Legal
Privacy policy
How Lanten collects, uses and protects personal data — yours as a customer, and the tenant, landlord and applicant data your agency connects to the service.
Last updated 13 September 20261. Who we are
Lanten Ltd (“Lanten”, “we”) is registered in England and Wales, company number 16866141. Our registered office address is available on the Companies House register. We are the data controller for the information we collect about our customers and website visitors, and a data processor for the mailbox, message and CRM data our customers connect to the service. Questions to [email protected].
2. What this policy covers
This policy covers the lanten.ai website, the Lanten web app and Outlook add-in, and the WhatsApp Business connection we provide. It explains what we collect, why, on what legal basis, who we share it with, how long we keep it and what rights you have.
3. Information you give us
When you sign up we collect your name, work email, agency name, the CRM you use and, for paid plans, billing details (handled by Stripe — card numbers never touch our servers). When you contact us, book a demo or subscribe to the blog we keep what you send us and the fact that you did.
4. Information we process on your behalf
When you connect a Microsoft 365 mailbox, a WhatsApp Business number or a CRM, Lanten processes the emails, messages, contacts, properties, tenancies and related records needed to provide the service: showing context beside a message, drafting replies and actions for approval, answering questions across your history, and syncing notes to your CRM. We process this under our customer agreement, as your processor; you remain the controller of your tenants’, landlords’ and applicants’ data.
5. How we use AI
Drafting, summarising, tagging and question-answering are performed by large language models operated by OpenAI under terms that prohibit training on our customers’ data and require zero retention after processing. Nothing you connect to Lanten is used to train any model, ours or anyone else’s. The writing style Lanten learns from a user’s sent replies is stored per user, within their organisation, and deleted with the rest of their data.
6. Legal bases
We rely on contract (to provide the service you signed up for), legitimate interests (to secure, support and improve the service, and to tell existing customers about relevant changes), consent (marketing to people who are not yet customers, and optional cookies) and legal obligation (tax and accounting records).
7. Who we share data with
Subprocessors who host and help us run the service: Supabase and Vercel (UK region), Microsoft (Graph, under your own tenant), Meta (WhatsApp Business Platform), OpenAI, Stripe (billing), Resend (transactional email), Mixpanel, Sentry and Axiom (analytics, error monitoring and logging). We publish the full list on our security page and give customers notice before adding to it. We do not sell personal data and we do not share it with advertisers.
8. Where data is stored
Customer data is processed and stored in the United Kingdom. Where a subprocessor operates outside the UK we rely on the UK International Data Transfer Agreement or an adequacy decision.
9. How long we keep it
Mailbox, message and CRM data is kept for as long as your subscription is active. When you cancel, or ask us to, we delete your organisation’s data within 30 days, except where we must keep records for tax or legal reasons. Backups are purged within 90 days. Website and enquiry data is kept for 24 months from last contact.
10. Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, object to or restrict processing, and take your data elsewhere. Email [email protected] and we will respond within one month. If your data is in a customer’s Lanten account — for example you are a tenant of an agency that uses Lanten — the agency is the controller and we will direct your request to them. You can complain to the ICO at ico.org.uk.
11. Cookies
The website uses strictly necessary cookies, and others only if you accept them in the banner: Google Analytics and Mixpanel to understand which pages people read, and Google Ads, the Meta pixel and LinkedIn Insight to measure our advertising. Nothing in those two groups is set until you accept, you can change your mind any time from the Cookies link in the footer, and the full current list is in the table below. The app itself uses session cookies to keep you signed in — no advertising or analytics cookies inside the product.
12. Changes
We will post changes here and, for material changes, email customers before they take effect.