Privacy Policy

Last updated: March 14, 2026

Lightspeed ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Lightspeed email client.

1. Information We Collect

Account Information: When you sign in with your Microsoft 365 account, we receive your name, email address, and profile photo through Microsoft's OAuth authentication. We do not store your Microsoft password.

Email Data: Lightspeed accesses your emails, calendar events, and contacts through Microsoft Graph API to provide core functionality. Email data is cached locally on your device using an encrypted SQLite database for performance. We do not store your email data on our servers.

AI Processing: If you enable AI features (smart replies, auto-drafts, summarization), email content may be sent to Google's Gemini API for processing. This is opt-in and requires you to provide your own API key. We do not have access to your API key or the data processed by Gemini.

Voice Data: Voice-to-text dictation runs entirely on your device using offline Whisper AI models. No audio data is transmitted to any server.

2. How We Use Your Information

To provide and maintain the Lightspeed email client
To authenticate you with Microsoft 365
To cache email data locally for faster access
To generate AI-powered features when explicitly enabled by you
To track your daily activity statistics (stored locally, not transmitted)

3. Data Storage & Security

All email data, settings, and activity statistics are stored locally on your device. We use industry-standard encryption for authentication tokens and sensitive data. No email content is transmitted to Lightspeed servers.

4. Third-Party Services

Microsoft Graph API: Used to access your Microsoft 365 data. Subject to Microsoft's Privacy Statement.
Google Gemini API: Used for AI features when you provide an API key. Subject to Google's Terms of Service.
Clearbit Logo API: Used to fetch company logos for sender enrichment. Only the sender's domain is transmitted.

5. Data Retention

Locally cached data persists until you sign out or uninstall Lightspeed. You can clear your local cache at any time through Settings. We do not retain any data on our servers.

6. Your Rights

You have the right to:

Access and export your locally stored data
Delete your local cache and all stored data
Disable AI features at any time
Revoke Microsoft 365 access through your Microsoft account settings

7. Children's Privacy

Lightspeed is not intended for use by individuals under the age of 13. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@lightspeed.email.