Privacy Policy
Last updated: March 7, 2026
This Privacy Policy describes how LobsterHost ("we," "us," "our") collects, uses, and protects your information when you use our AI assistant platform ("Services").
1. Information We Collect
Account Information
When you create an account, we collect your email address and payment information (processed by Stripe — we do not store your credit card details).
Conversation Data
Your conversations with your AI assistant are stored on your dedicated server to provide the Services. This includes messages you send (Input) and responses generated by the AI (Output).
Usage Data
We may collect basic usage data such as login times, session duration, and feature usage to improve the Services.
Technical Data
We may collect IP addresses, browser type, device information, and similar technical data for security and service operation purposes.
2. How We Use Your Information
- To provide the Services: Your conversation data is processed to generate AI responses and maintain your assistant's memory.
- To process payments: Your account and payment information is used to manage your subscription.
- To communicate with you: We may send you service-related emails (account confirmation, security alerts, billing notices).
- To improve the Services: We may use aggregated, anonymized usage data to improve our platform.
- To ensure security: Technical data helps us detect and prevent fraud, abuse, and unauthorized access.
3. What We Do NOT Do
- We do not sell your personal information to third parties.
- We do not use your private conversations to train AI models.
- We do not share your conversation data with other users.
- We do not display advertising based on your data.
4. Data Isolation
Each LobsterHost user receives a dedicated, isolated server for their AI assistant. Your conversation data, assistant memory, and preferences are stored only on your server and are not accessible to other users or shared across accounts.
5. Third-Party Services
We use the following third-party services to operate the platform:
- Anthropic: AI model provider — your messages are sent to their API to generate responses, subject to Anthropic's Privacy Policy
- Stripe: Payment processing — subject to Stripe's Privacy Policy
- Hetzner: Cloud infrastructure — servers located in the United States
- Cloudflare: DNS and web security
6. Data Retention
Active accounts: Your data is retained for as long as your account is active.
Cancelled accounts: Upon cancellation, your server and data are retained for 30 days to allow for reactivation. After 30 days, your server and all associated data are permanently deleted.
Account deletion requests: You may request immediate deletion of your data at any time by contacting us at [email protected].
7. Data Security
We implement reasonable security measures to protect your data, including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Isolated server instances for each user
- Access controls and authentication for server management
- Regular security updates and monitoring
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a portable format
- Opt-out: Opt out of certain data uses
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information.
To exercise any of these rights, contact us at [email protected].
9. Children's Privacy
The Services are not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will delete it promptly.
10. International Users
The Services are operated from the United States. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Services. Your continued use of the Services after the effective date of changes constitutes acceptance.
12. Contact
For questions about this Privacy Policy or to exercise your privacy rights, contact us at: