Privacy Policy — Lakeday

This Privacy Policy describes how Lakeday, LLC (“Lakeday,” “we,” “us,” or “our”) collects, uses, stores, and shares personal information when you visit lakeday.ai, use the Lakeday dashboard, APIs, CLI, or related services (the “Services”).

By using the Services, you agree to this policy. If you do not agree, do not use the Services. Questions: privacy@lakeday.ai.

1. Who we are

Lakeday, LLC is an Oregon limited liability company. Mailing address: 63155 NW Vista Meadow Ln, Bend, OR 97703, USA.

2. Information we collect

Account and identity

When you create an account or sign in, we collect:

Name and email address
Password (stored as a one-way hash, never in plaintext) if you use email sign-in
Organization membership and role
Authentication metadata such as session identifiers and two-factor status

Google user data

If you choose Sign in with Google, we request only the basic Google profile information needed to create and authenticate your Lakeday account. Google provides:

Your Google Account email address
Your name
Your public profile photo, if one exists
A unique Google account identifier

We use this Google user data solely to create your account, sign you in, display your identity in the product, and contact you about the Services. We do not access Gmail, Drive, Calendar, Contacts, or any other Google product. We do not use Google user data for advertising, sell it, or share it with third parties except as described in this policy (infrastructure processors, or when required by law).

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

GitHub user data

If you sign in with GitHub, we receive your GitHub username, email, name, and avatar for the same authentication purposes.

Customer content

You and your organization may upload tables, files, queries, job configuration, and other data to a Lakeday lakehouse (“Customer Data”). Customer Data belongs to you. We process it to provide the Services and do not use it to train public models or sell it.

Billing

If you subscribe, payment is processed by Stripe. We receive billing status, plan, and limited invoice metadata. We do not store full card numbers. Stripe’s privacy policy applies to payment details you submit to Stripe.

Signup and contact

If you sign up, WorkOS may place you on our waitlist and provides us with the account information described above. If you contact us, we collect your email address and the message you send.

Usage, logs, and device data

We collect technical information needed to operate and secure the Services: IP address, browser and device type, timestamps, request URLs, error logs, cookie identifiers, and product usage events (for example, API calls and dashboard actions).

3. How we use information

We use personal information to:

Provide, authenticate, and secure the Services
Create and manage accounts, organizations, and billing
Communicate about the product, security, and support
Monitor abuse, debug outages, and improve reliability
Comply with law and enforce our Terms of Service

4. How we share information

We share personal information only:

With processors who host or operate the Services for us, including Cloudflare (compute, storage, DNS, and CDN) and Stripe (payments)
With your organization administrators, who can see member emails and roles
If required by law, legal process, or to protect rights, safety, or security
In connection with a merger, acquisition, or sale of assets, with notice where required
With your direction or consent

We do not sell personal information, including Google user data.

5. Cookies and similar technologies

We use essential cookies and similar storage to keep you signed in, prevent CSRF attacks, and remember session state. These are required for the dashboard to function. We do not use third-party advertising cookies.

6. Retention

We keep account information for as long as your account is active. If you close your account, we delete or anonymize personal information within a reasonable period unless we must retain it for legal, security, or billing records. Customer Data is retained until you or your organization deletes it, or the account is closed, subject to backups that expire on a rolling schedule. Logs are retained for a limited operational window.

7. Security

We use HTTPS, hashed passwords, session cookies, optional two-factor authentication, and access controls. No method of transmission or storage is 100% secure. Please use a unique password and enable two-factor authentication where available.

8. International transfers

We are based in the United States. If you access the Services from another country, your information may be processed in the United States and other locations where our processors operate.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To make a request, email privacy@lakeday.ai from the address on your account. You may also close your account from the dashboard where that control is available.

If you signed in with Google, you can disconnect Lakeday from your Google Account at Google Account permissions. That stops future Google sign-in until you reconnect; it does not by itself delete your Lakeday account or Customer Data.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA. You may submit the requests above.

10. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe we have, contact us and we will delete it.

11. Changes

We may update this policy. The “Effective” date above will change, and we will post the new version at this URL. Material changes may also be announced by email or in the product. Continued use after the update means you accept the revised policy.

12. Contact

Lakeday, LLC
63155 NW Vista Meadow Ln
Bend, OR 97703, USA
privacy@lakeday.ai
Contact us