Lakewave

Privacy Policy

This Privacy Policy describes how Lakewave, a DBA of Lynbrook Solutions LLC ("Lakewave," "we," "us," or "our"), collects, uses, and shares information about you when you use our services at lakewave.ai and app.lakewave.ai.

1. Information We Collect

We collect the following types of information:

• Account information: Your name, business email address, and password when you register.
• Sender profile: Your name, company, title, phone, website, and email signature for generating outreach.
• Contact data: Business contact information (names, titles, business email addresses) of third parties you search for and add to your pipeline.
• Email account credentials: OAuth tokens for connected Gmail accounts, stored encrypted. We never store your Google password.
• Usage data: Pipeline activity, emails generated and sent, job history, and feature usage.
• Payment information: Billing details processed by Stripe. We do not store credit card numbers.

2. How We Use Your Information

• To provide and improve our B2B outreach automation services.
• To generate personalized cold outreach emails on your behalf.
• To send emails from your connected Gmail or SMTP account.
• To verify business email addresses and maintain our shared verification cache.
• To process payments and manage your subscription.
• To send service notifications and product updates.
• To analyze usage patterns and improve our platform features. We do not use your data to train AI models.

3. How We Share Your Information

We do not sell your personal information. We share data only with trusted service providers necessary to operate our platform:

• Email providers: When you connect your email account via OAuth, your email provider processes sending on your behalf per their respective privacy policies.
• AI processing: Your sender profile information (company name, product description, value propositions) — which you enter directly into Lakewave — is sent to our AI provider (Anthropic) to generate email content. Gmail data and Google user data are never sent to any AI provider. Data is processed per Anthropic's enterprise data policies and is not used to train models.
• Email delivery: A fallback email delivery provider is used when no personal email account is connected.
• Payment processing: Billing and subscription management is handled by a PCI-compliant payment processor. We never store credit card numbers.
• Search and enrichment: Company and contact enrichment data is sourced through third-party search APIs.

All third-party providers are contractually obligated to protect your data and may not use it for their own purposes.

4. Gmail Data Usage and Google API Policy

Lakewave's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request the gmail.send scope — solely to send emails you have explicitly written, reviewed, and approved within Lakewave.
• We do not read, index, access, or store the contents of your Gmail inbox or any other Gmail data.
• Gmail OAuth tokens are encrypted at rest and never shared with any third party, including our AI provider.
• Gmail user data is used exclusively to send outreach emails on your behalf. It is not used for any other purpose including analytics, advertising, or AI training.
• You can revoke Gmail access at any time from your Google Account settings or from the Connections page in your Lakewave account.

4a. Gmail Data and AI — Important Clarification

Gmail data and Google user data are never passed to any AI service. Our AI provider (Anthropic) only receives sender profile information that you manually entered into Lakewave (such as your company name, product description, and value propositions). The AI email generation process does not involve any Google user data whatsoever.

The flow of data in Lakewave is strictly one-directional with respect to Gmail: Lakewave sends emails outbound through your Gmail account. No Gmail data flows inward to our AI systems or any third-party service other than the email delivery itself.

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting [email protected]. We will delete your data within 30 days of a verified request.

6. Security

We protect your data using industry-standard security measures including TLS encryption in transit, AES encryption at rest for OAuth tokens and passwords, and regular security reviews. No method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request a portable copy of your data.

To exercise these rights, contact us at [email protected].

8. Cookies and Analytics

We use essential cookies and local storage for authentication (JWT tokens) on our application. We do not use advertising cookies.

Our marketing website (lakewave.ai) uses Google Analytics 4 to understand visitor traffic and improve our marketing. Google Analytics collects anonymized data such as pages visited and time on site. You can opt out via Google's opt-out tool. We do not use Google Analytics inside the authenticated application.

9. Children's Privacy

Lakewave is a B2B service intended for business professionals. We do not knowingly collect information from anyone under 18 years of age.

10. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email. Continued use of Lakewave after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy questions or requests:

• Email: [email protected]
• Entity: Lakewave, a DBA of Lynbrook Solutions LLC
• Address: 117 Bernal Road #70-309 San Jose, CA 95119