Privacy Policy

We collect three buckets of data:

• Account information — your name, work email, company, and the payment method you provide when upgrading from the Free plan.
• Usage data — request volume, function execution counts, error rates, and similar telemetry needed to operate and bill the service.
• Content you upload — your code, schemas, database rows, logs, and any files you push to Lambda Storage. This is your data; we process it on your behalf.

We do not collect biometric data, precise location, or content from third-party services unless you explicitly connect them.

We use your information to:

• Run the Lambda platform — execute your code, store your data, send you transactional emails about deploys and incidents.
• Bill you accurately and detect fraud or abuse.
• Improve the product — aggregated, anonymized usage data informs which features we build next.
• Comply with the law — tax records, audit trails, lawful subpoenas.

We do not sell your data, and we do not use your code or database contents to train AI models.

We share data only with vendors that help us run the service — payment processors, transactional email providers, error monitoring, and customer support tooling. Each is bound by a Data Processing Agreement and listed in our subprocessors page.

We will disclose data in response to a valid legal process. If we receive a subpoena that targets your account, we will notify you unless legally prohibited.

Account data is kept while your account is active and for 30 days after cancellation, after which it is permanently deleted. Backups are pruned within 90 days. Anonymized analytics may be retained indefinitely.

You can export a full Postgres dump and Storage archive at any time from the dashboard.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing or withdraw consent

To exercise any of these rights, email privacy@lambda.dev. We respond within 30 days.

Our marketing site uses a single first-party analytics cookie to count unique visitors. The product dashboard uses session cookies strictly necessary to keep you signed in.

We do not use third-party advertising trackers. We do not use Google Analytics. There is no banner because there is nothing to consent to.

Lambda is a US-headquartered company with infrastructure in 38 regions worldwide. By default, your data is stored in the region closest to where you sign up. Enterprise customers can pin a primary region and prevent cross-border replication.

Where data crosses borders, transfers are governed by Standard Contractual Clauses and our published DPA.

Lambda is a developer tool intended for use in a professional context. We do not knowingly collect data from children under 16. If you believe we have collected such data, contact us and we will delete it.

We may update this policy as the product evolves. Material changes will be announced 30 days in advance via email and a banner in the dashboard. Past versions are kept in our policy changelog.