Privacy Policy
Lares is a household bills connector for Muse, Meta's personal AI agent. It retrieves bills from the electricity, water, internet, mobile, garbage, and other household service accounts you choose to connect, and makes them available to your Muse so you can ask what you pay and why. This policy explains what information we handle, how we use and protect it, and the choices you have. “Lares”, “we”, and “us” mean LNM LLC.
Lares is independent of Meta. Muse itself is governed by Meta's terms and privacy policy, including what Muse stores about your conversations.
The short version
- We collect only what's needed to retrieve and explain your household bills.
- Your provider passwords are encrypted on your device before they reach us. Only our automated sign-in system can decrypt them, and our staff can't view them.
- Lares is read-only today. It can't pay, change, or cancel anything with your providers.
- We don't sell your personal information, use it for advertising, or use your bills or passwords to train AI models.
- You can disconnect a provider or delete all of your data at any time.
Information we collect
Your Lares account
When you add Lares to Muse and tap Allow, we create an account identifier for you. We don't receive your name, contact details, or Meta account information from Muse.
If you choose to set up your account with an email address and password, we store your email address and a one-way hash of your password. We use them to let you sign in to your account page, recover your account if you re-add Lares, and send you service messages.
Provider sign-in details
To retrieve your bills, you give us the details you use to sign in to each provider you connect, such as a username or email, a password, and sometimes an account number or ZIP code. You enter them on a secure Lares page, never in the Muse chat. They're encrypted in your browser before they're sent, stored only in encrypted form, and can be decrypted only by our automated system that signs in to your provider, using keys held in a hardware-backed key management service.
If a provider asks for a one-time verification code, you enter it on a secure Lares page. It's encrypted so that only the sign-in session waiting for it can read it, used once, and deleted within 5 minutes.
Bill information
From your connected accounts, we retrieve billing information such as statements, amounts due, due dates, billing periods, charges, fees, taxes, credits, usage (for example kilowatt-hours, gallons, or data), plan names, service addresses, and the last few digits of account numbers. We store a full account number only as a one-way keyed hash, which we use to avoid duplicates.
Requests from Muse
When you ask Muse about your bills, Muse sends us a request, for example “bills from August” or “my electricity account”. We don't receive your conversations with Muse, only the requests Muse makes to Lares on your behalf.
Technical and security information
We keep operational logs and security records, such as connection attempts, errors, timestamps, and an audit trail of actions like connecting or disconnecting a provider. These records are designed to exclude passwords, verification codes, and cookies. Our website and account pages use one cookie, only to keep you signed in to your account page. We don't use advertising or analytics cookies.
How we use information
- To provide Lares: connect your providers, retrieve and organize your bills, check their math, and answer Muse's requests on your behalf.
- To keep your bills up to date: we refresh connected accounts periodically (currently about weekly) and whenever you ask.
- To tell you when something needs attention: for example a provider asking you to sign in again or enter a code, or a bill coming due. We do this through Muse and, if you've added one, by email.
- To keep Lares secure: prevent fraud and abuse, investigate problems, and meet legal obligations.
- To make connections more reliable: we measure how well we connect to each provider using operational statistics, such as success rates and timing, not the contents of your bills or your sign-in details.
Features we plan to add
We intend to grow Lares from understanding your bills to helping you manage them. As we add these features, this is how your information will be used:
- Monitoring and alerts: noticing new bills, price increases, new fees, expiring promotions, unusual usage, and upcoming due dates.
- Insights and savings: explaining changes and suggesting ways to save, such as a better plan or provider. To do this we may compare your bills with publicly available rate and plan information. If a suggestion involves another company, we won't share your information with it unless you ask us to.
- Actions on your behalf: such as paying a bill, enrolling in a lower-cost option, or changing or cancelling a service. We'll take an action only after you explicitly approve that specific action. Payment features will use regulated payment processors, and we'll describe what they collect before you use them.
- Other ways to get your bills: with your authorization, we may retrieve bill data through providers' official data-sharing programs or through bill-data partners instead of signing in to your provider's website.
If we want to use your personal information in a way that's materially different from what this policy describes, we'll update this policy and ask for your consent where the law requires it.
Aggregated and de-identified information
We may create aggregated or de-identified information that can't reasonably identify you, for example how reliably we connect to a provider, or typical bill ranges in an area, and use it to operate and improve Lares. We won't attempt to re-identify it.
How information is shared
We don't sell your personal information or share it for cross-context behavioral advertising. We share information only:
- With Muse, at your direction. When Muse asks on your behalf, we return the relevant bill information to your Muse. What Muse does with it is governed by Meta's policies.
- With your providers. Our automated system uses your sign-in details only to access your own accounts with the providers you connected.
- With service providers who operate Lares for us under contracts that limit their use of your information: cloud hosting, database, and key management (Google Cloud), our website host (Vercel), email (Zoho, and a transactional email service), and, as we add them, AI services that help our automated system read provider websites and statements. These AI services may not use your information to train their models.
- For legal reasons: if required by law, or to protect the rights, safety, and security of our users, the public, or Lares.
- In a business transfer: such as a merger or acquisition, subject to this policy.
How long we keep information
- Provider sign-in details are kept until you disconnect that provider or delete your data. Disconnecting deletes them immediately.
- Verification codes are deleted as soon as they're used, and within 5 minutes in all cases.
- Bills and account information are kept while your account is active so you can see your history. You can delete them at any time.
- Inactive accounts: if Muse hasn't accessed your account for 180 days, we delete it and all of its data. If you've added an email address, we'll email you 14 days before.
- Security and audit records are kept as long as needed for security and legal purposes. When you delete your data, they're detached from your account.
- Backups are encrypted and overwritten within 35 days.
Security
We encrypt data in transit and at rest. Provider sign-in details are encrypted on your device and stored in a separate encrypted form that only our automated sign-in system can decrypt. Access to decryption keys is restricted to that system and monitored. Our staff can't view your sign-in details. No system is perfectly secure; if a security incident affects your information, we'll notify you and the authorities as required by law.
Your choices and rights
- Disconnect a provider: ask Muse, or use your account page. This stops all retrieval and deletes that provider's sign-in details.
- Delete everything: ask Muse for a link to your Lares account page and choose “Delete all my data”, which takes effect immediately, or email us.
- Access, correct, or get a copy: email help@uselares.com.
- Stop Lares entirely: remove Lares from Muse's connector settings. Your data is then deleted under our inactivity policy, or right away if you delete it first.
Depending on where you live, including California, you may have the right to know what personal information we collect and how we use it, to access, correct, and delete it, to receive a copy, and not to be discriminated against for exercising these rights. We don't sell or share personal information as those terms are defined under California law. To exercise a right, email help@uselares.com. We'll verify your request, respond within the time the law requires, and you may use an authorized agent.
Children
Lares is for adults. It isn't intended for anyone under 18, and we don't knowingly collect information from children.
Where we operate
Lares is offered in the United States, and we store your information in the United States.
Changes to this policy
We'll post any changes here and update the effective date. If a change is material, we'll tell you in advance through Muse or by email.
Contact
LNM LLC, 35357 Terra Cotta Cir, Fremont, CA 94536
Email: help@uselares.com