Privacy Policy
This policy explains what personal information Lamoom collects when you use lamoom.com and the Lamoom service, why it is collected, who it is shared with, how long it is kept, and the rights you have over it. It applies to the marketplace at lamoom.com, the console, and the Lamoom connector you run inside your own AI assistant.
Lamoom operates the service and is the controller of the personal information described here. Contact: kate@lamoom.com.
1. Information Lamoom collects
Account information. You sign in with Google. Lamoom receives your email address, the display name on that account, and an opaque account identifier. No password is created and none is stored.
Run content. Running a loop creates records: the loop and its steps, the workflow, the files a run reads and writes, the reasoning the run logs, and the scores its judges return. Files you upload or ask a run to create are stored with these records.
Billing records. Your wallet balance, top-ups, per-run charges, and subscription status. Payment card details are entered on Stripe's systems and are never received or stored by Lamoom.
Usage analytics. Page views, sessions, referral source, and product events such as starting a run or opening the billing sheet. Events are keyed to the opaque account identifier, never to your email or name, and carry route templates rather than exact paths. The contents of your runs, files, and prompts are not sent to analytics; error classes and path categories are substituted for error text and file paths.
Operational logs. Lamoom's servers record requests, errors, and timings for reliability, billing accuracy, and abuse prevention.
Google Calendar, if you connect it. Lamoom asks Google for two permissions. Free/busy lets your agent offer only the hours you are free when someone books a call with you. Events lets it create the one meeting that person accepted and send the invitation. Lamoom reads no event titles, descriptions or attendees, keeps no copy of your calendar, and stores only the access token Google issues, encrypted in AWS Secrets Manager. Remove it any time from Settings, which revokes the token at Google.
Lamoom's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is never sold, never used for advertising, never used to train AI models, and never read by a person except with your consent, for security, or as the law requires.
2. How the information is used
- To authenticate you and provide the service.
- To run loops, store their files, and return their results.
- To email you a finished run's result and to accept your rating of it.
- To meter usage, charge your wallet, and keep billing records.
- To understand which features are used and improve the product.
- To detect abuse, secure the service, and comply with legal obligations.
Lamoom does not sell personal information, does not share it for cross-context behavioural advertising, and does not use your run content to train models.
3. Legal bases
Where the GDPR or UK GDPR applies, Lamoom relies on: performance of a contract, for account, run, and billing processing; legitimate interests, for analytics, security, and product improvement; legal obligation, for financial records; and consent, where it is separately requested.
4. Published apps and what their publisher can see
A loop you write stays private until you publish it. Publishing makes its steps and its judges visible to anyone who runs it, so they should not contain secrets. Every published app is reviewed by a person before it is listed.
When you run someone else's published app, that run is stored in the publisher's partition and the publisher can read it in full: files, reasoning logs, tool calls, and judgements. This is how a publisher diagnoses and improves an app. You can erase the contents of any run you performed at any time, and the publisher cannot prevent it; what remains is the transaction record — that a run happened, on which version, when, how it ended, and how it was rated.
5. Service providers
Lamoom shares personal information only with the providers required to operate the service:
- Amazon Web Services — hosting, databases, file storage, and outbound email, in the United States.
- Google — sign-in. Google receives the fact that you authenticated to Lamoom.
- Stripe — payment processing. Stripe receives your card details directly and processes them as an independent controller under its own privacy policy.
- Amplitude — product analytics, limited to the categories described in section 1.
Information may also be disclosed where required by law, or in connection with a merger, acquisition, or sale of assets, in which case you will be notified before your information becomes subject to a different policy.
6. Your AI assistant
A run executes inside the AI assistant you already use, such as Claude or ChatGPT. The provider of that assistant sees the conversation on the same terms as any other conversation you have with it, under its own privacy policy. Lamoom has no control over and takes no responsibility for that provider's processing.
7. International transfers
Lamoom's infrastructure is located in the United States. If you use the service from outside the United States, your information is transferred there. Where the GDPR or UK GDPR applies, such transfers rely on the European Commission's Standard Contractual Clauses as implemented by the providers named above.
8. Retention
- Run files are deleted 30 days after the run, by default.
- Library files are kept until you delete them, unless you set them to expire after 7 or 30 days. The expiry date does not move when a file is rewritten.
- Deleted files go to a trash that empties itself after 30 days.
- Billing records are retained as long as required for financial and tax purposes.
- Account information is kept until you close the account.
9. Security
Traffic is encrypted in transit and data is encrypted at rest. Sign-in uses the OAuth authorization-code flow with PKCE and no long-lived password. Records are partitioned per account, and credentials for third-party services are held in a managed secrets store. No system is perfectly secure, and Lamoom cannot guarantee absolute security.
10. Your rights
Subject to your jurisdiction, you may request access to the personal information held about you, correction of inaccurate information, deletion of your account and its records, a portable copy of your data, restriction of or objection to certain processing, and withdrawal of consent where processing relies on it. California residents have the rights to know, delete, correct, and opt out of sale or sharing; Lamoom does not sell or share personal information, so there is nothing to opt out of. Exercising any of these rights will not result in discriminatory treatment.
To make a request, write to kate@lamoom.com. Requests are answered within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.
11. Cookies and local storage
Lamoom stores your session tokens and the temporary values used to complete sign-in in your browser's local storage. These are strictly necessary for the service to work and are cleared when you sign out. The analytics provider sets a first-party identifier used to count sessions. Lamoom sets no advertising cookies and permits no third-party tracking cookies.
12. Text messages and your phone number
You may add a phone number to your profile so that Lamoom can confirm it is yours. The number is stored on your profile and is used for one purpose: sending you a one-time verification code when you ask for one.
Your phone number, and your consent to receive that code, are never sold, rented, or shared with any third party for marketing purposes, and no third party is given the number for its own use. The number is passed only to the messaging provider that delivers the code on Lamoom's behalf, and to nobody else.
No marketing, promotional, or recurring messages are ever sent to the number. Clearing the number from your profile deletes it and stops all messages. You may also reply STOP to any message to opt out, or HELP for help. Message and data rates may apply.
13. Children
The service is not directed to children under 16, and Lamoom does not knowingly collect their personal information. If you believe a child has provided information, write to the address below and it will be deleted.
14. Changes to this policy
This policy may be updated as the service changes. The effective date at the top of the page records the current version, and material changes will be announced by email to registered users before they take effect.
15. Contact
Questions, requests, and complaints: kate@lamoom.com.