Privacy Policy

We handle visitor and account information for our own business purposes. When processing information submitted or connected by a business customer ("Customer Data") on its behalf, we follow its instructions and our applicable agreement. That agreement's protections continue to apply. For information supplied by your organization, contact its administrator; we can help direct your request.

We receive information from you, your organization, authorized integrations, and service providers, including:

• Account and communications: names, work emails, company details, roles, account identifiers, authentication information, inquiries, correspondence, and files.
• Business and AI content: connected ERP, inventory, purchasing, supplier and customer records; prompts, chats, relevant query results, AI outputs, and workflow actions.
• Device and activity: IP addresses, browser and device details, approximate location, referrals, page views, clicks, scrolling, time spent, session identifiers, logs, and session replays.

We use this information to provide Lark and requested AI features, manage accounts and transactions, offer support, improve and secure our services, communicate with you, measure marketing performance, investigate misuse, and meet legal obligations.

Where a legal basis is required, we rely on contract performance, legitimate interests in operating, improving, and protecting our business, legal obligations, or consent where required. You may withdraw consent where we rely on it.

Our website uses analytics and third-party visitor identification that may associate activity with a company. We use Google Ads for advertising measurement. These services may receive online identifiers, IP addresses, page information, and interactions. Advertising providers may combine this with information from other services.

Our application uses PostHog for analytics and session replay, associated with accounts, workspaces, and browser sessions. Recordings can include visible customer names, business records, inventory values, chat messages and responses, and ordinary form inputs. Replay is currently configured to exclude selected pages, including sign-in, connector, settings, and administrative pages. Controls aim to exclude credentials and redact recognizable secrets but cannot catch every sensitive value. Avoid entering passwords, API keys, or unnecessary sensitive information in ordinary fields or chat.

We use cookies, pixels, local browser storage, and similar technologies for authentication, preferences, analytics, and measurement. Browser and provider controls offer choices; blocking technologies may affect functionality and does not stop all collection. Application analytics are configured to respect browser Do Not Track signals; other website technologies do not necessarily do so. Third parties may track activity over time and across websites.

We disclose relevant information to providers supporting hosting, authentication, analytics, AI, communications, and business operations. AI providers may process prompts, Customer Data, and other inputs needed for requested outputs, depending on the feature, configuration, and agreements.

We also share information with your organization's authorized users according to permissions; at your direction, including through integrations; and when reasonably necessary for legal obligations, safety, fraud prevention, or business transactions such as a merger or acquisition, subject to applicable protections. Other services' policies govern information they handle independently.

Advertising and tracking may qualify as a "sale," "sharing," or targeted advertising under some laws. Contact us to exercise applicable opt-out rights.

Retention depends on our purposes, the information's type and sensitivity, the customer relationship, operational needs, and legal and contractual requirements. Customer agreements' retention and deletion requirements continue to apply.

We use technical and organizational safeguards, but cannot guarantee absolute security.

Depending on applicable law, you may have rights to access, copy, correct, or delete information; restrict or object to certain processing; withdraw consent; opt out of sale, sharing, or targeted advertising; appeal a decision; or complain to a privacy regulator. Conditions and exceptions apply.

Email founders@trylark.ai with your request and relationship to Lark. We may verify identity or authority. Authorized agents may make requests where permitted. To appeal where applicable, reply to our decision stating that you are appealing. We handle requests as required by law without unlawful discrimination.

Unsubscribe from marketing emails where offered or contact us. Necessary service messages may continue.

Lark is based in the United States. We and our providers may process information there and in other countries with different privacy laws, subject to applicable transfer requirements. Contact us about relevant arrangements.

Lark is for business use and is not directed to children under 13. Contact us if you believe a child has provided personal information.

We will post updates here with a revised effective date and provide additional notice of material changes where required by law.