Draft. This document is a starting draft, not legal advice. It must be reviewed by a qualified lawyer before launch.
Privacy Policy
Last updated: 26 June 2026
This Privacy Policy explains how LAST collects, uses, and protects your personal data. Because we operate from the EU, we aim to follow the GDPR (DSGVO). This is a draft pending legal review.
1. Who we are (Data Controller)
- LAST is the controller of your personal data. Contact us at support@uselast.com. A full legal entity name and address will be added once the business is registered.
2. What we collect
- Account data: email address and authentication details when you sign up.
- Waitlist data: your email address if you join the waitlist.
- Content data: the prompts you write and the images/videos you generate.
- Payment data: handled by Stripe; we never see or store your full card details.
- Usage data: basic analytics (pages visited, device/browser) to improve the product.
3. Why we use it (Legal bases)
- To provide the service and your account (performance of a contract).
- To process payments and prevent fraud (contract and legitimate interest).
- To send you service and early-access emails (consent / contract).
- To improve and secure the product (legitimate interest).
4. Who we share it with (Processors)
- Supabase (database, authentication, storage).
- Vercel (hosting and analytics).
- Stripe (payments).
- AI model providers (e.g. Replicate) to generate your content from your prompts.
- We do not sell your personal data.
5. International transfers
- Some processors are based outside the EU (e.g. the US). Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. How long we keep it
- Account and content data: while your account is active and for a reasonable period afterwards.
- Waitlist data: until launch or until you ask us to remove it.
- See our Data Retention Policy for more detail.
7. Your rights (GDPR)
- You have the right to access, correct, delete, restrict, or port your data, and to object to certain processing.
- You may withdraw consent at any time and lodge a complaint with your local data protection authority.
- To exercise any right, email support@uselast.com.
8. Cookies
- See our Cookie Policy for how we use cookies and similar technologies.
9. Changes
- We will post any changes on this page and update the date above.