Lucitra: the AI operating system for companies

This Privacy Policy describes how Lucitra, Inc. ("Lucitra," "we," "us," or "our") collects, uses, and protects your personal information when you use our agent infrastructure platform and related services (the "Services"). By using our Services, you agree to the practices described in this policy.

1. Information We Collect

We collect information you provide directly when you create an account, use our APIs, or contact us for support:

Account information: Name, email address, organization name, and role
API keys: Keys that you generate for programmatic access
Agent configurations: Agent specs, governance policies, and orchestration settings you define
Attestation records: Cryptographic attestations and audit logs generated by the platform
Usage analytics: API call frequency, feature usage patterns, and performance metrics collected via PostHog
Communications: Support requests, feedback, and correspondence

2. Data Processing

When you use our agent infrastructure platform:

Agent configurations and governance policies are processed solely for the purpose of operating your agent systems
Your data is never used to train Lucitra's own models
All data is stored encrypted at rest in Google Cloud Platform
Processing occurs in Google Cloud Run instances in US regions
You may delete your data at any time via the API or dashboard

3. How We Use Your Information

Provide, operate, and maintain the Lucitra platform
Generate attestation records and audit trails
Improve our infrastructure using anonymized, aggregated metrics (never individual configurations)
Communicate with you about your account, service updates, and support requests
Detect and prevent abuse, fraud, and security incidents
Comply with legal obligations

4. Data Retention

Agent data: Retained while your account is active. You may delete configurations and logs at any time.
Attestation records: Retained indefinitely while your account is active, as they serve as your audit trail.
Account data: Retained while your account is active and for 30 days after deletion to allow recovery.
Usage analytics: Retained for 24 months in anonymized, aggregated form.

5. Sub-processors

We use the following third-party service providers to operate our Services:

Google Cloud Platform: Cloud infrastructure, compute, and storage (US regions)
Stytch: Authentication and identity management
PostHog: Product analytics (US-hosted)
AWS SES: Transactional email delivery

6. International Data Transfers

Our Services are hosted in the United States. If you access our Services from outside the US, your information will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and participate in the EU-US Data Privacy Framework to ensure adequate protection for data transferred from the European Economic Area, the UK, and Switzerland.

If you are located in the European Economic Area, the UK, or Switzerland, you have the following rights under the General Data Protection Regulation:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate personal data
Right to erasure: Request deletion of your personal data
Right to restriction: Request that we limit processing of your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests

To exercise these rights, contact us at privacy@lucitra.ai. We will respond within 30 days.

8. CCPA Rights (California Residents)

California residents have the following rights under the California Consumer Privacy Act:

Right to know: Request disclosure of the categories and specific pieces of personal information we collect
Right to delete: Request deletion of your personal information
Right to opt-out: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

By email: privacy@lucitra.ai
Lucitra, Inc., Austin, TX, United States

Privacy Policy