Privacy
Last updated 17 October 2026
The short version. Lemo has two products, and each keeps data its own way. Lemo Studio (the chat and Lemo Studio Luau) signs in with Google; Discord is optional there. Lemo AI (the Discord bot and the dashboard) signs in with Discord. We store what you write so you can find it again, and we send it to the AI providers named below to get an answer. We do not sell your data, and we do not use it to train any model. You can delete everything yourself, at any time, from Settings.
Who we are
Lemo is run by an individual operator, referred to as “we” here. For the data described in this policy, we are the controller. Contact details are in the section called Contact.
Two products, two sign-ins
Lemo Studio
Signs in with Google
A general AI chat with features, including Lemo Studio Luau for Roblox. Discord is optional and only needed for Discord features.
- Your chats, memory, files and pictures
- Your Google account details
- Discord details, only if you link Discord
Lemo AI
Signs in with Discord
A Discord bot and a web dashboard for managing servers.
- Your Discord account details
- The settings and records of servers you manage
- Your Credits and game balances
Lemo Studio
What you give us
- Messages and replies, including the reasoning Lemo writes before it answers. You can open that reasoning in a chat. It is never included in a shared link.
- Files you attach. Only the extracted text is kept, and the file itself is discarded. Pasted pictures are kept as pictures, because a picture has no text to extract.
- Pictures you ask Lemo to draw, with the prompt you wrote.
- Voice. What you say is turned into text and the audio is not kept. A spoken reply is generated from the text of the reply and held for about a minute, so your device can play it.
- Standing instructions, projects and their files, and skills you write or install.
- Memory, which is short facts Lemo writes down about you when they seem worth keeping, and scheduled tasks and the reports they produce.
- Connections: a Roblox Studio plugin you pair, and an editor connection you set up for an MCP client.
What we keep about your account
- From Google sign-in: your Google account number (the one Settings → Account shows as your UID), your email address and whether Google verified it, the name and profile picture on that account, the date you first signed in, and which version of the terms you accepted. We never see your Google password.
- From Discord, if you link it: your Discord user ID, username and avatar, and the list of servers you manage. The Discord access token is held only in your session on our server.
- Your session. It lives on our server for up to 30 days. Your browser holds a session cookie and nothing else for sign-in.
Who receives it
| Who | Based in | What they receive | Why |
|---|---|---|---|
| DeepSeek | China | Your message, the recent conversation Lemo needs to follow it, attached text, memory and standing instructions. For a Luau build: the paths, classes and line counts of the scripts and wiring in the connected place, and the source of any script Lemo reads. | Chat replies in Studio and Luau, memory extraction, and one short request that decides whether a message needs a web search. |
| Google, through its Gemini models and sign-in | United States | Search terms, and any page you ask Lemo to read. Voice: your speech, for transcription, and the text of spoken replies. Pictures you ask for. For sign-in, your Google account number, email and name. | Web search, reading links, voice, pictures and sign-in. |
| Discord | United States | Sign-in, and the actions Lemo takes in servers you manage. | The Discord features. |
| Railway | United States (San Francisco) | Everything we store. | Hosting and the database. |
We send each provider only what it needs for the request. What a provider does with the requests it receives is governed by its own terms, which are outside our control. That is why they are named here rather than hidden.
Search, links, voice and pictures
- Search. When Search is on for a message, Lemo sends the search terms to Google and gets results back. The sources are kept with the reply. We count your searches for the usage allowance. We do not keep a list of what you searched for.
- Links. When you paste a link and ask about it, Google fetches the page to read it.
- Code. Lemo runs small programs for calculations and previews inside your own browser, in a locked frame with no network access. Nothing runs on our machines.
Roblox Studio
- You install the Lemo plugin in Roblox Studio on your own computer and pair it once with a code. After that it uses a token to reach your account. Disconnect at any time from the connect panel.
- While it is connected, Lemo reads the paths, classes and line counts of the scripts and wiring in the open place. It reads the source of a script only when Lemo reads or opens it.
- Lemo changes your place only through a build you asked for. Each build is one undo step in Studio. The code in a build and its result are kept with your account until you delete everything.
