Privacy & Data Protection
At LucyHR, we prioritize your privacy and are dedicated to protecting your personal data. This Privacy Policy details how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws.
Data Collection
We collect various types of information from you to enhance your experience on the LucyHR platform, ensure efficient service delivery, and continuously improve our offerings.
Personal Information: Information that can identify you as an individual, such as your name, email address, job role, and company name. This data is essential for creating your account, granting access to services, and tailoring your experience.
Usage Data: Data about your interactions with the platform, including the pages you visit, features you use, and the duration of your activities. This anonymous data helps us understand how our platform is used and identify areas for improvement.
Technical Data: Information automatically collected, including your IP address, browser type, device information, and operating system. This data assists in diagnosing technical issues, maintaining platform security, and optimizing functionality across devices.
Support Information: Any data you share with us when you contact our support team, such as inquiries or issues reported, which allows us to provide effective assistance.
Data Use
LucyHR only uses your data to provide and improve the services offered. We do not sell your data to third parties and limit data use strictly to the following purposes:
Service Delivery: We use your information to create and manage your account, personalize your experience, enable access to platform features, and support your interactions within the LucyHR ecosystem.
Product Improvement: Aggregated, anonymized data allows us to analyze usage trends, assess feature performance, and optimize our platform based on user behavior, enhancing LucyHR's functionality and user satisfaction.
Customer Support: Our team uses your information to respond to inquiries, troubleshoot issues, and deliver support promptly, ensuring you have a seamless experience.
Compliance and Legal Obligations: In certain cases, we may use or disclose your data to comply with legal requirements or in response to lawful requests from public authorities.
User Rights
In accordance with GDPR and other data protection laws, you have several rights over your personal data, including:
Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Correction: You can update or correct inaccuracies in your data if any of your personal information is incomplete or outdated.
Right to Deletion (Right to be Forgotten): Under specific circumstances, you may request the deletion of your personal data, subject to our retention policies for legal and operational purposes.
Right to Restriction: In certain cases, you can request to limit the processing of your personal data, such as when accuracy is contested or processing is unlawful.
Right to Data Portability: Where applicable, you can request a copy of your data in a structured, machine-readable format to transfer it to another provider.
Right to Object: You may object to data processing in specific cases, including direct marketing.
Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw this consent at any time.
Right to Lodge a Complaint: If you believe we have infringed your privacy rights, you can contact the relevant data protection authority.
To exercise these rights, please contact us at [support@lucyhr.ai].
Data Sharing
We value your privacy and limit data sharing to support our services efficiently:
Third-Party Providers: We work with trusted third-party service providers who assist in various operational functions, such as cloud storage, analytics, and customer support. These providers are contractually obligated to protect your data, comply with data protection laws, and use your information only as directed by us.
Legal Compliance: We may share data if required by law or to comply with legal processes, such as court orders or subpoenas.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your personal data may be transferred to the acquiring entity, subject to this Privacy Policy’s provisions.
Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. The retention period depends on factors such as the nature of the data, purpose of collection, and applicable legal requirements. Once the retention period expires, we will securely delete or anonymize your information.
Account Data: Retained as long as your account is active, plus any additional time required by legal obligations.
Usage Data: Retained in aggregate form to assist with analytics and product improvement, with personally identifiable information removed after a specified period.
Support Data: Retained for up to 1 year to assist with support inquiries, unless longer retention is necessary for legal purposes.
International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure it is protected under GDPR standards. We only transfer data to countries that provide an adequate level of data protection, verified by the European Commission, or use additional safeguards such as Standard Contractual Clauses (SCCs).
Security Measures
LucyHR employs industry-standard security protocols to safeguard your data against unauthorized access, alteration, and misuse. Security measures include:
Encryption: Data is encrypted during transmission and at rest to prevent unauthorized access.
Access Controls: Role-based access limits access to your data to only authorized personnel, and multi-factor authentication (MFA) is enforced.
Vulnerability Management: Regular vulnerability assessments and security audits are conducted to maintain a secure platform.
Incident Response: We have a detailed incident response plan to handle any data breach promptly and transparently.
Policy Updates
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or operational needs. In the event of a material change, we will notify you via email or within the platform. We encourage you to periodically review this page to stay informed about our data protection practices.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer at [support@lucyhr.ai].