Privacy Policy

1. What we collect

• Contact: name, email, and whatever you put in a message to info@lemonwater.io or kelly@lemonwaterllc.com.
• Engagement files: documents, accounts, and notes you send so we can advise or build. We use them only for that work.
• Invoices: if we bill you, amount and payment records. Card numbers, if any, are processed by Stripe — we do not receive the full number.
• Cookies: strictly necessary only. Clerk may set a session cookie if you sign in. Stripe sets cookies on Stripe’s domain if you pay. We do not set advertising or analytics cookies.

We do not run advertising pixels. We do not sell personal information as that term is used in the California CPRA. Fonts on this site are self-hosted at runtime (no Google Fonts request from your browser).

2. How we use it

• To answer you and to perform an agreed engagement.
• To invoice and keep tax records.
• To operate this website.

We do not use your business materials to train, fine-tune, or evaluate a model we ship. If a third-party tool must see your data for a task you asked for, we say so first. See the AI policy.

3. Retention

• Email and engagement files: for the life of the work and a reasonable period after (typically up to 12 months), then deleted except as tax or a dispute requires.
• Payment records: retained as required by tax law (often seven years), primarily at Stripe if used.

We are not a backup service. Keep your own copies.

4. Processors

• Vercel — hosts this website.
• Stripe — payments, when we invoice that way.
• Clerk — account at Premix checkout.
• Resend — transactional email, if configured.

Each has its own privacy policy. We do not send your materials to a generative-AI API unless an engagement writing says that will happen.

5. Security

TLS in transit for this website. No system is perfectly secure. If a breach of personal information occurs, we will notify affected people by email without unreasonable delay, and within any shorter period required by law (including, where applicable, 72 hours for certain European personal-data incidents).

6. Your rights

Depending on where you live (including the EEA/UK and California), you may have rights to access, correct, delete, export, or object to certain processing, and to appeal a refusal. Email info@lemonwater.io. We will respond within 30 days, or sooner if the law requires. We do not sell or share personal information for cross-context behavioral advertising.

Lemonwater, LLC, Ipswich, Massachusetts, USA, is the controller for this site. We do not currently maintain an EU/UK representative. If that becomes required for the volume of EU clients we serve, we will name one here.

7. Children

This site and this practice are for adults in business. We do not knowingly collect personal information from children under 16. If we learn that we have, we will delete it.

8. Changes

Material changes will be dated on this page. We will email the address we have if the change affects materials you already sent.

9. If you use Premix

Mixer License: the tape never leaves the operator’s machine. No vendor sees it. Cloud intro: audio is transferred by MASV, stored on DigitalOcean Spaces, and processed on Lemonwater’s worker, then deleted within 7 days after delivery (sooner on request). Zapier may receive download URLs so we can email delivery. Stripe, Clerk, Vercel, Resend, and Airtable (ops) do not receive the audio. Airtable is blocked from audio and file fields in code. No voiceprint vendor and no third-party AI inference vendor is in the pipeline. Full table: Premix AI policy §3.