Memory and standing instructions
Lemo keeps a short list of facts about you that apply across your chats. It never keeps passwords, keys, tokens, card numbers or your Credit balance. You can read and delete every fact in Settings → Memory. Standing instructions are in Settings → Personalisation.
Shared links and skills
- A shared link publishes a copy of a chat as it was when you shared it: the messages and the pictures in it. It does not include the reasoning, your name or your account. It is unlisted and marked so search engines do not index it. Revoking the link deletes that copy.
- A published skill can be read by anyone with its link, with its instructions in full. A skill someone else installed is their own copy.
How long we keep it
| What | How long |
|---|---|
| Chats, messages, files, pictures, memory, instructions, projects, skills, shared links, scheduled tasks and their reports | Until you delete them, or delete everything. |
| Sessions | Up to 30 days. |
| IP addresses (sign-ins, linking Discord, contact tickets) | 30 days, then deleted. Deleted with your account at once. |
| Usage counts: the tokens each message used, and how many searches and pictures were made. No message or picture content. | About 45 days, then removed. Erasing your data does not remove them early, so it cannot reset your allowance. |
| Spoken reply audio | About a minute, then removed. Audio you speak is not kept. |
| Contact tickets and the team’s replies | Until you delete your account. Then they are removed with it. |
| Roblox builds and their results | Until you delete everything. |
| Games made in the games channel, with the idea you described | Until you delete everything or delete your account. Then the game and its link are removed. |
| The record of changes Lemo made to a Discord server, kept so they can be undone | Part of that server’s record. See Deleting your data. |
Lemo AI
What we store
- Your Discord user ID, username and avatar, and your Credit balance, plan expiry and a record of what was spent, with the server it was spent in.
- Each server’s settings: the bot’s personality, moderation rules, and channel choices.
- Warnings and timeout records, kept per server. A warning in one server never travels to another.
- Reminders you set, with their text.
- Server backups that an administrator makes with the bot’s backup command. A backup records a server’s channel and role structure. Lemo does not take them automatically.
- Economy and XP: your lemon balance, garden and level. These are global to your account, by design.
- Games you make in the games channel: the idea you described, the game Lemo built from it, and your Discord user ID. A game is public at its link, and anyone with the link can play it without an account. We check your Discord ID to allow one game every 20 minutes.
- Bot-wide counters, such as how many replies were given. They hold no personal data.
What the bot reads
- In a server where the bot is active, it reads the messages it replies to. It keeps the last few messages of a conversation in its memory so it can follow on. That memory is not written to the database and is cleared when the bot restarts.
- Super Security is off by default and is turned on by a server’s administrators. When it is on, the bot checks messages in that server. Its verdicts and any warnings are stored against that server only. Nothing is ever deleted by it.
Direct messages
Direct messages to the bot were answered by a support agent until 15 October 2026. Those messages, and any support tickets, are kept until you ask us to delete them. The bot no longer answers direct messages.
Contact tickets
When you open a ticket on the Contact page, the ticket and everything written in it is kept, including the Lemo AI team’s replies, so you can read it again and download it as a transcript. Only the owner of Lemo AI can add or remove team members, and team members can read every ticket. Before they answer, they see a short summary of the account it belongs to: its name, how it signs in, its Discord ID if it has one, its Credits, the servers it pays for, when it joined and whether it has early access. They never see your email address or anything you sign in with. Replies from the team are shown as from the Lemo AI team, not from the person who wrote them. When the team answers a ticket or marks it solved, the Discord bot may send you a direct message, if your account is linked to Discord. Deleting your account removes your tickets.
Cookies, local storage and fonts
- We set a session cookie to keep you signed in. Google’s sign-in button may also set a short-lived cookie to protect the sign-in. We set no advertising cookies and no analytics cookies.
- No third-party analytics or tracking code is loaded on any page.
- Some preferences, such as whether Enter sends a message, are kept in your browser’s local storage on your device, not on our servers.
- Fonts are served by Lemo itself. Nothing is sent to Google to show a page’s text.
Deleting your data
You do not need to ask us, and you do not need to wait.
