Privacy, in plain language.

Your files and videos

Web generation. When you use Studio, the files you upload and the videos we produce are stored in private LemmaReel storage that only your account can access. Your brief and the extracted text of your files are sent to our model provider (currently DeepSeek) to plan the storyboard; audio and video are rendered on cloud servers we run (currently on Modal). We do not use your material to train models and do not share it with anyone else. Uploaded files and finished videos are kept while your account is open, so you can reuse and download them. You can delete uploaded files at any time from Files; deleting your account removes your uploads and videos from storage. To remove a single video sooner, contact support.

The Desktop CLI. The CLI renders on your computer and does not upload your source documents or generated videos to our website or storage. Your chosen agent may send content to its model provider under that provider’s own terms and settings.

Your account and purchase

The website stores your sign-in identity, verified email, display name, sessions, purchase status, and a hash of your download license. Google or GitHub handles authentication, or, if you sign up with an email address, we store your password as a one-way hash and send a verification link and any password-reset links to that address. Waffo processes checkout; this website does not store payment card details.

Downloads and cookies

Session cookies keep you signed in. Theme and analytics preferences are stored in your browser. Your account shows purchase and release information. Product downloads require an activated device credential. Version 0.1.0a3 and later contact our authorization service before each preview, render, and export.

Website analytics

Google Analytics measures visits to our public website pages and Microsoft Clarity records interactions with those pages using Balanced masking and additional protection for sensitive elements to help us improve the website. These services can use analytics cookies and receive technical browser and device information. We do not send your account identity, email, license or uploaded files to them, call user-identification APIs, or enable advertising consent.

Login, account, settings, checkout and API pages are excluded from page tracking and recording. If analytics is allowed, our server also sends anonymous registration, checkout and confirmed purchase events to Google Analytics, including an anonymous browser identifier, transaction identifier, product, currency and amount. This does not load Clarity on private pages. Rejecting analytics prevents these events from being requested by that browser. Events are measured when you return to the website; a redirect alone is never counted as a purchase. Public pages can include ordinary campaign parameters and navigation anchors so that analytics can measure how visitors find and use the website. Google Analytics uses automatic page views and enhanced measurement, including supported interactions such as scrolling, outbound links and downloads. URLs containing explicit credentials, email, license or authentication parameters are excluded. We preserve normal referral information; a referrer containing sensitive parameters or a private site path is withheld from Google and prevents Clarity loading on that visit.

Clarity uses Balanced masking, its built-in input protection, and targeted masks for account identity, license and profile elements. Public page text is not masked site-wide. Masking does not remove all technical device information. We do not override your existing advertising consent choices when enabling analytics.

Analytics is on by default on public pages. You can turn it off at any time with “Cookie preferences” in the footer: choosing “Reject analytics” stops collection, reloads the page and keeps these scripts unloaded on later visits in that browser. It does not delete information already sent to the providers. If your browser cannot save this choice, analytics stays off. Essential sign-in cookies are separate from this choice. See Google’s privacy policy and Microsoft’s privacy statement for how they handle information.

Support chat

The chat button in the bottom corner opens our help panel. Its search and links stay on this website. Our live chat is provided by Crisp and loads only when you open Messages: Crisp then stores a cookie in your browser to keep your conversation, and receives your messages, any files you attach, normal browser and connection information, and the page you are on. If you are signed in, we also pass your account email, display name, internal account ID and whether you own a Mac CLI license, so we can help without asking again. We keep conversations so we can follow up; email us to have one deleted. See Crisp’s privacy policy.

Device authorization

Version 0.1.0a3 and later send a product-specific hash of a machine identifier when activating and when checking authorization before previews, renders, and exports. The raw hardware identifier stays on your computer. The hash is a persistent identifier linked to your account, not anonymous data. We store the binding and activation date to enforce one active computer per purchase; a private device credential is saved locally.

Authorization requests do not send source files, prompts, storyboards, or videos to LemmaReel. The service receives normal connection information such as IP address and client version. Device bindings are removed on account deletion or support transfer; administrative transfer records retain the internal account identifier after deletion for support and abuse investigation.

Local preview

The preview creates temporary example accounts and simulated purchases in a local database. No real payment or Google/GitHub account is used by the preview sign-in button. Preview accounts cannot access a live checkout.

Voice recordings

If you record your voice, we store the recording in private storage. Each time we narrate a video in your voice, our render servers send the recording and that video’s narration text, through an AI gateway service, to our voice provider, which generates the narration from them; we do not ask either of them to create or keep a voice model. They handle these requests under their own terms and privacy policies, which may let the provider use them to improve its service. We use your recording only to narrate your videos. You can delete a voice at any time in Studio or Settings; we then delete the recording. Deleting your account deletes all of your voices.

Deletion and retention

Account deletion removes your profile, sessions, linked sign-in accounts, download license, and device binding. New authorization checks will fail after deletion. Local files on your computer are not affected. Order and payment-event records may be retained without a direct account link for accounting, dispute handling, and legal obligations. A one-way hash of your email address is also kept, without a link to any account, so the free sign-up credits are given only once per address, even after an account is deleted. Provider payloads are not stored by the application; event hashes are used to detect replay conflicts.

Service providers and requests

Cloudflare provides the website, account database, and private release storage. Our transactional email provider delivers a one-time account welcome email and, for email sign-ups, the verification and password-reset emails you request, to your registered email address. A voice provider, reached through an AI gateway service, generates narration from the recording of any voice you record, as described under Voice recordings. This is not a marketing subscription. Sentry receives reports of errors that happen on the website or our server, so we can find and fix bugs: the error, the page path, and the browser and device type. These reports do not include your account identity, email, cookies, form contents or URL parameters, and Sentry is set not to store IP addresses. Analytics and error reports are disabled in local preview and test environments.

Privacy contact

For privacy questions or requests about your personal information, email support@lemmareel.com. Do not include passwords, license keys, or private source files.