Privacy policy

1. Information we collect

We collect the details you give us, such as your name, work email and company when you create an account, contact sales or subscribe to the log, and technical data such as IP address, browser and pages viewed.

Information you provide

• Account details: name, work email, company, role and password.
• Billing details: billing contact, address and tax ID. Card numbers are handled by our payment processor and never stored by Lattis.
• Messages you send to sales or support, and answers to forms such as book a demo.

Information collected automatically

• Device and log data: IP address, browser type, operating system, referring URL and timestamps.
• Usage data: pages viewed, features used, API request counts, latency and error rates.

Customer content

Prompts, outputs, files and traces you send through the platform are customer content. We process customer content only to provide the service you ask for, as described in our data processing agreement.

2. How we use information

To run and secure the platform, answer requests, send product updates you opted into, and improve Lattis. We never use your prompts, outputs or traces to train models.

• Provide, maintain and secure the website, console and API.
• Process payments and send receipts, invoices and service notices.
• Answer sales and support requests.
• Detect abuse, fraud and security incidents.
• Understand aggregate usage so we can improve performance and documentation.

3. Cookies and analytics

We use essential cookies to keep you signed in and privacy-friendly analytics to understand traffic. You can decline non-essential cookies at any time.

Essential cookies cannot be switched off because the console does not work without them. Analytics cookies are set only after you accept them, and you can change your choice from the cookie settings link in the footer.

4. Sharing

We share data only with processors that help us run Lattis (hosting, email, payments) under data processing agreements, or when the law requires it.

We do not sell personal information and we do not share it for cross-context behavioural advertising. If Lattis is involved in a merger or acquisition, information may transfer to the new owner under the same commitments as this policy.

5. Subprocessors

These are the categories of subprocessors that may process customer data on our behalf. Each one is bound by a written agreement with confidentiality and security terms at least as protective as ours.

• Cloud hosting · compute, storage and backups · United States and European Union.
• Content delivery and DDoS protection · edge caching and traffic filtering · global.
• Model providers · inference for the models you route to · region you select.
• Payments · billing and invoicing · United States.
• Transactional email · account and service emails · United States.
• Support and monitoring · ticketing, logging and error tracking · United States and European Union.

We give at least 30 days notice before adding a subprocessor. To receive notices, email privacy@lattis.dev.

6. International transfers

Lattis, Inc. is based in the United States and runs infrastructure in several regions. When personal data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on the Standard Contractual Clauses or another lawful transfer mechanism. Enterprise customers can pin data to a single region.

7. Data retention

Account data is kept while your account is active. Traces are kept for 30 days by default and can be set down to zero.

• Account and billing records: for the life of the account, then as long as tax law requires.
• Traces and request logs: 30 days by default, configurable from zero to 365 days.
• Support conversations: up to 24 months after the request is closed.

8. Your rights

You can access, correct, export or delete your data. Email privacy@lattis.dev and we reply within 30 days.

Depending on where you live, you may also object to or restrict some processing, withdraw consent, and complain to your local data protection authority. We will not treat you differently for using these rights.

9. Security

Data is encrypted in transit and at rest, access is limited by role, and we are audited for SOC 2 Type II.

Agent runs execute in isolated sandboxes, staff access to production is logged and reviewed, and we notify affected customers without undue delay if a breach affects their data. Read more on our security page.

10. Contact

Lattis, Inc., privacy@lattis.dev. This page is demo content for the Lattis Webflow template and is not legal advice.