Reef by Lobster Computer
Effective: September 2, 2026
This Privacy Policy explains how Lobster Computer, Inc. ("Lobster", "we", "us") collects, uses, discloses, and retains personal information through the websites, applications, AI features, integrations, and related services offered under the Reef name (collectively, the "Service").
Third-party services connected to the Service process information under their own terms and privacy policies.
We collect:
User content and connected-account information may include personal information about other people.
We use personal information to:
We may send the portions of user content and connected-account information needed to fulfill a request to AI model providers. Those providers process the information to provide model inference and related services to us.
We may use user content to develop, evaluate, train, or improve generalized AI models. You may opt out of this use going forward through any training control we make available or by emailing privacy@lobstercomputer.com. The opt-out does not remove content from models trained before we process the request.
We may use content flagged for safety review to detect abuse, enforce our policies, or improve safety systems where permitted by law and applicable provider terms.
We do not use or transfer Google Workspace, Slack, or Zoom data to create, train, or improve generalized AI models. We use that data only to provide the user-facing features requested through the Service, including a specific user's personalized experience where permitted.
Other connected-provider information is excluded from generalized model training when the provider's terms or the permissions granted by the user prohibit that use.
We do not sell personal information or use it for targeted advertising.
We may disclose personal information:
When you connect an external account, we access and use its information only within the permissions granted during authorization. Disconnecting revokes our use of the stored credential and stops future access through that connection. It may not stop an action already underway, reverse a completed action, or automatically delete information already copied or shared.
You may request deletion of eligible connected-account information through any control we make available or by emailing privacy@lobstercomputer.com.
When you connect Google, the Service may access your Google account identity; email messages and attachments; calendar events; tasks; and files in Google Drive, including Docs, Sheets, and Slides. Depending on the permissions you grant, the Service may read, create, edit, send, share, organize, or move this information to trash at your request.
Our use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
We use Google Workspace data only for user-facing features requested through the Service. We transfer it only with the user's consent as needed for those features, for security, to comply with law, or as part of a business transfer after obtaining explicit prior consent. We do not sell or transfer it for advertising, data brokerage, credit or lending decisions, or generalized AI or machine-learning model training beyond a specific user's personalized feature.
Humans do not read Google Workspace data unless the user explicitly consents to access to specific data, access is necessary for security or legal compliance, or the data is aggregated and anonymized for lawful internal operations.
If you connect Slack, we may process messages, files, conversation metadata, member and channel information, credentials, and action results. Access depends on the permissions shown during authorization. Some Slack connections are read-only; others may send messages or files.
Your personal Slack authorization does not expand your permissions in Slack. After Slack content is copied or shared into the Service, access to that copy follows the Service permissions for the relevant collaborative area. We do not sell Slack data, use it for advertising, or use it to train general-purpose AI models. See the Slack connection and removal guide for current permissions and removal instructions.
If you connect Zoom, we process account information, OAuth credentials, and meeting details needed to read, create, list, or delete meetings at your request. Records of requested and completed Zoom actions may include meeting details returned by Zoom. This connection does not request access to meeting recordings or transcripts.
We require service providers that receive Zoom Personal User Data to provide the same or equivalent protection required by Zoom's developer rules. See the Zoom connection and removal guide for current permissions, retention information, and removal instructions.
We use third-party analytics services for product analytics, performance monitoring, error reporting, heatmaps, and session replay. These services may receive account and organization identifiers, email address, name, device and technical information, and information about interactions with the Service. We configure them to limit the capture of page content, sensitive form values, private identifiers, and network content. They and the Service may use cookies or similar browser storage to associate events with a session or account.
We retain account information and user content while the relevant account or collaborative area is active and as otherwise needed to provide the Service. We use active connected-account credentials until the account is disconnected, the grant is revoked, the Reef account is deleted, or the credential expires. Revoked credentials and records of the connection may remain where reasonably necessary for security, auditing, or legal compliance.
We retain analytics, diagnostic, security, support, and action records for as long as reasonably necessary for their stated purposes. Limited copies may remain in backups or records retained for legal compliance, dispute resolution, security, or abuse prevention. Information shared with other users or external services may remain with those recipients after you disconnect or leave.
We use administrative, technical, and organizational safeguards designed to protect personal information, including measures to protect credentials and information in transit and at rest. No service can guarantee absolute security.
Subject to an organization's settings and administrator controls, you may manage sharing and permissions through the Service, disconnect external accounts, revoke Google access at myaccount.google.com/permissions, request account or connected-data deletion, or opt out of generalized AI-model training going forward.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. To make a request, email privacy@lobstercomputer.com. We may verify your identity and will respond as required by applicable law.
Account deletion removes login authority and begins deletion of associated account data. Information may remain where another user independently provided it, where it is needed to preserve a shared record, or where a retention exception described above applies.
Lobster is based in the United States. We and our vendors may process information in the United States and other countries with different data-protection laws from those where you live.
The Service is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. Contact us if you believe someone under 18 has provided personal information through the Service.
We may update this policy. We will post the revised policy and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when appropriate.
Privacy questions or requests: privacy@lobstercomputer.com
Lobster Computer, Inc., 153 Miller Ave, Mill Valley, CA 94941-5502, United States