Privacy Policy

1. Introduction

Lucent AI ("we," "our," or "us") provides an AI-powered assistant platform. This Privacy Policy describes how we collect, use, and protect your personal information when you use our web application, mobile application, and related services (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address and phone number through our authentication provider, Clerk. If you sign in with Apple or Google, Clerk receives the account details that service shares.

Conversation Data

We store messages you send to and receive from the AI assistant, including any files or data you share during conversations. This data is used to provide and improve the Service.

Usage Data

We collect information about how you interact with the Service, including features used, session duration, and error logs. Crash and error reports from the mobile app are sent to Sentry.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers or bank account details. Stripe's privacy policy governs the handling of your payment data.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process your conversations and tasks through AI models (Anthropic Claude)
• To generate images you ask for (Google Gemini)
• To manage your account, billing, and subscriptions
• To send transactional emails (account verification, billing receipts, service notifications)
• To store memories and preferences you create to personalize your experience
• To detect and prevent abuse or unauthorized access

4. Third-Party Services

We use the following third-party services to operate the platform.

Core services

• Clerk — Sign-in and account authentication (name, email address, phone number, and Apple or Google sign-in details)
• Supabase — Database hosting and file storage
• Anthropic — AI model processing (Claude) of your messages and tasks, including the account, deal, client and connected-service information the assistant reads to respond
• Vercel — Application hosting
• Expo / Apple Push Notification Service — Mobile push notifications
• Sentry — Crash and error reports from the mobile app
• Stripe — Payment processing and subscription management
• Resend — Transactional email delivery

When you use a feature that needs them

• Google (Gemini API) — Image generation; the description of the image you ask for is sent to Google
• Tavily — Web searches and web page extraction the assistant runs for you; the search query or page address is sent
• Browserbase — Cloud browser sessions for browser automation tasks
• CRMLS (via Cotality Trestle) — MLS listing search and listing details; your search criteria are sent
• RapidAPI property data providers (Zillow, Redfin and Airbnb data) — Listing search when MLS data is unavailable, comparable sales, market trends and rental estimates; the location or property address you look up is sent
• QR Server (api.qrserver.com) — QR codes for open house sign-in pages; the sign-in page link is sent

Monitoring and operations

• Braintrust — Monitoring of background AI tasks: task, team and user identifiers, timing, token and cost metrics, the names of the tools a task used, the length and a hash of the request and of the result, a short excerpt (the first 40 characters) of each, and error messages shortened to 200 characters. Email addresses and phone numbers are removed from the excerpts and error messages.
• Slack — Internal operational alerts to the Lucent team, which can include error messages from the Service

Each third-party service processes data according to their own privacy policies.

5. Google Workspace and Other Connected Accounts

If you choose to connect your Google account, the Service may access your Gmail, Google Calendar, Google Drive, Google Docs and Google Sheets data solely to provide AI assistant features you request (e.g., reading emails, scheduling events, searching documents).

We do not sell, share, or use your Google data for advertising. Access is limited to the scopes you authorize, and you may disconnect your Google account at any time from the Settings page.

You can also connect Microsoft Outlook, DocuSign and Follow Up Boss. When connected, the Service accesses those accounts with the permissions you grant during the connection.

6. Data Storage and Security

Your data is stored in Supabase-hosted PostgreSQL databases with row-level security (RLS) policies ensuring that users can only access their own data. All data is encrypted in transit (TLS) and at rest.

If you provide your own API keys (BYOK), those keys are stored encrypted in our database and are only used to make API calls on your behalf.

7. Data Retention

We retain your data for as long as your account is active. You may delete your conversations and memories at any time from the Settings page. You may delete your account from Settings in the mobile app, under Delete Account: this removes your profile, conversations, memories, attachments and connected services immediately, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Opt out of non-essential data processing

To exercise these rights, contact us at privacy@mylucentai.com.

9. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@mylucentai.com.