Privacy Policy

Lensce is operated by TinyHive Labs Limited (“TinyHive Labs”, “we”, “us”), a company registered in England and Wales under company number 16262776.

We are the controller of the personal information described in this policy. You can reach us about privacy at support@lensce.com.

Account details. Your name and email address when you create an account. If you sign in with Google, we receive your name, email address and profile picture from Google. Passwords are handled by our authentication provider; we never see or store them.

Organisation and team details. Your agency or company name, the logo you upload, and the names, email addresses and roles of people you invite to your team.

Audit requests made before sign-up. If you enter a domain and a work email on our homepage, we store both so the audit can start once your account exists.

What you add to Lensce. Client names and domains, the prompts you track, competitors you add, tasks, assignees and audit schedules.

Audit data. When you audit a domain we read publicly available content from that website and collect the answers AI engines give to the prompts we run. This is business information about the audited brand and is not normally personal information.

Billing details. Your plan, subscription status and purchase history. Card details are entered directly with our payment provider, Stripe. We do not receive or store full card numbers.

Technical data. Standard log data such as IP address, browser type and the time of requests, which our hosting providers record when you use the service.

Usage and diagnostic data. Which pages and features you use, and details of any errors you run into, such as the page you were on and your browser and device type.

We do not buy personal information from third parties.

• To create and secure your account and let you sign in.
• To run audits, build reports and show your results.
• To let your team work together, including sending invitations and task assignments.
• To take payment, manage your subscription and audit credits, and keep financial records.
• To send service emails: a welcome email, subscription and payment notices, low-credit warnings, team and task notifications, and scheduled audit results.
• To keep the service secure, fix problems and prevent abuse.
• To meet our legal obligations.

Where data protection law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running and improving the service, and compliance with legal obligations.

We only send emails that relate to your account and the service. We do not send marketing emails.

To run an audit we send prompts to third-party AI and search services: OpenAI (ChatGPT), Google (Gemini and Google AI Overview, the latter through SerpApi), Perplexity and Anthropic (Claude). We also use Anthropic to summarise the audited website and to write prompts and recommendations.

What we send is the prompt text and information about the audited business, such as its name, domain and public website content. We do not send your name, email address or billing details to these services.

These providers do not use the data we send through our accounts to train their models.

We use a small number of service providers to run Lensce. They process information on our behalf:

• Clerk: sign-up, sign-in and team membership.
• Supabase: database hosting.
• Amazon Web Services: application hosting, file storage and background processing of audits.
• Stripe: payments, subscriptions and invoices.
• Resend: sending service emails.
• PostHog: product analytics, so we can see which features are used.
• Google Analytics: website analytics, so we can see how visitors find and use lensce.com.
• Sentry: error monitoring, so we can find and fix faults.
• OpenAI, Google, Perplexity, Anthropic and SerpApi: answering the prompts that make up an audit, as described above.

We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of the business, in which case we will tell you.

We do not sell your personal information and we do not share it for advertising.

When you create a share link for a report, anyone who has the link can view that report without signing in. The report shows your agency name. You can protect a link with a password.

You are responsible for deciding who receives your report links and PDFs.

Essential cookies. Lensce uses cookies that are necessary to keep you signed in and to keep your account secure. These are set by our authentication provider, Clerk. Stripe sets its own cookies on its checkout and billing pages to process payments and prevent fraud. These cookies cannot be switched off. We also remember on your device that you have dismissed our cookie notice.

Analytics. We use PostHog to understand how the product is used and Google Analytics to understand how visitors find and use our website. We run both without analytics cookies: they do not store an identifier on your device.

Error monitoring. We use Sentry to record errors in the app so we can fix them. An error report can include the page you were on, your browser and device type and your account identifier.

We do not use advertising cookies and we do not sell data collected through these tools.

Lensce and its service providers store and process information in the United Kingdom, the European Economic Area and the United States.

When personal information is transferred outside the UK, we rely on safeguards recognised by UK data protection law, such as adequacy regulations or the contractual protections built into our providers' terms.

We keep your account information and the content of your workspaces for as long as your account is open.

When an account or organisation is deleted, we delete the associated workspaces, audits and reports from our active systems.

We keep billing and tax records for as long as the law requires, even after an account is closed.

We limit access to personal information to the people and providers who need it, encrypt data in transit, and rely on established providers for authentication and payments so that passwords and card details never reach our servers.

No online service can promise absolute security. If we learn of a breach that affects you, we will notify you as the law requires.

Depending on where you live, you may have the right to:

• ask for a copy of the personal information we hold about you;
• have inaccurate information corrected;
• have your information deleted;
• object to or restrict how we use it;
• receive your information in a portable format.

To use any of these rights, email support@lensce.com. We will respond within the period the law allows. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to the data protection authority where you live.

If you use Lensce on behalf of clients, you are responsible for having the right to add their details and to share reports about them. If you invite team members, make sure they know their name and email address will be stored in Lensce.

If your organisation needs a data processing agreement with us, email support@lensce.com and we will provide one.

Lensce is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

We may update this policy as the service changes. When we make a material change we will update the date at the top of this page and let account holders know by email or in the product.

Questions about this policy or your information can be sent to support@lensce.com. See also our Terms of Service.