Privacy Policy
Updated 10 November 2026
This policy explains how LazyFrog handles personal data. LazyFrog isn't a registered company yet; when it is, the controller's legal name and address will be added here. Until then, for anything about your data use the privacy form or write to the contact form.
What we collect
- Your account: your name and email address, and the sign-in records needed to keep your account secure.
- What you build: your projects' code, databases, files and settings. We process these only to run the service for you.
- How the service is used: a record of each action an AI assistant takes on your projects: which tool, when, whether it worked, and its arguments with secrets, file contents, SQL and commands removed. Also plan usage and technical logs. We never see your conversation with your AI, only the tool calls it makes.
- Payments: handled by Creem, our merchant of record for paid plans, which receives your card details directly and keeps the invoices. We receive the result, your email and your billing country.
- Support: what you write to us.
What we don't do
- No advertising, and we don't sell or share personal data for advertising.
- No tracking cookies. The marketing site sets no cookies; the portal uses only the cookies needed to keep you signed in.
- Visits to lazyfrog.dev and to the sign-up page are counted with our own copy of Umami, on our own servers in Germany: the page, the site you came from, and your country, browser and type of device. It uses no cookies, stores nothing in your browser and never keeps your IP address, and it counts nothing when your browser asks not to be tracked. When you create an account you can tell us, if you like, how you heard about LazyFrog.
Your app's visitors
Your app's data, including any personal data of its visitors, is yours: we process it on your behalf, as described in our data processing terms. Visitor access logs are kept for a short period for security and to measure bandwidth.
Where data is kept
Projects, databases and backups are stored in Germany. Our edge network (Cloudflare) serves traffic worldwide. Our sub-processors are listed with what each does.
How long we keep it
- Logs: as long as your plan says (3 to 30 days).
- Exports: 7 days.
- A deleted account: recoverable for 30 days, then deleted. We keep invoices as the law requires and a minimal record to prevent abuse.
Your rights
You can see, correct, export and delete your data. Most of it you can do yourself in the portal (export everything under Account › Data & privacy). For anything else, use the privacy form or write to the contact form. If you're in the EU or the UK you may also complain to your data protection authority.