Lemtika (“we”, “us”) operates a template-design and rendering API that turns your templates and structured data into branded images, documents, and other media. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the rights you have over it. It applies to the Lemtika website, dashboard, and API.
What We Collect
We collect the following categories of personal data:
- Account information — your name, email address, a hashed password, and any organisation or team details you provide when you create an account.
- Usage and content data — the templates you create, the structured data you submit for rendering, thin render and export history (which template, when, and credits used), API request metadata, and the API keys you generate. Your template content and render inputs may themselves contain personal data, which you control; how long the per-render data you submit is retained depends on how you render, and is kept only briefly if at all (see Data Retention below).
- Billing information — your plan, credit balance, and transaction history. Card details are collected and processed directly by our payment processor; we do not store full card numbers.
- Log and device data — IP address, browser type, operating system, timestamps, and diagnostic logs generated when you use the dashboard or call the API.
How We Use It
We process personal data to:
- provide and operate the service, including authenticating you and running renders;
- meter credit consumption and bill your plan;
- maintain security, prevent abuse and fraud, and diagnose failures;
- respond to your support requests;
- send service and transactional messages about your account;
- improve the product through aggregated, non-identifying analysis.
We do not sell your personal data.
Legal Bases
Where the GDPR or a similar law applies, we rely on: performance of our contract with you (to deliver the service and process payments); our legitimate interests (to secure the service, prevent fraud, and improve the product), balanced against your rights; your consent (for non-essential analytics or marketing where required, which you may withdraw at any time); and compliance with our legal obligations (such as tax and accounting record-keeping).
Sharing & Processors
We share personal data only with service providers (“processors”) that help us run Lemtika, under contracts (including EU Standard Contractual Clauses or a data-processing agreement) that limit their use of it to our instructions. Our current subprocessors are: Hetzner Online GmbH (application hosting and database, Germany/Finland, EU), Cloudflare, Inc. (content delivery, edge compute, and object storage — our storage buckets are provisioned in the EU jurisdiction), Resend (transactional email), and Paddle (payments, as merchant of record). We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a merger or acquisition (with notice to you). We never sell your data or share it for third-party advertising.
Data Retention
Lemtika is built to keep as little as possible. Different data has very different lifetimes:
- Per-render inputs — for a single render through the render API, the structured data you submit is processed in memory to produce your output and is not persisted afterwards, and request payloads are not written to our logs. Inputs submitted through the dashboard or as a batch run are retained only for the short output window below — 24 hours for a single export, 7 days for a batch and its uploaded data-sheet — then deleted.
- Rendered outputs — held only briefly in a short-lived, EU-resident operational cache so you can retrieve them, then deleted automatically: single renders within 24 hours, and batch outputs together with any uploaded batch data-sheet within 7 days. Derived processing artifacts (such as background-removal cutouts) are auto-deleted on the same basis. Delivered results are returned to you directly rather than kept on a hosted URL.
- Account & metadata — your account details and thin render history (which template, when, and credits used — not your input data or output bytes) are kept while your account is active.
When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to meet legal, tax, accounting, or security obligations, or to resolve disputes. Aggregated data that no longer identifies you may be retained indefinitely.
Your Rights
Subject to applicable law, you may request:
- access to the personal data we hold about you;
- correction of inaccurate or incomplete data;
- deletion of your data;
- restriction of, or objection to, certain processing;
- a portable copy of the data you provided to us.
You may also withdraw consent where we rely on it. To exercise any of these rights, contact us at the address below; we will respond within the time required by law. You have the right to lodge a complaint with your local data-protection authority.
International Transfers
Lemtika may process and store data on infrastructure located in countries other than your own. Where we transfer personal data across borders, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism — so your data remains protected.
Security
We use technical and organisational measures appropriate to the risk, including encryption of data in transit, hashed credentials, access controls, network isolation, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we encourage you to use a strong, unique password and to keep your API keys confidential.
Children
Lemtika is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or through the service. Your continued use of Lemtika after a change takes effect constitutes acceptance of the revised policy.
Contact
Questions about this policy, or want to exercise your rights? Email hello@lemtika.com.