Privacy Policy

Lance ("we", "us") is operated by Auraful Inc. Lance runs an autonomous App Manager that operates your organization's App Store Connect account on your behalf. This policy describes what information we collect to do that, how we use it, and the choices you have.

Account information. Your name, email address, and authentication identifiers when you sign in, along with your organization's name and membership.

App Store Connect credentials. API keys, certificates, provisioning assets, and session material you provide or authorize so the App Manager can act on your account. These are stored encrypted in a secrets vault, are accessible only to the systems doing work you asked for, and are never shared with other customers or used for any other purpose.

Conversations and tasks. The messages, files, and instructions you exchange with the App Manager, and the records of the work it performs.

Usage and billing data. Credit consumption, plan status, and payment records. Payments are handled by our payment processor; we do not store your full card details.

Technical data. Logs, device and browser information, and cookies required to keep you signed in and the service secure.

We use your information to operate the service — including taking the actions on App Store Connect that you delegate to the App Manager — to bill for usage, to provide support, to keep the service secure, and to improve how it works. We do not sell your personal information.

Operating Lance involves sharing data with a small set of processors: Apple (to perform the App Store Connect work you request), AI model providers (conversation content is processed to run the App Manager), our payment processor, email delivery, and cloud hosting providers. Each receives only what is required to perform its function.

Credentials and secrets are encrypted at rest and scoped to short-lived, audited access. Sensitive material such as App Store Connect keys never appears in conversation transcripts. No method of transmission or storage is 100% secure, but we treat protecting your developer account as the core of the product.

We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations. You can ask us to delete your account and associated data, including stored credentials, at any time.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact us and we will honor these requests.

Lance is not directed to anyone under 13, and we do not knowingly collect personal information from children.

We may update this policy from time to time. We will post changes on this page and update the date above; material changes will be announced in the product or by email.

Questions about this policy or your data? Reach us at a0.dev/contact.