Privacy Policy
Summary of our Privacy Policy (Last updated on: 20 Feb 2024.)
LucidPoint is committed to respecting and protecting the personal information of individuals who visit our network of websites, as well as the personal information of our customers ("covered individuals"). Personal information includes any data by which an individual can be identified or located (for instance, a person’s name, address, phone number or email address). This Privacy Policy will help you understand how we collect and use the personal information you share with us, and it describes your choices regarding use, access, correction and deletion of any personal information you share with us. By using or accessing the LucidPoint websites, you are accepting the practices described in this Privacy Policy.

This policy does not apply to third-party websites, products, or services even if they link to our services, and you should consider the privacy practices of those third parties carefully.  By using our websites and our services, you authorize the collection, use, storage, sharing, and disclosure of your personal information as described in this Privacy Policy and any applicable updates. If you do not agree with the data practices described in this Privacy Policy, you should not use our websites or services.

LucidPoint’s Privacy Commitment
This policy’s goal is to make explicit the information we gather, how we will use it, and how we will not. This policy is longer than we would like. We will try and keep the language simple and direct as much as possible.

Scope of this Privacy Policy
This Privacy Policy applies to all LucidPoint websites. This Privacy Policy does not apply to any of our products or services that have a separate privacy policy.
This Privacy Policy is divided into three parts:

• Part I – Information LucidPoint collects and controls
  • This part deals with how LucidPoint collects and uses information about website visitors, potential customers, users of LucidPoint's services, and others who contact LucidPoint through forms or email addresses published on or linked to our websites.
• Part II – Information that LucidPoint processes on your behalf
  • This part deals with how LucidPoint handles data that you entrust to LucidPoint when you use our products and services, or when you share any personal or confidential information with us while requesting customer support.
• Part III – General
  • This part deals with topics that are relevant to both Parts I and II, and other general topics such as LucidPoint's security commitments and how we will inform you when we change this Privacy Policy.

Part I – Information LucidPoint collects and controls
What information LucidPoint collects
We collect information about you only if we need the information for some legitimate purpose. LucidPoint will have information about you only if (a) you have provided the information yourself, (b) LucidPoint has automatically collected the information, or (c) LucidPoint has obtained the information from a third party. Below we describe the various scenarios that fall under each of those three categories and the information collected in each one.

Information that you provide us

1. Account signup: When you sign up for an account to access one or more of our services, we ask for information like your name, contact number, email address, company name and country to complete the account signup process. You may also provide us with more information such as your photo, time zone and language, but we don’t require that information to partner with LucidPoint.
2. Form submissions: We record information that you submit when you submit a form in order to receive information on any service, or submit a form to request customer support.
3. Testimonials: When you authorize us to post testimonials about our products and services on websites, we may include your name and other personal information in the testimonial. You will be given an opportunity to review and approve the testimonial before we post it. 
4. Interactions with LucidPoint: We may record, analyze and use your interactions with us, including email, telephone, and chat conversations with our sales and customer support professionals, for improving our interactions with you and other customers.

Information that we collect automatically

1. Information from browsers, devices and servers: When you visit our websites, we collect information that web browsers, mobile devices and servers make available, such as the internet protocol address, browser type, language preference, time zone, referring URL, date and time of access, operating system, mobile device manufacturer and mobile network information. We include these in our log files to understand more about visitors to our websites.
2. Information from cookies and tracking technologies: We use temporary and permanent cookies to identify users of our services and to enhance user experience. We also use cookies, beacons, tags, scripts, and other similar technologies to identify visitors, track website navigation, gather demographic information about visitors and users, understand email campaign effectiveness and for targeted visitor and user engagement by tracking your activities on our websites. We mostly use first-party cookies and do not use third-party cookies or other third-party tracking technologies on our websites for non-essential or intrusive tracking.
3. Information from application logs and mobile analytics: We collect information about your use of our services and application logs. This information includes clicks, scrolls, features accessed, access time and frequency, errors generated, performance data, storage utilized, user settings and configurations, and devices used to access and their locations.

Information that we collect from third parties

1. Signups using federated authentication service providers: You can use our services using supported federated authentication service providers such as Google. These services will authenticate your identity and give you the option to share certain personal information with us, such as your name and email address.
2. Information from social media sites and other publicly available sources: When you provide feedback or reviews about our products, interact, or engage with us on marketplaces, review sites or social media sites such as Facebook, X (Twitter), LinkedIn and Instagram through posts, comments, questions and other interactions, we may collect such publicly available information, including profile information, to allow us to connect with you, improve our services, better understand user reactions and issues, or to reproduce and publish your feedback on our websites. We must tell you that once collected, this information may remain with us even if you delete it from these sites. LucidPoint may also add and update information about you, from other publicly available sources.

