Privacy Policy

Last updated 16 August 2026

Lantern is a video production tool operated by Lanternworx. This page describes what the service collects, why, who else sees it, and how to get it back or deleted. It covers studio.lanternworx.com and lanternworx.com.

What we collect

Only what the product needs to work. In practice that is four things.

• Your account. Email address, a display name if you set one, and a password stored only as a PBKDF2-HMAC-SHA256 hash — we never hold the password itself and cannot recover it for you.
• Your workspace. Organization names, who belongs to them, invitations, and your subscription tier.
• Your content. Video and audio you upload, media the service generates for you, transcripts, timelines, and the records of each production run — including the prompts and briefs you write.
• Operational records. Which AI operations ran, when, and what they cost, so that usage can be metered and billed.

We do not track you. There is no analytics provider, no advertising pixel, and no session-recording tool in this application. Cookies are used only to keep you signed in and to protect forms against cross-site submission — never for advertising, and never to follow you to other sites.

Who else processes it

Running the service means passing some data to other companies. Each is named here with what it receives and why. We do not sell your data, and we do not share it for advertising.

• Cloudflare — hosting, storage and delivery. Your uploaded and generated media lives here.
• Neon — the database holding account records.
• OpenAI, Anthropic, Google, ElevenLabs, Runway — the AI models. They receive the text and media that a step needs in order to run: your brief, script, narration, or an image or video to work from.
• Freesound — when you search or import from the sound library, your search term is sent to Freesound.
• Stripe — payments. Card details go directly to Stripe and never reach our servers.
• Resend — transactional email, such as password resets.

Connecting a YouTube channel

If you choose to connect a YouTube channel, you grant access through Google’s own consent screen. We ask for the narrowest scopes that do the job:

• youtube.upload — to upload the video you asked us to publish and set its thumbnail.
• youtube.readonly — to read your channel’s name and picture, so the app can show you which channel is connected.

We use this access only to publish videos you explicitly ask us to publish. We do not read your existing videos, your analytics, your comments, or your subscribers. Access tokens are stored encrypted and are never shown to anyone, including us.

You can disconnect at any time from your account settings, which revokes the token at Google immediately. You can also revoke it yourself at myaccount.google.com/permissions. Videos already published stay on your channel and are yours — removing them is done on YouTube.

Lantern’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How long we keep it

Your content stays until you delete it or close your account. Deleting an organization deletes its projects, media and timelines. Closing your account removes your personal details and frees your email address for reuse; a minimal record is retained for billing history and abuse prevention.

Your rights

You can see and correct your details, download your media, and delete your content or your whole account from within the app at any time. If you are in the UK, EU or another region with data protection law, you also have the right to a copy of your data, to object to processing, and to complain to your data protection authority.

Children

Lantern is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that materially affects you, we will say so in the app before the change takes effect rather than quietly updating the date at the top.

Contact

Questions, requests, or anything that looks wrong: privacy@lanternworx.com.