Privacy Policy

Information We Collect

We may collect:

• Name
• Email address
• Mobile phone number
• Company name
• Communication preferences
• Information you voluntarily provide when contacting us

We may also collect technical information including:

• IP address
• Browser type
• Device information
• Website analytics
• Crash reports and diagnostic data
• Cookies and similar technologies

How We Use Information

We use collected information to:

• Provide our marketing services
• Send requested notifications
• Deliver SMS notifications
• Respond to support requests
• Improve our services
• Maintain account security
• Comply with legal obligations

Calendar Integration (Google, Microsoft, and Apple)

If you choose to connect a Google, Microsoft, or Apple calendar in your account settings, we access and store a limited set of calendar data solely to power that feature.

What we access: the names of your calendars, so you can choose which ones to show, and for events on the calendars you choose to connect: the event title, start time, end time, and whether it's an all-day event. We do not access event descriptions, attendee lists, locations, or attachments.

How we use it: to display your calendar events alongside your LMNTS Studio posts and tasks, and to mirror your scheduled posts and tasks into a calendar we create in your account (named “lmnts”) so you can see your work schedule in your own calendar app. A quick edit you make to an imported event from within LMNTS Studio (title, date, time) is written back to the real event in your Google, Microsoft, or Apple account.

What we share: calendar data is never sold, shared with advertisers, or used to develop, improve, or train AI/ML models. It's visible only to you, and, if you explicitly grant a teammate access via the “Share my calendar” feature, to that specific teammate. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. LMNTS Studio's AI features do not have access to calendar data at all, so no calendar data from Google, Microsoft, or Apple is ever provided to or used by any AI or machine learning model.

How we protect it: OAuth access tokens, refresh tokens, and (for Apple) app-specific passwords are encrypted at rest before storage. Calendar event data is protected by database-level access rules that restrict it to your own account, or a teammate you've explicitly granted access to.

Retention and deletion: disconnecting a calendar in your account settings immediately and permanently deletes the stored connection, its access tokens, and every cached event from that calendar. We don't retain any of it after you disconnect. You can disconnect at any time.

Social Media Integrations (Facebook, Instagram, and Threads)

What we access: when an authorized user connects a client's Facebook Page, Instagram professional account, Threads profile, or Meta ad account to LMNTS Studio, we access that connected account's posts, comments, performance insights, and (for ad accounts) campaign and ad performance data through Meta's APIs. We use this data solely to provide the features you see in the product: publishing approved content, showing performance analytics, moderating comments, and managing promotions for the connected account. We only access accounts you explicitly connect, and every write action (publishing, replying, boosting, deleting) is initiated by an authorized user in the app.

How we protect it: OAuth access tokens for connected social accounts are encrypted at rest before storage. Synced posts, comments, and performance data are protected by database-level access rules that restrict them to the agency and client workspace the connection belongs to.

Retention and deletion: disconnecting Facebook, Instagram, or Threads in the client's integration settings immediately and permanently deletes the stored connection and its access tokens, and removes the synced data for that connection. Deleting your LMNTS Studio account removes all of your data, including every social connection and its synced data. To request deletion of your data at any time, disconnect the platform in the app or contact us at the address below and we will complete the deletion promptly.

Connected AI Assistants (ChatGPT, Claude, and Gemini)

If you choose to connect an AI assistant to LMNTS Studio in your account settings, that assistant can act in LMNTS Studio on your behalf. Connecting is an OAuth authorization: you sign in to LMNTS Studio, see which assistant is asking, and choose what it may do. Nothing is connected until you approve.

What the assistant can access: only the workspaces, clients, posts, tasks, and media you can already see in LMNTS Studio, through a fixed set of actions: listing clients and connected platforms, reading posts and tasks, creating and editing drafts, uploading and attaching media, and asking Sprk (the LMNTS Studio assistant) for help. By default an assistant can create and edit drafts only. Approving and scheduling posts is a separate permission you grant, or withhold, on the approval screen. An assistant can never see another user's data or act beyond your own permissions.

What we share: when your assistant asks LMNTS Studio for something, the result (for example a list of your clients, a post's caption, or a temporary link to a media file) is sent to the assistant you connected, and the provider of that assistant (OpenAI, Anthropic, or Google) handles it under its own privacy policy. We do not send anything to an assistant you have not connected, we do not sell this data, and we do not use it to train AI models.

How we protect it: each connection is tied to your individual account and to the specific assistant you approved. Access tokens are issued by our authentication provider, are short-lived, and are checked on every request. Database-level access rules apply to every action an assistant takes, exactly as they do when you use the app yourself, and requests are rate limited.

Retention and deletion: revoking an assistant in your account settings, or removing the connection from the assistant's side, ends its access immediately and invalidates its tokens. We keep a record that the connection existed and when it was revoked, with no tokens, so we can show you your connection history. Drafts, tasks, and media an assistant created remain in your workspace like anything you created yourself, and you can delete them in the app at any time. Deleting your LMNTS Studio account removes every connection record along with the rest of your data.

SMS Communications

If you choose to receive SMS notifications from LMNTS Studio, we will use your phone number solely for the purposes you agreed to.

Message frequency varies depending on service activity.

Message and data rates may apply.

You may opt out at any time by replying: STOP

You may receive assistance by replying: HELP

Crash and Error Reporting

Our website and mobile app automatically send crash reports and performance diagnostics to Sentry, an error monitoring service, so that we can find and fix problems.

These reports contain technical information such as the error itself, the app or browser version, the device model and operating system, and the screen on which the problem occurred. They are not linked to your name or email address, and they are never used for advertising or shared with data brokers.

We deliberately keep sensitive content out of these reports. We do not send screenshots of your screen, and authentication tokens, session cookies and API keys are removed before a report leaves your device or browser.

Website Analytics

Our public website pages use Google Analytics to understand which pages people visit and how they found us. Until you accept analytics cookies in the banner, Google Analytics sets no cookies and receives only anonymous, cookieless signals. You can change your choice at any time with "Cookie preferences" at the bottom of the page.

Google Analytics does not run inside the lmnts app you use after signing in, so it does not see your clients, content or account activity.

Information Sharing

We do not sell personal information.

We may share information with trusted service providers necessary to operate our business, including:

• Twilio
• Make.com
• Asana
• Sentry (crash and error reporting)
• Google Cloud services
• Payment processors (when applicable)

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information.

Your Rights

You may request:

• Access to your information
• Correction of inaccurate information
• Deletion of your information where permitted by law

Contact

LMNTS Studio
Email: privacy@lmnts.studio