Purposes for using information
In addition to the purposes mentioned above, we may use your information for the following purposes:

• To communicate with you (such as through email or Slack) about services that you have signed up for, changes to this Privacy Policy, changes to the Terms of Service, or important notices;
• To keep you posted on new and services that we think will be of interest to you;
• To ask you to participate in surveys, or to solicit feedback on our services;
• To set up and maintain your account, and to do all other things required for providing our services, such as enabling collaboration.;
• To understand how users use our services, to monitor and prevent problems, and to improve our services;
• To provide customer support, and to analyze and improve our interactions with customers;
• To analyze trends, administer our websites, and track visitor navigations on our websites to understand what visitors are looking for and to better help them;
• To monitor and improve marketing campaigns and make suggestions relevant to the user.

Legal bases for collecting and using information

1. Legal processing bases applicable to LucidPoint: If you are an individual from the European Economic Area (EEA), our legal basis for information collection and use depends on the personal information concerned and the context in which we collect it. Most of our information collection and processing activities are typically based on (i) contractual necessity, (ii) one or more legitimate interests of LucidPoint or a third party that are not overridden by your data protection interests, or (iii) your consent. Sometimes, we may be legally required to collect your information, or may need your personal information to protect your vital interests or those of another person.
2. Withdrawal of consent: Where we rely on your consent as the legal basis, you have the right to withdraw your consent at any time, but this will not affect any processing that has already taken place.
3. Legitimate interests notice: Where we rely on legitimate interests as the legal basis and those legitimate interests are not specified above, we will clearly explain to you what those legitimate interests are at the time that we collect your information.

Your choice in information use

1. Opt out of non-essential electronic communications: However, you will continue to receive essential notices and emails such as account notification emails (renewal reminders, etc.), privacy update notifications, and essential transactional and payment related emails.
2. Disable cookies: You can disable browser cookies before visiting our websites. However, if you do so, you may not be able to use certain features of the websites properly.
3. Optional information: You can choose not to provide optional profile information such as your photo. You can also delete or change your optional profile information. You can always choose not to fill in non-mandatory fields when you submit any form linked to our websites.

Who we share your information with
All LucidPoint group entities listed here have access to the information covered in Part I. We do not sell any personal information. We share your information only in the ways that are described in this Privacy Policy, and only with parties who adopt appropriate confidentiality and security measures.

1. Employees and independent contractors: Employees and independent contractors of relevant LucidPoint group entities have access to the information covered in Part I on a need-to-know basis. We require all employees and independent contractors of LucidPoint group entities to follow this Privacy Policy for personal information that we share with them.
2. Third-party service providers: We may need to share your personal information and aggregated or de-identified information with third-party service providers that we engage, such as marketing and advertising partners, web analytics providers and payment processors. These service providers are authorized to use your personal information only as necessary to provide these services to us.
3. Other cases: Other scenarios in which we may share the same information covered under Parts I and II are described in Part III.

Your rights with respect to information we hold about you as a controller
If you are in the European Economic Area (EEA), you have the following rights with respect to information that LucidPoint holds about you. LucidPoint undertakes to provide you the same rights no matter where you choose to live.

1. Right to access: You have the right to access (and obtain a copy of, if required) the categories of personal information that we hold about you, including the information's source, purpose and period of processing, and the persons to whom the information is shared.
2. Right to rectification: You have the right to update the information we hold about you or to rectify any inaccuracies. Based on the purpose for which we use your information, you can instruct us to add supplemental information about you in our database.
3. Right to erasure: You have the right to request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purpose for which it was originally collected.
4. Right to restriction of processing: You may also have the right to request to restrict the use of your information in certain circumstances, such as when you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
5. Right to data portability: You have the right to transfer your information to a third party in a structured, commonly used and machine-readable format, in circumstances where the information is processed with your consent or by automated means.
6. Right to object: You have the right to object to the use of your information in certain circumstances, such as the use of your personal information for direct marketing.
7. Right to complain: You have the right to complain to the appropriate supervisory authority if you have any grievance against the way we collect, use or share your information. This right may not be available to you if there is no supervisory authority dealing with data protection in your country.

Retention of information
We retain your personal information for as long as it is required for the purposes stated in this Privacy Policy. Sometimes, we may retain your information for longer periods as permitted or required by law, such as to maintain suppression lists, prevent abuse, if required in connection with a legal claim or proceeding, to enforce our agreements, for tax, accounting, or to comply with other legal obligations. When we no longer have a legitimate need to process your information, we will delete your information from our systems.


Part II – Information that LucidPoint processes on your behalf
Information entrusted to LucidPoint and purpose
Information provided in connection with services: You may entrust information that you or your organization (“you”) control, to LucidPoint in connection with use of our services or for requesting technical support. This includes information regarding your customers and your employees (if you are a controller) or data that you hold and use on behalf of another person for a specific purpose, such as a customer to whom you provide services (if you are a processor). The data may either be stored on our servers when you use our services, or transferred or shared to us as part of a request for technical support or other services.

