Privacy Policy

Introduction

Lattice, Inc. ("Lattice", "we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our services.

Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email, company)
• Usage data and analytics
• Communication preferences
• Payment information (processed securely via Stripe)

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions

Connected Accounts & Third-Party Integrations

Lattice lets you connect third-party accounts (such as Google, Microsoft, and Meta services) so our platform can act on your behalf. When you authorize an integration:

• We request only the permission scopes needed for the features you enable, and you may review them during the provider's consent screen.
• Access and refresh tokens are encrypted at rest (AES-256-GCM) and are only decrypted at the moment an authorized action is performed.
• We access, store, and process data from connected accounts solely to provide and improve the features you request — never to sell it or serve advertising.
• You can disconnect any integration at any time from your dashboard, which revokes the stored tokens.

Google API Services — Limited Use

Lattice's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not transfer or sell it to third parties except as necessary to provide or improve the requested features, comply with applicable law, or as part of a merger or acquisition.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction — including encryption of credentials at rest, role-based access controls, audit logging of privileged actions, and parameterized database access. We continuously monitor our security controls; you can review our current posture on our Trust Center.

Data Retention & Your Rights

We retain personal data only as long as necessary to provide our services or as required by law. You may request access to, correction of, or deletion of your personal data, and you may withdraw integration consent at any time. To exercise these rights, contact us using the details below.

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@lattice.inc.