- One chat. The ⋯ menu beside it in the sidebar. You can save a copy of it as Markdown from the same menu.
- One memory. Settings → Memory.
- Standing instructions. Settings → Personalisation.
- A shared link. Revoke it from its share sheet.
- A Roblox Studio connection. Disconnect it in the connect panel.
- Discord. Unlink it in Settings → Account. Your Google account stays.
- Everything. Settings → Data controls → Delete everything, then type
DELETE EVERYTHING. This removes your chats, messages, files, pictures, memory, instructions, projects, skills, shared links, scheduled tasks and their records, Roblox links and builds, and editor connections. It takes effect immediately. Usage counts stay for the period in the table above, so erasing cannot reset your allowance. - Your account. Settings → Data controls → Delete my account, then type
DELETE MY ACCOUNT. This does everything Delete everything does, and also removes your sign-in details, your IP addresses, your Lemo AI balance and the records tied to your Discord ID, such as your economy, XP, reminders, support messages, contact tickets and early-access entry. It signs you out on every device.
Delete everything keeps five things. Your sign-in account, so you can keep using Lemo. The record of changes Lemo made to a Discord server, which belongs to that server and is kept so the change can be undone. The settings and warnings of any Discord server you manage, which belong to that server. Any entry on the early-access list, if you were given one. And your usage counts, for the period in the table above, so that deleting data cannot reset your allowance. Copies other people installed from your skill are theirs. Copies held by the AI providers are governed by their own terms.
Deleting your account removes your sign-in, so you cannot sign in again with that account. Credits still on the account are lost, your contact tickets are removed, and any Discord server you paid for stops getting Lemo AI until someone else pays for it. The server itself, its settings, its warnings and any roles it is holding to give back to you after a timeout stay exactly as they were. Your usage counts are kept for the period in the table above, then removed. The owner’s account cannot be deleted from Settings.
Security
- Everything is sent over HTTPS.
- Your session is kept on our server, not in your browser.
- Shared links are unguessable and unlisted.
- A Roblox pairing code works once and expires after a short time.
- Our servers see your IP address as any web server does, but we keep it only in the cases described under IP addresses below, and it is stored encrypted.
Children
Google and Discord accounts are for people aged 13 or older, and older where the law says so. Lemo is not for anyone below that age. If we learn that we hold data about someone younger, we delete it.
You are talking to an AI
Lemo is an artificial-intelligence assistant, not a person. It is sometimes wrong, including when it sounds certain. Do not rely on it for legal, medical or financial decisions, and check anything that matters.
Your rights
If you are in the UK, the EU or another place with data-protection law, you can ask for a copy of your data, ask us to correct or delete it, restrict or object to its use, and ask for it in a portable form. Any chat can be saved as Markdown from its ⋯ menu. For anything else, use the contact in the section below.
You can also complain to your national data-protection authority. Our lawful basis is providing the service you ask for, and our legitimate interest in keeping it secure and free of abuse. Some providers are outside the UK and the EU, as the table above shows.
IP addresses
We record your IP address in three cases, and only these: when you sign in with Google or with Discord, when you link a Discord account to your account, and when you open a contact ticket. Nothing else is recorded.
Each address is stored encrypted. The key is held by the server, not kept in the database.
Only the owner of Lemo AI can read the addresses, and only after signing in with Discord within the last 30 minutes. Team members who answer contact tickets never see them.
Addresses are deleted automatically 30 days after they are recorded. The owner’s record of who looked at them is kept for 90 days, and it never contains an address.
Deleting your account deletes your addresses at once. Delete everything leaves them to expire on their own, within 30 days.
Addresses are used for security, to spot unusual sign-ins and abuse. They are not sold and not sent to any provider.
Rate limits count requests by address in the server’s memory and do not keep them.
Changes
If this policy changes in a way that matters to you, we update the date at the top and say so in the official Lemo AI Discord server.
Contact
Delete everything and Delete my account need nobody’s permission, so use them for your own data first. For anything else, open a ticket on the Contact page. You sign in first, so the team knows which account it is about.
This page describes what Lemo does as it is built today. When the code changes what is stored or who receives it, this page changes with it.