Privacy Policy

We collect the information needed to create your account, manage your subscription, and support your storefront. This may include your name, email address, phone number, business details, billing details, and the content you upload to Lenzy.

We also collect limited technical information such as device type, browser, IP address, and usage activity to keep the service secure and improve performance.

We use your information to provide the Lenzy platform, manage Lenzy subscriptions, subscriptions, generate storefront content, respond to support requests, and improve the product.

We may also use contact information to send important account notices, billing updates, security alerts, and product communications related to your use of the service.

Stripe processes Lenzy subscription and generation-credit payments. Storefront customer payments are currently cash on delivery or merchant-managed external payments; Lenzy does not process, verify, or guarantee those external transactions. We do not store full card details on our servers.

We use Supabase for application data and authentication, AWS or Supabase for media storage, Stripe for SaaS billing, fal.ai and OpenAI for requested AI features, Resend for email, Sentry for error monitoring, and Meta for social features when explicitly enabled. These providers receive only the information needed for the requested purpose and may process it in other countries under their own safeguards.

If you choose to connect your Facebook Page or Instagram professional account, we receive limited information from Meta Platforms — such as your Page name, Page ID, Instagram username, and an access token — solely so we can publish the posts you ask us to publish on your behalf.

Access tokens are stored encrypted and are never shared with third parties. We do not read your private messages, followers, or contacts, and we only post content you explicitly approve. You can disconnect these accounts at any time from your Settings page, which deactivates the stored credentials, or remove Lenzy's access from your Facebook account settings. See our data deletion instructions for how to request removal of this data.

We use reasonable administrative, technical, and organizational measures to protect your information from unauthorized access, misuse, or disclosure.

Account and storefront content is retained while your account is active. After an verified deletion request, we target completion of removable account content within 30 days. Limited billing, order, fraud-prevention, and security records may be retained where required by law or needed to resolve disputes.

You can download a JSON copy of your business data or submit an account deletion request from Settings. Newsletter recipients can unsubscribe at any time. You may also request corrections or contact hello@lenzy.online with privacy questions.