography metadata in the shared catalog and billing records).
Your choices & rights
Depending on your location (including if you are in the EU/EEA or UK), you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to withdraw consent where processing is consent-based.
To exercise these rights, contact [email protected]. We may need to verify your identity. You may also lodge a complaint with your local data protection authority.
Marketing emails are not a core part of the product; you can opt out of non-essential messages when we send them.
International transfers
We and our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
Children
Cloud Lattuce is not directed at children under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has provided data and we will take appropriate steps to delete it.
Security
We use administrative, technical, and organizational measures appropriate to the risk (encryption in transit, access controls, monitoring). No method of transmission or storage is completely secure.
Changes
We may update this policy. We will post the revised version with a new “Last updated” date and provide additional notice for material changes when appropriate.
Contact
Privacy requests and questions: [email protected] or our contact page.