Privacy Policy

Last updated: October 10, 2026

This policy explains what personal data lemonsqueeze ("we", "us") collects when you use lemonsqueeze.app (the "Service"), how we use it, and the rights you have. We are the data controller for account data. We process data in accordance with the GDPR.

1. Data we collect

• Account data: email address, name (optional), hashed password. We never store passwords in plain text.
• Workspace & content data: brand profiles, scripts, ideas, uploaded assets, posting schedules, and connected channel metadata you create in the Service.
• Billing data: subscription status and plan. Card details are processed and stored by Stripe. We never see your full card number.
• Social account connections: tokens and keys needed to access connected social accounts. Depending on the connection, credentials may be held by our social publishing service or stored by us for the connected brand.
• Instagram Login data: when you connect Instagram Login, we receive an access token, Instagram account identifier, username, token expiry information, and connection status. Supported comment or messaging features may also receive comments, replies, messages, sender or recipient identifiers, timestamps, and related post metadata from Meta.
• Mobile app data: if you sign in to the Lemonsqueeze app, we receive the same account data as on the website, the scripts you sync, and the videos and Inspo saves you choose to upload or send. A sign-in token is kept on your phone and expires after 90 days.
• Usage data: log data such as IP address, browser type, and pages accessed, used for security and to improve the Service.
• Visitor statistics: on our public pages we count visits with Vercel Web Analytics. It uses no cookies and doesn't identify you; we see totals such as page views, the site you came from, and your country and device type.
• Sign-up source: if you sign up from a link that names a campaign, we save that campaign name with your account so we know which posts bring new users.

2. How we use data

We use your data to operate the Service, including research, script generation, scheduling, publishing, analytics, and supported social engagement tools. Instagram Login credentials and account identifiers are used to authenticate requests to Meta, identify the connected account, retrieve supported comments or messages, display them to authorized workspace members, and send actions you request, such as a comment reply. We also process payments, send transactional email, prevent abuse, troubleshoot connections, and comply with legal obligations. We do not sell personal data, and we do not use your content to train AI models.

3. AI processing

Script generation and analysis are performed by the AI provider selected for your workspace, such as Anthropic, Google, or OpenAI, acting as a processor. Content you submit for generation is transmitted to that provider for processing and is subject to its data-processing terms.

4. Processors we use

• Vercel (hosting)
• Supabase (database)
• Cloudflare (file storage)
• Stripe (payments)
• Resend (transactional email)
• Social publishing and account connection services
• Meta Platforms (Instagram Login and connected Instagram features)
• Anthropic, Google, or OpenAI (AI generation, depending on workspace selection)
• ElevenLabs (speech-to-text for audio and video files you upload to transcribe on the website)
• ScrapeCreators and other data providers (public social content research)

5. Legal bases

We process data to perform our contract with you (Art. 6(1)(b) GDPR), for our legitimate interests in securing and improving the Service (Art. 6(1)(f)), and to comply with legal obligations (Art. 6(1)(c)).

6. Retention

We generally keep account and workspace data while the relevant account or workspace is active. Instagram access tokens and connection metadata are kept while the connection remains active and are removed from the active connection record when it is disconnected. Comments, messages, and related metadata may be kept as needed to provide the relevant inbox, reply, history, security, and troubleshooting functions. Deleting a brand removes that workspace and its content from the active application database. Some information may remain in backups for their normal lifecycle or be retained where required for security, billing, dispute resolution, or legal obligations.

7. Your rights

You may ask to access, correct, export, restrict, object to processing of, or delete your personal data, subject to applicable law. Instructions for disconnecting Instagram, revoking provider access, deleting a brand, and requesting account deletion are on our Data Deletion page. For help with a request, contact steven@lemonsqueeze.app. You may also lodge a complaint with your supervisory authority, such as Datatilsynet in Denmark.

8. International transfers

Some processors operate in the United States. Transfers rely on Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

9. Cookies

We use strictly necessary cookies for authentication and session management. We do not use third-party advertising or tracking cookies. The mobile app does not use cookies.

The Lemonsqueeze mobile app

The Lemonsqueeze app for iPhone is a teleprompter, script planner and video editor. It works on its own, without a lemonsqueeze.app account. This section explains what the app does with your data.

What the app uses on your phone, and why.

• Camera: to record you while the teleprompter scrolls your script. The camera picture is not sent to us.
• Microphone: to record the sound of your video, including from an external microphone.
• Photos: to save your finished videos to your photo library. The app asks for access to Photos to save your videos there; it does not upload your library or read it for anything else.
• Notifications: an optional daily reminder to film. It is created on your phone. We do not send push notifications and do not receive a notification token.
• Links: when you paste a TikTok, Instagram or Facebook link into Inspo, your phone asks that network for the video's public title and picture. The link goes to that network, not to us.
• Clipboard: Copy puts a caption on your clipboard. The app does not read your clipboard.

What stays on your phone. Your scripts, plans (status, date, category, caption), Inspo saves, recordings, edits and settings are stored on your phone. If you do not sign in, the app sends none of this to us. Signing out keeps your local scripts, saves and recordings on your phone. Deleting the app removes them.

What is sent to lemonsqueeze when you sign in.

• Your email and password, over HTTPS, to sign in (we store only a hash of the password).
• Your scripts, kept the same on your phone and on lemonsqueeze.app.
• A video, with its sound, only when you tap Upload; it is stored in your brand's library and attached to its script.
• An Inspo save, only when you choose to send it: its title, link and your notes, as a Saved idea.

Uploads and synced scripts go to the brand your sign-in is linked to. The app also reads that brand's Saved ideas, with their latest script, so you can start a script from one. It does not download videos from lemonsqueeze.

The app's subscription. You buy and pay for the app's subscription through Apple, under Apple's own privacy policy. We do not receive your payment details or your Apple ID. Apple tells the app on your phone whether your trial or subscription is active; the app does not send this to us.

Other companies. The processors in section 4 apply.

No tracking. The app has no advertising, analytics or tracking software and does not follow you across other companies' apps or websites.

Deleting your data. You can delete scripts, saves and recordings in the app, or delete the app. To delete your account and the data we hold, follow the steps on our Data Deletion page or email steven@lemonsqueeze.app.

Children. The app and lemonsqueeze.app are not directed at children and you must be at least 16 to hold an account (see the Terms). The App Store age rating of 4+ describes the app's content, not who may use the service.

10. Changes

We may update this policy; material changes will be announced via email or in-app notice. Continued use after changes constitutes acceptance.

11. Contact

Data controller: lemonsqueeze, Copenhagen, Denmark. Contact: steven@lemonsqueeze.app. See also our Data Deletion Instructions.