Privacy Policy

Effective April 23, 2025

1. Who We Are

LazyDev ("we", "us", "our") is an AI-powered marketing automation platform for developers, operated at lazydeveloper.ai. Questions about this policy can be sent to hi@lazydeveloper.ai.

2. What We Collect

Account information — your name and email address, provided through Clerk when you sign up.

Product information — the product name, website URL, description, and marketing goals you provide during onboarding.

Connected account tokens — when you connect Reddit, X (Twitter), Gmail, Facebook, or Instagram, we store OAuth access tokens to act on your behalf. Tokens are encrypted at rest. We request the minimum scopes necessary:

  • Reddit — post and read access on your connected account
  • X (Twitter) — read and write tweets on your connected account
  • Gmail — send-only (gmail.send scope). We cannot read your inbox.
  • Facebook — read-only ads metrics (ads_read scope). We cannot write to your ad account or spend your budget.
  • Instagram — basic profile and content publishing on your connected account

Usage and action data — records of content we planned or published on your behalf, and the results (engagement signals, email open rates) used to improve future recommendations.

Billing information — handled entirely by Stripe. We store your Stripe customer ID but never see or store raw card details.

Creator and outreach data — if you enable creator discovery or email outreach, we store creator profiles and contact information found via Apify and Hunter.io on your behalf.

3. How We Use Your Data

We use your data only to operate the service you signed up for:

  • Running your marketing strategy — planning, drafting, and posting content to your connected channels
  • Sending outreach emails from your Gmail account to contacts you approve
  • Generating ad creative recommendations from your Facebook metrics
  • Discovering relevant creators in your product's niche via Apify
  • Sending you transactional notifications (plan ready, items pending review) via email
  • Processing your subscription payments via Stripe

We do not sell your data. We do not use your data to train AI models. We do not use your data to advertise to you.

4. Third-Party Services

LazyDev integrates with the following third-party services to deliver its features. Each has its own privacy policy.

  • Clerk — authentication and user management
  • Stripe — payment processing
  • Anthropic (Claude) — AI agent and content generation
  • Google Gemini — ad creative generation (Pro/Max tiers)
  • Apify — creator discovery via public social media data
  • Hunter.io — professional email enrichment for outreach
  • Resend — transactional email delivery
  • Reddit, X, Google, Meta, GitHub — channel integrations via their official APIs

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your personal data, OAuth tokens, and product information within 30 days. Aggregated, anonymised usage statistics may be retained longer.

6. Your Rights

You can request access to, correction of, or deletion of your personal data at any time by emailing hi@lazydeveloper.ai. You can revoke any connected account's access from your dashboard at any time — this immediately deletes the stored token for that integration.

7. Security

OAuth tokens and API keys are encrypted at rest using AES-128 (Fernet). All data is transmitted over HTTPS. We use Railway for backend hosting and Vercel for frontend hosting — both operate secure, SOC 2-compliant infrastructure.

8. Changes to This Policy

If we make material changes, we will update the effective date at the top of this page and notify you by email. Continued use of the service after changes constitutes acceptance.