Draft, to be reviewed by Lucas
Last updated 1 November 2026
Privacy policy
Lane Four Holding BV (the Netherlands, KvK [KVK]) is responsible for your data in Office Hours. This page says what we keep, where, and why, in plain words.
What stays on your Mac
Your university sign-ins (kept in your Mac’s Keychain), what the app reads from your university (your timetable, deadlines and lecture files), and your listening history. We never receive your university password.
What we keep on our servers
- Your account: your email, how you signed in, your university, and your subscription status. Stored with Supabase in London.
- Your modules: which modules you take, so you get their episodes.
- Lecture material: one copy of each lecture’s slide text and recording captions per module, to make its episode, shown only to students who say they take that module. Stored in London.
- Your questions and answers, and how much you used each day (questions, talking time), to run the daily limits.
- The waitlist: your email and university, to tell you when it opens. Deleted when you join or ask.
Our service runs on Google Cloud in London (Cloud Run).
Who else sees what
- Anthropic (Claude): the text of your lecture material and your questions, to write episodes and answers.
- ElevenLabs: the text of episodes and answers, to turn it into speech.
- Deepgram: your voice while you talk to an episode, to turn it into text. Only while the microphone is on.
- Paddle: your payment details and billing address. We never see your full card number.
- Resend: your email address, to send sign-in codes and reminders.
- Google and Apple, only if you sign in with them: they confirm who you are and give us your email address (with Apple’s “Hide My Email”, a private relay address). They don’t see your lectures or questions.
These companies only process data for us, under data processing agreements. Where a company offers to use data to improve its models, we switch that off. Some are in the United States; transfers are covered by the EU and UK standard contractual clauses, or the EU–US Data Privacy Framework and its UK extension.
Why we use it
To provide the service you signed up for (your contract with us), to take payment and keep accounts (legal duties), and to keep the service safe and fair (our legitimate interest). We don’t sell your data and don’t show ads.
How long we keep it
As long as you have an account. When you delete your account, we delete your data within 30 days, except what the law makes us keep for tax (payment records, 7 years, kept by Paddle and us). Shared episodes of a module stay for its other students, without anything that identifies you.
Your rights
You can ask for a copy of your data, have it corrected, or have it deleted, by writing to hello@officehoursonline.com. We answer within one month. You can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens) or the one where you live, such as the ICO in the UK.