Privacy Policy

Lobotix ("we," "us," "our") is an AI-powered marketing automation platform for businesses. This Privacy Policy explains how we collect, use, and protect your information when you use our Service at lobotix.com.

Account information. When you sign up, we collect your email address, business name, and payment information (processed by Stripe — we never see or store full card numbers).

API credentials. To connect integrations (Gmail, Gingr, Twilio, etc.), you provide API keys which we store encrypted. These are used solely to operate the Service on your behalf.

Customer data. Through your integrations, we access your customers' names, email addresses, and relevant business data (e.g., appointment history) to generate and send campaigns. This data is fetched at send time and is not permanently stored by Lobotix.

Usage data. We collect logs of campaign runs, emails sent, and feature usage to operate the platform and calculate billing.

Support conversations. If you use the AI support chat, messages are sent to Anthropic's API and are subject to Anthropic's privacy policy. We do not store chat history.

Cookies and analytics. We use essential cookies for authentication. We do not use third-party advertising trackers.

Lobotix's use and transfer to any other app of information received from Google APIs — including raw or derived user data received from Google Workspace APIs — will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Gmail, we request access solely to send the marketing campaigns you configure and to operate the features you explicitly request. Specifically, we affirm that:

• We only use Google user data to provide and improve the user-facing features you have requested.
• We do not transfer or sell Google user data to third parties for advertising, marketing, or other purposes.
• We do not use Google user data for serving advertisements.
• We do not use Google user data to determine credit-worthiness or for lending purposes.
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and de-identified for internal operations.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI and/or machine learning models.

• To operate and improve the Service
• To send campaigns on your behalf to your customers
• To calculate and process billing
• To send you transactional emails (account confirmations, payment receipts, billing alerts)
• To provide customer support
• To detect and prevent fraud or abuse

We do not sell your data or your customers' data to third parties. We do not use your data to train AI models.

We share data only with:

Stripe — for payment processing. Stripe's privacy policy applies to payment data.

Anthropic — for AI features (Setup Wizard, campaign generation, AI support). Your account data is sent to Anthropic's API to generate responses. Anthropic's privacy policy applies.

Supabase — our database and authentication provider. Data is stored in Supabase's infrastructure.

Vercel — our hosting provider. Requests are processed on Vercel's infrastructure.

We may share data if required by law, court order, or to protect the rights and safety of Lobotix or others.

As a Lobotix user, you are the data controller for your customers' personal data. We are a data processor acting on your instructions. You are responsible for having lawful bases (such as consent or legitimate interest) to send marketing communications to your customers. Lobotix provides unsubscribe infrastructure — it is your obligation to honor unsubscribe requests.

We retain your account data for as long as your account is active. Campaign run logs are retained for 12 months. If you delete your account, we will delete your data within 30 days, except as required by law or for fraud prevention.

We protect your data using industry-standard security measures including encryption at rest, encrypted API key storage, HTTPS for all connections, and access controls. However, no system is 100% secure. If you discover a security vulnerability, please report it to lobotix.support@gmail.com.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing or request restriction
• Data portability

To exercise these rights, email lobotix.support@gmail.com. We will respond within 30 days.

If you are in the EU or UK, our lawful basis for processing your data is contract performance (to provide the Service you signed up for) and legitimate interests (fraud prevention, security). For marketing emails we send to you as a customer, the lawful basis is consent.

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To submit a request, contact lobotix.support@gmail.com.

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, contact lobotix.support@gmail.com immediately.

We may update this Privacy Policy. We will notify you by email or in-app notice before material changes take effect. The effective date at the top of this page indicates when it was last updated.

For privacy questions or requests, contact us at lobotix.support@gmail.com.