Privacy Policy | Lemon Domains

This policy explains what data Lemon Domains (“Lemon Domains”, “we”, “us”) collects, why, and what you can do about it. Lemon Domains is a domain portfolio manager. We aim to hold as little of your data as possible and to never sell it.

What we collect

Account information. Your name and email address. If you sign in with Google, we receive your basic Google profile (name, email, and avatar) to create and secure your account.
Portfolio data you provide. The domains, projects, registrar account labels, and notes you add to your portfolio.
Synced registrar data. When you connect a registrar or import a list, we store the domain metadata involved, such as expiry dates, status, and renewal information.
Access tokens. If you create a personal access token for the API or MCP server, we store only a hashed version of it, never the token itself.
Usage and technical data. Basic analytics about how the product is used, plus standard server logs (such as IP address and browser type) needed to run and secure the service.

How we use your data

To provide the service: store your portfolio, run syncs, and surface renewals and expiry.
To send transactional email, such as account and notification messages.
To respond to support requests and feedback.
To understand product usage and improve the service.
To keep the service secure and prevent abuse.

We rely on our agreement with you (to provide the product), our legitimate interest in running and improving a secure service, and, where required, your consent (for example, analytics cookies).

What we do not do

We do not sell your data, and we do not share it for advertising. Your domain portfolio is yours.

Service providers

We use a small number of trusted providers to run the service. They process data only on our instructions. Current providers include:

Neon for database hosting.
Resend for transactional email.
Google for optional sign-in and for analytics.
WorkOS for authenticating MCP connections.
Our hosting and content-delivery providers, which run the application and serve it to your browser.

This list may change as the product evolves. Data may be processed in countries outside your own, including the United States.

Cookies

We use essential cookies to keep you signed in and to operate the app. We also use analytics cookies to measure usage. You can block cookies in your browser, though essential cookies are required for the app to function.

Data retention

We keep your data while your account is active. When you delete your account, we delete your portfolio data, subject to short retention in backups and any records we must keep for legal reasons.

Your rights

You can access, correct, export, or delete your data at any time. Portfolio data can be exported as CSV from inside the app. To exercise any other right, or to delete your account entirely, email us at hello@lemon.domains. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, and we will honour them.

Security

We encrypt data in transit, store access tokens only as hashes, and restrict access to your data to what is needed to run the service. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

Lemon Domains is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. We will change the “last updated” date above and, for material changes, give notice in the app or by email.

Contact

Questions about privacy? Email hello@lemon.domains, or see our Terms of Service.