Privacy Policy

Last updated: January 12, 2026

At Luciditi, protecting your privacy and data security is our top priority. This Privacy Policy explains how we collect, use, and protect your information when you use our AI agent platform and file analysis services.

Your Uploaded Files

Files you upload to create knowledge bases and train AI agents remain your property. We never use your files to train our models or share them with third parties.

Zero Data Training

Unlike generic AI services, we do not train on your data. Your invoices, contracts, reports, and other sensitive files are processed using RAG (Retrieval-Augmented Generation) technology and deleted after processing unless you explicitly choose to save them.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and billing information (processed securely via Stripe). This is used solely for account management and service delivery.

Usage Data

We collect non-personal usage data like IP addresses, browser types, and aggregate analytics to improve service reliability and performance. This data is anonymized and cannot identify you.

Cookies and Analytics

We use essential cookies for functionality and optional analytics cookies (Google Analytics) to understand usage patterns. You can manage preferences in your browser settings or our cookie banner.

GDPR Compliance (EU Users)

  • Right to Access: Download your account data anytime from settings
  • Right to Delete: Permanently delete all files and account data instantly
  • Data Portability: Export your agents, conversations, and files
  • Data Processor Agreements: Available for Business plan customers

How We Use Your Information

Service Delivery

  • Process your uploaded files through AI agents
  • Deliver accurate responses based on your specific files
  • Manage billing and account subscriptions
  • Enable team collaboration features

Communications

  • Send service updates, billing receipts, and feature announcements
  • Respond to support tickets and inquiries
  • Optional: Marketing emails (unsubscribe anytime)

Data Sharing and Third Parties

Service Providers Only

We share minimal data with trusted providers under strict contracts:

  • Stripe: Payment processing (never see full card details)
  • Cloudflare: CDN and security
  • AI Providers: File processing only (no training, immediate deletion)

No Data Selling

We never sell your data or use it for advertising. Your files and conversations stay private between you and our secure processing infrastructure.

Data Security

  • Files encrypted at rest and in transit (AES-256)
  • Temporary processing servers (files deleted after 24h max)
  • Regular security audits and penetration testing
  • GDPR-compliant data processing agreements available

Data Retention

  • Your Files: Deleted after 30 days inactivity unless saved to knowledge base
  • Account Data: Retained while subscription active + 90 days post-cancellation
  • Conversations: Available for download/export anytime

Your Rights

EU/UK GDPR Rights

Access, rectify, delete, object, restrict processing, and data portability. Use dashboard controls or email privacy@luciditi.app.

Global Rights

Account deletion available to all users. Download data export from settings. Contact support for assistance.

International Data Transfers

EU data stays in EU. US data processed in US. All transfers use Standard Contractual Clauses (SCCs) and additional security measures per GDPR Article 46.

Changes to This Policy

We may update this policy. Significant changes will be emailed to users and posted here with the updated "Last updated" date at the top.

By using Luciditi, you agree to this Privacy Policy. Your trust is our priority.