LangChain Privacy Policy

This document is LangChain's privacy policy governing the collection, use, storage, and disclosure of personal information in connection with LangChain's websites, LangSmith platform, open-source frameworks, and related services, with California Consumer Privacy Act (CCPA) and GDPR acknowledged as applicable frameworks. The policy states LangChain collects identifiers (name, email, username), device and usage data (IP address, browser type, operating system, pages visited, clickstream data), payment information processed via third-party processors, and content users submit through the services including AI model inputs and outputs (traces, prompts, completions). The policy authorizes sharing personal information with service providers, business partners, analytics vendors, and advertising partners, and reserves the right to share data in connection with business transfers including mergers, acquisitions, or asset sales; the document also states that LangSmith users' trace data, which may include sensitive AI workflow content such as prompts and model responses, is collected and stored by LangChain as part of the service. The policy engages GDPR and UK GDPR for EEA and UK users, CCPA for California residents, and potentially the EU AI Act given the nature of AI development tooling, with the policy providing rights mechanisms for data access, deletion, correction, and portability dependent on the user's jurisdiction. Material compliance considerations include the scope of AI trace data retention, the adequacy of consent mechanisms for international data transfers, and the operational question of whether LangSmith enterprise customers' data processing agreements are adequately addressed by this public-facing policy.