LemonLime Privacy Policy

DRAFT for review by a lawyer before launch. Not legal advice. Placeholders in [brackets] need real values. Last updated: [date].

[Rahimi Enterprises legal name, address] runs the hosted LemonLime service. This policy explains what we collect, why, and what you can do about it. The open-source LemonLime software, used on your own computer or your own servers, doesn't send us anything.

What we collect

• Account details: your email address, and your GitHub username if you sign in with GitHub or connect the GitHub app.
• Billing details: handled by Stripe. We keep your plan, usage hours and Stripe customer ID; we never see or store your card number.
• Threads: for cloud threads, the conversation history (your messages and what the agent did), the repository you chose and the thread's branch, so you can read the thread after its sandbox pauses.
• Secrets and agent sign-ins: keys you add under Settings → Secrets, and the sign-in your agent produces when you sign it in to your own model account. Both are encrypted (AES-256-GCM), only decrypted to start your sandboxes, and removed from thread history.
• Usage: sandbox start and stop times and sizes, to count hours.
• Technical logs: IP addresses and request logs for security and rate limiting, kept for [30 days].
• Website: if you subscribe to the changelog or ask us to get in touch, your email and team size. [Analytics: describe PostHog or other tool and cookies, once chosen.]

Local threads (agents on your own computer) stay on your computer; we don't receive their history or code.

What we don't do

We don't sell your data. We don't use your code, prompts or threads to train AI models. We don't see or bill your model usage; agents talk to model providers with your own account.

Why we use it

To run the Service you asked for (legal basis: contract), to keep it secure and prevent abuse (legitimate interests), to bill you (contract and legal obligations), and to send the emails you'd expect: sign-in codes, usage warnings and, if you subscribed, release news (consent; unsubscribe any time).

Who we share it with

Only service providers that help us run LemonLime, under contracts that protect your data: [Cloudflare] (hosting and database), [Daytona / E2B] (cloud sandboxes), [Stripe] (payments), [email provider] (emails), GitHub (when you connect it), [analytics provider]. We may disclose data if the law requires it.

How long we keep it

Account data while your account is open. Thread history and sandboxes for closed threads, [30 days]. Billing records as long as tax law requires. When you delete your account we delete your data within [30 days], except billing records we must keep.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, or object to some uses. Email [privacy email]. You can also complain to your data protection authority.

Security

Sandboxes are isolated per thread. Tokens given to sandboxes are short-lived and scoped to one repository. Secrets are encrypted at rest. Report security problems through our GitHub security policy.

Changes

We'll post changes here and email you about significant ones.