Privacy Policy
Lustra is a product of Lucid and LumenSocial, operated by Lumen Social Pte. Ltd. (UEN 202556946D), at 2 Alexandra Road, #02-05A, Delta House, Singapore 159919. This policy explains how we handle personal data when you visit lustra.work or use Lustra's workspaces, files, reports and connected-account features.
For privacy questions, access or correction requests, withdrawal of consent, or a request to delete your data, contact ai@lucid.sg with the subject “Lustra privacy request”.
1. Information we collect
- Account and workspace information: profile identifiers and names, roles, company assignments, authentication records, workspace permissions and preferences.
- Information you provide: messages, questions, uploaded documents, spreadsheets, images, brand instructions, tasks, bookings, reports, and other content you submit. These may contain personal data about you or other people.
- Work records: conversation context and summaries, saved analysis results, source references, notifications, review decisions and activity needed to operate the service.
- Technical information: request and error details, timestamps, IP addresses and browser or device information processed by our hosting and security providers for delivery, reliability and protection of the service.
- Connected-account information, when enabled: the account identifiers, authorised profile fields, public-video metadata and available engagement counts permitted by the permissions you grant. We also need authorisation credentials, token expiry and granted-scope records to maintain the connection.
Only provide other people's personal data when you have an appropriate basis and authority to do so. Do not upload passwords, unrelated sensitive records or information that is unnecessary for your work.
2. How we use information
We use information to authenticate users, enforce workspace access, store and retrieve submitted work, provide requested analysis and reports, coordinate tasks and bookings, deliver notifications, respond to support requests, and investigate errors, misuse and security incidents. We may also process records to meet applicable legal obligations.
Work you share or file into a brand workspace may be visible to that workspace's authorised users. Platform and workspace administrators may manage accounts, permissions and relevant work records. A personal inbox does not make the underlying shared task or brand report private. Review the destination and intended audience before sharing.
3. AI processing
When you request an AI feature, Lustra sends the inputs needed for that request to the configured AI service. These can include your question, relevant conversation context, selected attachments or source extracts, and applicable profile or brand instructions. Current service integrations include xAI/Grok and, for features where configured, OpenAI and Cloudflare AI services.
Connecting an external account is not, by itself, an instruction to analyse its information. For the planned TikTok pilot, connection and preview are separate from choosing data for a report or AI request. We will not enable external AI processing of TikTok API data unless the permitted purpose, required disclosures and authorisations support it.
AI service providers process requests under their applicable service terms and privacy practices. Do not assume that every provider has identical retention or training rules. Contact us before submitting information that requires particular contractual restrictions. Lustra does not grant itself ownership of your content through an AI request.
4. TikTok and other connected accounts
When a TikTok connection becomes available, TikTok will handle your authorisation. Lustra will not ask for or store your TikTok password. The initial pilot requests basic account information and access to your public-video list. Additional permissions require a corresponding feature and authorisation.
We will use authorised account data for the connection, preview, and sharing or reporting actions you choose. Authorising TikTok does not grant Lustra staff privileges, prove ownership of a brand, or permit access to another person's workspace. Video counts are snapshots of the information available when fetched; they do not necessarily represent activity within a historical reporting period.
You can revoke access through TikTok's connected-app controls and, when available, Lustra's disconnect control. Revocation stops future authorised collection once processed. Disconnecting is separate from deletion of previously saved reports or shared records; contact us to request deletion and we will explain any records that must be retained or handled separately. TikTok also processes information under its own Privacy Policy.
5. Service providers and disclosure
We use Cloudflare for hosting, storage and related infrastructure, and configured AI providers to carry out requested AI features. Other connected services receive information when you use the corresponding integration. We may share relevant information with service providers acting for us, authorised workspace participants, professional advisers where necessary, or authorities where legally required. We may disclose information necessary to protect users, rights and the security of the service.
We do not sell your personal data. Sharing a record with a workspace or exporting it is a user-directed disclosure; recipients and downloaded copies may be outside Lustra's control.
6. Cookies and browser storage
Lustra uses authentication cookies to remember access to the staff platform and the unlocked profile. Browser storage may retain drafts, selected files or references, preferences and recovery information. These support the existing work experience. Clearing browser storage may remove unsynchronised local drafts; signing out does not necessarily remove every locally saved record. Use a trusted device and protect it from other users.
These policy pages contain no analytics scripts, advertising trackers or forms. Infrastructure providers may still process technical request information when serving them.
7. Retention and deletion
We retain information while needed to provide the service, maintain work and recovery records, resolve disputes or meet legal and legitimate business requirements. We review the need to retain personal data and delete or anonymise it when retention is no longer necessary. Different records, shared work and backup copies may require different handling; this policy does not promise an automatic deletion deadline that the platform has not implemented.
To request deletion, email us with your profile or connected account identifier and the records concerned. Do not send passwords or access tokens. We may verify your identity and authority before acting. We will explain any applicable exceptions, dependencies or retained records. Removing an original does not automatically erase independently exported copies.
8. Security and international processing
We use access restrictions and other reasonable technical and organisational measures to protect personal data. No online service can guarantee absolute security. Report suspected unauthorised access to the contact above.
Cloud and AI providers may process information outside Singapore. Where personal data is transferred overseas, applicable data-protection requirements, including requirements for comparable protection, govern the transfer. Contact us if your work requires a particular processing location or agreement before uploading it.
9. Your choices and rights
You may contact us to request access to or correction of your personal data, ask how it has been used or disclosed, withdraw consent where processing relies on consent, or request deletion. Applicable law may provide additional rights or exceptions. Some requests may affect our ability to provide a feature. You may also contact Singapore's Personal Data Protection Commission about data-protection concerns.
10. Intended users and changes
Lustra is intended for authorised professional users, rather than children. If you believe a child has provided personal data without appropriate authority, contact us. Any external creator pilot will have its own eligibility and invitation requirements.
We may update this policy as the service changes. We will show the revised effective date here and provide additional notice where appropriate. New integrations must reflect their actual data practices before being enabled.