LucidTrust Privacy Policy

This Privacy Policy is issued by LucidTrust, LLC (“LucidTrust,” “we,” or “us”)
Last Updated: June 2026

Data Collection

We collect information to operate, secure, and improve our website and platform. This includes information you provide to us directly, information collected automatically when you visit our website or use the platform, and Customer Data submitted by our Customers, each as described below.

Automatically collected information includes device and browser information, IP address, pages viewed, referring URLs, feature usage, interaction history, error reports, and operational and security logs. We limit the personal information we collect to what is reasonably necessary for the purposes described in this Policy, and we do not intentionally collect special categories of sensitive personal information.

Data Usage

Collected data is used solely to provide, maintain, and continuously improve our services. This includes customizing features to better match your workflows, ensuring reliable operation of the platform, and conducting performance analysis to identify and fix bugs. We do not sell or lease your data to third parties, and we never use it for unrelated marketing or promotional purposes outside of the services we offer.

a. Information You Provide

We may collect information you provide, such as your name, email address, company name, job title, and any information submitted through contact forms, demo requests, or onboarding.

Website Forms (Hubspot): If you submit information through our website forms, your submission is processed by Hubspot (a third-party form processing provider) so it can be delivered to us.

b. Customer Data and Platform Roles (SaaS)

LucidTrust is a business-to-business software platform. When an organization subscribes to LucidTrust (“Customer”), its designated users (“Authorized Users”) may input, upload, or otherwise provide information into the platform (“Customer Data”).

We process Customer Data only to provide, maintain, secure, and support the services, and as otherwise instructed by the Customer or required by law. Customers control what Customer Data is submitted and how it is used within their organization.

If you are an Authorized User and have questions about Customer Data in your organization’s account, please contact your Customer administrator.

c. Service Usage Information

When you use the LucidTrust platform, we may collect operational and security-related logs and usage information to operate, secure, and improve the service.

Data Sharing

We share information with third-party service providers that assist us in operating our website and platform, including hosting providers, analytics providers, form processing providers, advertising and marketing platforms, and payment processors. Service providers are bound by contractual confidentiality and data protection obligations and may use the information only as necessary to perform services for us.

We use advertising and analytics technologies on our website, including Google Tag Manager and the LinkedIn advertising pixel. These technologies allow the relevant provider to receive information about your visit, including your IP address, browser and device information, and the pages you view, and may be used to measure campaign performance and to deliver advertising to you on other platforms. Depending on your state of residence, this activity may constitute “sharing” of personal information for purposes of cross-context behavioral advertising under applicable privacy law. See “Cookies and Tracking Technologies” and “Your Privacy Rights” below.

We do not sell personal information for monetary consideration. We may also disclose information where required by law, in response to lawful requests by public authorities, to enforce our agreements, to protect our rights or the safety of others, or in connection with a merger, acquisition, financing, or sale of assets.

Cookies and Tracking Technologies

We and our providers use cookies, pixels, tags, and similar technologies on our website. Strictly necessary technologies are required for the site to function. Analytics technologies help us understand how the site is used. Advertising technologies, including the LinkedIn advertising pixel, may be used to measure and deliver advertising.

You may control cookies through your browser settings and, where offered, through our cookie preference tool. Most browsers also transmit a Global Privacy Control signal, which we honor as a request to opt out of sharing for cross-context behavioral advertising where required by applicable law.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is 100% secure, but we continuously improve our security posture.

User Rights

Depending on where you live, you may have the right to request access to the personal information we hold about you, to request correction of inaccurate information, to request deletion, to request a portable copy, to opt out of the sale or sharing of personal information and of targeted advertising, and to be free from discrimination for exercising these rights.

To exercise these rights, contact us at [privacy@lucidtrust.ai]. We will verify your request before acting on it and will respond within the time period required by applicable law. You may use an authorized agent where permitted. If we decline a request, you may appeal that decision by contacting us at the same address, and we will inform you in writing of the outcome and, where applicable, of your right to contact your state attorney general.

Where LucidTrust processes Customer Data on behalf of a Customer, LucidTrust acts as a service provider or processor and does not control that information. If you are an Authorized User or your information appears in a Customer’s environment, direct your request to that Customer, and we will assist the Customer in responding as required by our agreement with them.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Customer Data is retained in accordance with the applicable Customer agreement and is deleted or returned following termination as provided in that agreement.

Restricted Information

The LucidTrust platform is designed for organizational and vendor information and is not intended for the submission of personal information about consumers. Customers are contractually prohibited from submitting nonpublic personal information as defined under the Gramm-Leach-Bliley Act, protected health information, payment card data, government-issued identification numbers, biometric information, or other regulated categories of information. LucidTrust does not seek, require, or knowingly process such information, and will delete it if identified. LucidTrust is not a consumer reporting agency, its outputs are not consumer reports, and its outputs may not be used for any purpose regulated by the Fair Credit Reporting Act.

International Transfers

We operate in the United States, and information we collect may be stored and processed in the United States or in other countries where our service providers operate. Where required, we implement appropriate safeguards for cross-border transfers.

Children’s Privacy

Our website and platform are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children under 16.

Policy Updates

We may revise this Privacy Policy periodically to reflect changes in our services, legal requirements, or industry standards. Whenever updates are made, we will notify users through in-app notifications, emails, or website banners. We encourage you to review the Privacy Policy regularly to stay informed about how we protect your information and uphold your privacy rights.