Privacy Policy

Who we are

Lanlan ("we", "us", "our") is an AI-native website builder. Our website is lanlan.site and our dashboard is at app.lanlan.site.

What data we collect

Account information

When you sign up, we collect your email address. This is used for authentication (an emailed 6-digit sign-in code), transactional emails (domain setup, team invitations), and billing communications. We do not collect your name, address, or phone number.

When you sign up we also note how you arrived — the campaign tags on the link you followed, the domain of the website that referred you, and the first page you landed on — so we can understand how people find us. This travels with the link and the sign-in form; nothing is stored in your browser. We may also ask, once, how you first heard about us; answering is optional.

Site content

Files you upload or create through Lanlan (HTML, CSS, images, etc.) are stored in Cloudflare R2. These files are the content of your websites and are accessible at your site's public URL.

Analytics

We use PostHog for product analytics. We track usage events (tool calls, page views, feature usage) tied to your anonymous user ID. We do not send your email address or other personally identifiable information to PostHog. PostHog may set cookies for session tracking on the dashboard.

Site visitor analytics

If you use Lanlan's built-in analytics, each visit to your sites records: the page path, the referring site (its hostname only), any UTM campaign tags in the link, the visitor's country (looked up by Cloudflare from their IP address during the visit), device type (from screen width), a coarse browser family (such as "Chrome" or "iOS Safari"), browser language (the language alone, such as "Portuguese", not the region), and page performance measurements. To count unique visitors without cookies, we combine the visitor's browser user-agent string, time zone, browser language and screen size with the site into a one-way hash. Visitor IP addresses are never stored and are not part of that hash. Records tied to that hash (which pages it viewed on a given day, with its browser family and language) are deleted after about 90 days, or up to 97 if our daily processing falls behind. Performance measurements are deleted after about 30 days. The totals you see in your dashboard (views, referrers, countries, devices, campaigns and unique visitors per day) are kept until the site is deleted. Each counted page view is also sent to PostHog for our own product analytics, with the page path, referring site, country, device type and the visitor hash, and kept under PostHog's retention. No cookies are set on your visitors.

Form submissions

If you add contact forms to your site, submission data is stored in our database and forwarded to your notification email. IP addresses of form submitters are hashed for spam prevention and never stored raw.

On paid plans, submissions that our heuristic spam filter scores as borderline are sent to Anthropic for an automated spam verdict (model: Claude Haiku). The submission's fields are included in that request. So that the filter reflects how you triage, that request may also include a small number of earlier submissions to the same site that you labelled by hand — the ones you marked as spam, and any the filter caught that you marked as not spam. Submissions are never shared between sites for this purpose. Anthropic processes API inputs to return a result and does not use them to train its models. This step is rate-limited per form and is skipped entirely if the API is unavailable.

Product lifecycle data and service emails

We record product milestones tied to your account — signing up, connecting an AI assistant, creating a site, deploying, and making your first edit — along with when they happened. We use this to understand where you are in setup and to send a small number of service emails about your own account (for example, a reminder with the next setup step if you stall partway). Every automated email includes a one-click unsubscribe link; unsubscribing stops all automated email immediately and permanently. We never send more than one automated email to you in a day.

Leads (a feature for site owners)

Site owners can enable Leads, which organizes contacts for their site — form submissions, notes they add, and emails their pipeline sends — into a simple pipeline. If you submit a form on a Lanlan-hosted site whose owner has enabled Leads, your email address and the fact of your submission are stored in that owner's pipeline; the owner is responsible for that data and for any email they send you, which always includes an unsubscribe link. Pipeline activity records are retained for approximately 12 months; contact deletion removes the contact's activity records and pending automations with it.

What we never do: the contents of form submissions on your sites belong to you and your visitors. Lanlan may record that a form received a submission (an operational event) but never reads submission contents into our own systems for our own purposes.

The AI assistant in your dashboard

When you work with the assistant in your Lanlan dashboard, your messages, the contents of files you attach that it can read, and the parts of your sites it reads or changes are sent to an AI model so it can reply and do the work. These requests go through OpenRouter, which passes each one to the provider of the model in use. Depending on the task and any model you choose, that is Anthropic (Claude), DeepSeek, OpenAI, Google, Moonshot AI (Kimi), Alibaba (Qwen), Xiaomi (MiMo), Z.ai (GLM), or inclusionAI. A model may be run by its maker or by a cloud or inference provider that OpenRouter works with (Claude models, for example, often run on Amazon Web Services). On every one of these requests we instruct OpenRouter to use only providers that do not store your data or use it to train AI models. A provider may still hold a request briefly to process it and to watch for abuse, under its own data policy.

When you attach a PDF, Word, Excel, or PowerPoint file, its text is extracted on our own servers. That text, or the pages and pictures the assistant looks at, reaches an AI provider only as part of the conversation, under the same rule. The pages of a PDF are only ever shown to models that read PDFs themselves; we never send them to a separate text-recognition service.

If you use Lanlan from your own AI assistant instead (for example Claude or ChatGPT, connected through MCP), that assistant's provider handles your conversation under your own account with them.

AI image generation

When you ask Lanlan to generate an image, logo, or brand graphic, your request (including any reference material you provide) is sent to an AI image provider to produce it — OpenAI (gpt-image models) or Google (Gemini image models), chosen automatically based on what the image needs. Neither provider uses API inputs to train their models. This happens only when you explicitly request image generation.

Payment information

Payments are processed by Stripe. We do not store credit card numbers. Stripe collects payment details directly. We store your Stripe customer ID and subscription status in our database.

Domain registration

If you purchase a domain through Lanlan, we register it on your behalf via Cloudflare Registrar, an ICANN-accredited domain registrar. The following applies:

• WHOIS privacy: WHOIS privacy protection is enabled by default on all domains registered through Lanlan.
• Data sent to Cloudflare Registrar: The domain name you purchase and DNS record configurations. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
• ICANN requirements: Domain registrations are subject to ICANN policies. See ICANN Registrant Rights & Responsibilities.
• Cloudflare is the sponsoring registrar for all domains purchased through Lanlan.

Third-party services

We share data with the following services to operate Lanlan:

• Cloudflare (hosting, CDN, DNS, database, domain registration) — your site files, database records, request metadata, and domain registration data
• Stripe (payments) — your email address and payment details
• Resend (transactional email) — your email address and email content
• PostHog (product analytics) — anonymous usage events, no PII
• Unsplash (stock photos) — search queries when you use the image search feature
• Anthropic (automated spam classification, paid plans only) — the fields of borderline contact-form submissions, sent for a spam verdict; not used to train models
• Anthropic (answer categorisation) — if you tell us how you first heard about us, your answer, sent to sort it into a category; not used to train models
• OpenAI (AI image generation) — your prompt and any reference material you provide when you request an image, logo, or brand graphic; sent to produce the image; not used to train models
• Google (AI image generation) — the same request data when an image is routed to a Gemini image model (e.g. images with rendered text); not used to train models
• OpenRouter (AI request routing) — your conversations with the dashboard assistant, the files you attach, and the site content it reads, passed on to the provider of the AI model that replies; also image-generation requests, passed on to OpenAI or Google; routed only to providers that don't store your data or train on it
• AI model providers (the dashboard assistant) — Anthropic, DeepSeek, OpenAI, Google, Moonshot AI, Alibaba, Xiaomi, Z.ai, inclusionAI, and the cloud and inference providers that run their models; the same conversation data, to produce the assistant's replies; not stored or used to train models

How we use your data

• To provide and maintain the Lanlan service
• To authenticate you and secure your account
• To process payments and manage subscriptions
• To register and manage domains on your behalf
• To send transactional emails (login links, domain setup, expiration reminders)
• To improve the product based on aggregate usage patterns

We do not sell your data. We do not use your data for advertising. We do not train AI models on your site content.

Data retention

• Account data: Retained while your account is active. Deleted upon request.
• Site content: Stored in R2 while the site exists. Deleted when you delete the site.
• Analytics events: Retained in PostHog per their retention policy.
• Dashboard assistant conversations: Your chat history is kept with your account so you can pick up where you left off. For each request to an AI model we log which model answered, its size, cost, and timing — not its contents. If you use our beta version, a full copy of each request and its reply is also kept privately for 30 days to diagnose problems, then deleted automatically.
• Domain registrations: Records retained for the life of the domain registration.

Your rights

You can:

• Access your data by logging into the dashboard
• Delete your account and all associated data by contacting support@lanlan.site
• Export your site files at any time through the dashboard or API
• Inquire about what personal data we hold by emailing support@lanlan.site

Cookies

We use essential cookies for authentication (session cookies on the dashboard). PostHog may set analytics cookies. We do not use advertising or third-party tracking cookies. Your published sites do not set any cookies unless you add them yourself.

Security

Data is encrypted in transit (HTTPS everywhere) and at rest (Cloudflare infrastructure). Authentication uses emailed 6-digit sign-in codes — no passwords are stored. OAuth tokens are stored securely in our database.

Children

Lanlan is intended only for adults 18 and older. It is not directed at children, and we do not knowingly collect data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it.

Changes

We may update this policy. Material changes will be communicated via email or dashboard notification.

Contact

Questions about privacy? Email support@lanlan.site.