Ownership and control of your service data
We recognize that you own your service data. We provide you complete control of your service data by providing you the ability to (i) access your service data, (ii) share your service data through supported third-party integrations, and (iii) request export or deletion of your service data.

How we use service data
We process your service data when you provide us instructions through the various modules of our services. For example, when you generate an invoice using our invoicing service, information such as the name and address of your customer will be used to generate the invoice; and when you use our campaign management service for email marketing, the email addresses of the persons on your mailing list will be used for sending the emails.

Who we share service data with

1. LucidPoint group and third party sub-processors: In order to provide services and technical support for our products, the contracting entity within the LucidPoint group engages other group entities and third parties.
2. Employees and independent contractors: We may provide access to your service data to our employees and individuals who are independent contractors of the LucidPoint group entities involved in providing the services (collectively our “employees”) so that they can identify, analyze and resolve errors.  We ensure that access by our employees to your service data is restricted to specific individuals, and is logged and audited. Our employees will also have access to data that you knowingly share with us for technical support or to import data into our services. We communicate our privacy and security guidelines to our employees and strictly enforce privacy safeguards within the LucidPoint group.
3. Collaborators and other users: Some of our services allow you to collaborate with other users or third parties. Initiating collaboration may enable other collaborators to view some or all of your profile information. For example, when you edit a document that you have shared with other persons for collaboration, your name and profile picture will be displayed next to your edits to allow your collaborators to know that you made those edits.
4. Third-party integrations you have enabled: Most of our services support integrations with third-party products and services. If you choose to enable any third-party integrations, you may be allowing the third party to access your service data and personal information about you. We encourage you to review the privacy practices of the third-party services and products before you enable integrations with them.
5. Other cases: Other scenarios in which we may share information that are common to information covered under Parts I and II are described in Part III.

Retention of information
We hold the data in your account as long as you choose to use LucidPoint Services. If you terminate your partnership, your data will be automatically deleted from our system.
​
Data subject requests
If you are from the European Economic Area and you believe that we store, use or process your information on behalf of one of our customers, please contact the customer if you would like to access, rectify, erase, restrict or object to processing, or export your personal data. We will extend our support to our customer in responding to your request within a reasonable timeframe.


Part III – General
Children’s personal information
Our services are not directed to individuals under 16. LucidPoint does not knowingly collect personal information from children who are under 16 years of age for its own purposes. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. 

How secure is your information
At LucidPoint, we take data security very seriously. We have taken steps to implement appropriate administrative, and technical safeguards to prevent unauthorized access, use, modification, disclosure or destruction of the information you entrust to us. 

Locations and international transfers
We share your personal information and service data within the LucidPoint Group and with third parties engaged by LucidPoint Group for the purposes described above. By accessing or using our services or otherwise providing personal information or service data to us, you understand the processing, transfer, and storage of your personal information or Service Data within the United States of America, the European Economic Area (EEA) and other countries where LucidPoint operates. Such transfers are subject to appropriate data protection agreements such as a group company agreement that is based on EU Commission’s Model Contractual Clauses for data processing activities to which GDPR applies. 

External links on our websites
Some pages of our websites may contain links to websites that are not linked to this Privacy Policy. If you submit your personal information to any of these third-party sites, your personal information is governed by their privacy policies. As a safety measure, we recommend that you not share any personal information with these third parties unless you've checked their privacy policies and assured yourself of their privacy practices.

Disclosures in compliance with legal obligations
We may be required by law to preserve or disclose your personal information and service data to comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements.

Enforcement of our rights
We may disclose personal information and service data to a third party if we believe that such disclosure is necessary for preventing fraud, spam filtering, investigating any suspected illegal activity, enforcing our agreements or policies, or protecting the safety of our users.

Business Transfers
We do not intend to sell our business. However, in the unlikely event that we sell our business or get acquired or merged, we will ensure that the acquiring entity is legally bound to honor our commitments to you. We will notify you via email or through a prominent notice on our website of any change in ownership or in the uses of your personal information and service data. We will also notify you about any choices you may have regarding your personal information and service data.

Compliance with this Privacy Policy
We make every effort, including periodic reviews, to ensure that personal information you provide is used in conformity with this Privacy Policy. 

Notification of changes
We may modify the Privacy Policy at any time, upon notifying you through a service announcement or by sending an email to your primary email address. If we make significant changes to the Privacy Policy that affect your rights, you will be provided with at least 30 days' advance notice of the changes by email to your primary email address. However, if you have not verified your email address, you may miss important notifications that we send through email. If you think that the updated Privacy Policy affects your rights with respect to your use of our products or services, you may terminate your use by sending us an email within 30 days. Your continued use after the effective date of changes to the Privacy Policy will be deemed to be your agreement to the modified Privacy Policy. You will not receive email notification of minor changes to the Privacy Policy. If you are concerned about how your personal information is used, you should check back at https://www.LucidPoint.io/privacy.html periodically.

Potential Use and Disclosure of Your InformationLucidPoint uses your personal data for the following purposes: