Privacy Policy

Last updated: 15 October 2026

LatticeRun is a trading name of Sequel AI Ltd, a company registered in England and Wales under registered number 16897137, with registered address at 128 City Road, London, EC1V 2NX, United Kingdom ("we", "us"). Sequel AI Ltd is the data controller for the personal data described in this policy. The short version: using LatticeRun needs a free account, which means we hold your email address. On the free plan your projects and tasks still live only in your browser and are never sent to us.

1. Data that stays in your browser

On the free plan, and on any plan while cloud sync is off, all projects, tasks, notes, attachments and preferences are stored exclusively in your browser's local storage on the device you are using. We cannot see, access or recover this data.

Because that storage belongs to the browser rather than to us, the data is lost if you clear cookies and site data, browse in a private/incognito window, uninstall or reset the browser, or the browser evicts stored data to reclaim space. It is also specific to that browser: it does not appear in another browser, another profile, or on another device. We hold no copy, so we cannot restore it. Use the JSON export to keep your own backups, or enable cloud sync on a paid plan for a server-side copy.

2. Data we collect when you create an account

Everyone who uses LatticeRun has an account, including on the free plan.

• Account data: your email address, how you sign in (an emailed link, a password, or Google or GitHub), and optional profile details (name, avatar, company name/logo). If you sign in with Google or GitHub, we receive your name, email address and profile picture from them, as you allow on their screen.
• Sign-up source: for your first visit only, the page and any campaign tag or referring site you arrived from, recorded once when your account is created, so we can tell which channels bring people to LatticeRun.
• Marketing email (only if you tick the box): see section 2A.
• Synced content: if you enable cloud sync (paid plans), your project trees are stored in our database so they can sync across your devices and to collaborators you explicitly invite.
• Billing data: payments are processed by our payment provider. We never see or store your full card details — only your plan status and customer reference.
• Connector and agent access: if you connect an AI agent or app through the LatticeRun MCP connector, it can read and change only the projects your account owns, and every change it makes is recorded in that project's Activity feed under the connection's label. We store connection tokens only as a one-way hash. What an agent or its AI provider does with content it has read is governed by their own terms, not ours; disconnecting the app or revoking the token ends its access on the next request.
• Usage data: privacy-respecting, aggregate analytics (no cross-site tracking).
• Advertising measurement (unless you opt out): whether you reached us from an X (Twitter) ad and went on to sign up or buy — see section 9.

2A. Marketing email

When you create an account there is an optional box, unticked unless you tick it: 'Email me LatticeRun product news and tips. Unsubscribe any time.' We send you marketing email only if you tick it. We keep a record of your choice, the exact wording you agreed to and when, as proof of your consent.

You can withdraw at any time, as easily as you gave it: switch off 'Product news and tips by email' in the app's account settings, use the unsubscribe link in any marketing email, or email hello@latticerun.com. Withdrawing doesn't affect the emails needed to run your account, such as sign-in links, receipts and service notices.

3. Lawful bases for processing (UK GDPR)

• Contract — providing the Service you signed up for: account, sync, collaboration and billing.
• Legitimate interests — keeping the Service secure, preventing abuse, and understanding aggregate usage to improve it, and recording how you found us when you sign up (sign-up source).
• Legal obligation — retaining billing and transaction records as required by tax and company law.
• Consent — optional extras such as marketing email and advertising measurement with X; you can withdraw consent at any time.

4. What we never do

• Sell or rent your data to anyone.
• Use your tasks or projects to train AI models.
• Read your project content except where required to operate a feature you invoked (e.g. delivering it to a collaborator you invited).

5. Retention

Account and synced content is kept while your account is active. Deleting your account removes synced projects and profile data from our live systems within 30 days; backups roll off within a further 30 days. Billing records are retained for the period required by UK tax law (normally 6 years). Your marketing choice, and the history of any changes to it, is kept while your account exists and deleted with it.

6. International transfers

Some of our service providers process data outside the UK. Where they do, transfers are protected by the UK International Data Transfer Agreement or the UK Addendum to EU Standard Contractual Clauses, or the provider's equivalent adequacy arrangements.

7. Sub-processors

We use a small number of trusted sub-processors to provide hosting, database and authentication, payment processing and transactional email. They process data only on our documented instructions and under appropriate confidentiality and security obligations. If you choose to sign in with Google or GitHub, that provider authenticates you under its own privacy policy. Separately, unless you opt out of advertising cookies, we share the limited measurement data described in section 9 with X Corp., which handles it under its own privacy policy. The current list is available on request from hello@latticerun.com.

8. Your rights

Under the UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any of these, email hello@latticerun.com — we respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies & storage

Always on (strictly necessary): browser local storage for app state, your sign-in session, kept in your browser's storage, and a first-party cookie (lr_consent) that remembers your cookie choice.

Advertising cookies (on unless you opt out): while we run ads on X, our site and app load X's conversion-tracking pixel. It sets cookies and tells X about your visit — such as the page, your IP address and browser — so we can measure which X ads lead to visits, sign-ups and purchases. When you create an account or buy a plan, the pixel also tells X that the sign-up or purchase happened (for purchases, the price and currency). Your projects, tasks and payment details are never shared.

Only if you click Accept: if you arrived from an X ad, we also keep X's click identifier in a first-party cookie (lr_twclid) for 30 days, and when you then create an account or buy a plan our server tells X the conversion happened directly, sending that click identifier, a SHA-256 hash of your email address (never the readable address) and, for sign-ups, your IP address and browser user agent.

To opt out, open Cookie settings (in the site footer or the app's Help menu) and choose Decline: the pixel stops loading, its cookies are cleared, and nothing above is sent to X. You can change your choice at any time from the same place.

10. Changes

If we change this policy we'll post the new version here and update the date above. Material changes will be announced by email to account holders.

11. Contact

Data controller: Sequel AI Ltd, 128 City Road, London, EC1V 2NX, United Kingdom · hello@latticerun.com

We answer support emails with AI assistance; your message is processed by our AI provider only to reply to you.