Safeguards
We use industry-standard safeguards to protect information, including encryption in transit and at rest, secure cloud infrastructure, access controls and monitoring, and abuse prevention.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. The Privacy Policy is the full account of how we collect, use, and protect information.
Access controls
Human access to user data is limited. It happens with your explicit consent, for authorized personnel with a legitimate operational need, when necessary for a security or abuse investigation, or when the law requires it. Any permitted access is limited, logged, and audited.
Voice and screen
Audio is streamed in real time to generate text or to carry out something you asked for. Screenshots are captured only when you turn that on, and only for the action you requested.
Stored audio and screenshots may be used to run Lemon and, unless you opt out, to improve the product, including training Lemon’s own models. They are not used for advertising, not sold, and not used to market you to other companies. Diagnostic copies kept for a support issue are used only to resolve that issue.
Integrations
Optional connections to services such as Gmail, Google Calendar, Drive, and Contacts use OAuth. Access is granted only with your consent, only for the scopes you approve, and you can revoke it at any time.
That source data is processed briefly to do what you asked. It is not stored as a copy of your mailbox, calendar, files, or contacts. It is not used for advertising, and it is not used to train AI models. Google user data follows the Google API Services User Data Policy, including the Limited Use requirements.
Service providers
We share information with vendors who process it for us, such as cloud hosting, our authentication provider, and the AI providers that power Lemon’s features. They are contractually limited to that work. Content sent to a third-party AI provider is used to produce the output you asked for. It is not used to train that provider’s models, and that provider does not keep it.
We do not sell user data, and we do not use it for advertising.
Retention
Voice recordings, screenshots, assistant content, and diagnostic logs are kept until you opt out of data retention or ask us to delete your account. Email support@heylemon.ai for either. After a verified request, the corresponding data is deleted. Third-party integration source data is not retained, because it is not stored.
Report a vulnerability
If you believe you have found a security issue in Lemon, email security@heylemon.ai. Include enough detail for us to reproduce it, and please give us a reasonable chance to investigate before you share it publicly.
For privacy questions, write to support@heylemon.ai.