Privacy Policy

Last updated: November 12, 2026

Lattice Media ("we", "us", "our") operates the Lattice Media Engine platform at latticemedia.xyz. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

Account information. When you sign up we collect your email address and a hashed password. If you upgrade to a paid plan we collect billing details through Stripe - we never store full card numbers on our servers.

Uploaded media. Files you submit through the API or portal are processed and stored in isolated, per-account storage buckets. We do not inspect, train on, or share your media content.

Usage data. We log API requests (endpoint, timestamp, response status, API key identifier, IP address) for rate limiting, analytics, and abuse prevention.

Cookies. The portal uses a signed session cookie for authentication. We do not use third-party tracking cookies.

2. How We Use Your Information

• Provide, maintain, and improve the service
• Authenticate your identity and authorize API access
• Process payments and manage your subscription
• Enforce rate limits and prevent abuse
• Send transactional emails (account confirmation, billing receipts, security alerts)
• Generate aggregated, anonymized usage analytics

3. Data Storage and Security

Your data is stored in PostgreSQL (account and request data) and S3-compatible object storage (processed media files). Public API and portal connections use HTTPS. Passwords are hashed with bcrypt. Session cookies are signed with HMAC.

Account files can be accessed through authenticated portal actions and presigned download URLs that expire after one hour. Demo download links expire after 45 minutes. A download link expiring does not itself delete the file.

4. Data Retention

Account files remain until you delete them, close your account, or an enabled auto-deletion setting removes them. Demo files older than 45 minutes are removed during periodic cleanup. Account deletion removes account records and initiates deletion of stored files. Operational request and audit records may be retained for security, troubleshooting, and service analytics; removing an account does not erase all operational records. Contact us with questions about retained records.

5. Third-Party Services

We use the following third-party services:

• Stripe - payment processing. Subject to the Stripe Privacy Policy.
• Resend - email delivery.
• Google Fonts and jsDelivr - fonts and frontend assets on public pages. Loading these resources sends normal web-request information to their providers.

We do not sell, rent, or share your personal information with advertisers or data brokers.

6. Your Rights

You may at any time:

• Access, update, or delete your account information through the portal
• Delete any or all uploaded files
• Revoke API keys
• Close your account entirely
• Request a copy of your data by emailing hello@latticemedia.xyz

7. GDPR

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation including the right to access, rectification, erasure, data portability, and the right to object to processing. Our lawful basis for processing is contractual necessity (providing the service you signed up for) and legitimate interest (security and abuse prevention).

8. Children

Lattice is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes

We may update this policy from time to time. Material changes will be communicated via email or a notice on the portal. Continued use of the service after changes constitutes acceptance.

10. Contact

For privacy-related questions, email hello@latticemedia.xyz.