Lavender
Lavender · Writing · US · lavender.ai
services/lavender.yamlVendor data-handling terms
“As soon as Lavender is finished analyzing and helping you with your email, it is immediately deleted.”
“In compliance with GDPR, CCPA, and other data privacy acts, users can easily and automatically delete any data we have on them from our servers.”
The short policy names no hosting region.
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.lavender.ai | api | observed |
| app.lavender.ai | app | observed |
| lavender.ai | app | observed |
Assessment
Reasoning: A sales-email coaching extension that reads drafts in the mailbox. Immediate deletion after analysis is a strong statement, but the policy is a few paragraphs long with no region and no training statement, and the extension sits inside the corporate mailbox.
Flags: Reads email drafts in the mailbox · Region and training-use not stated · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Deletion terms verified against the Lavender privacy policy; region not stated.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Spotted something wrong or out of date? Send it with the source. Changes are checked and recorded in the changelog.