Privacy Policy

1. Introduction

Lamicus ("we", "our", or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered contract drafting service.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your name
• Email address
• Profile picture (if available)

2.2 Contract Drafting Data

When you use the Service to draft contracts, the following data is stored locally on your device only and is not accessible to us:

• Contract requests and descriptions you provide
• Uploaded reference documents (PDF, DOCX, TXT files)
• Your responses to clarifying questions
• Generated contract content
• Your edits and modifications to drafts

This data is processed temporarily to generate contract drafts but is not stored on our servers in a form that we can access. Your contract data remains under your control on your local device.

2.3 Usage Data

We automatically collect certain information about how you use the Service:

• Feature usage statistics
• Session information and timestamps
• Browser type and version
• Device information and operating system
• IP address (anonymized for analytics)

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Improve and optimize the Service
• Communicate with you about the Service
• Ensure compliance with our Terms of Service
• Detect and prevent fraud or abuse

4. AI Data Processing

4.1 No AI Model Training

We do not use your data to train AI models. Your contract data, prompts, and generated outputs are not used to train or improve any AI models, whether ours or those of our third-party AI providers. Your content remains private to your account.

4.2 Third-Party AI Providers

We use third-party AI models to generate contract content. We have configured these services to not use your data for model training. Your prompts and outputs are processed solely to provide the Service and are not retained by these providers for training purposes.

4.3 AI Data Retention

Our third-party AI providers may temporarily retain prompts and outputs for a limited period (typically up to 30 days) solely for abuse monitoring and legal compliance purposes, after which such data is automatically deleted. This temporary retention does not involve using your data for model training.

5. Third-Party Services

5.1 Authentication

We use third-party authentication providers to verify your identity. We only receive the information necessary to create and manage your account.

5.2 Third-Party Service Providers

We use third-party service providers for database storage, hosting, payment processing, and other operational functions. These providers are contractually obligated to protect your data and use it only for the purposes of providing services to us. We do not store your complete payment card information.

6. Data Retention

Account information is retained on our servers for as long as your account is active. You may request deletion of your account data at any time. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Contract drafting data (including your inputs, uploaded documents, and generated content) is stored only on your local device if you choose to save it, and is not retained on our servers. Analytics data collected through Vercel Web Analytics is aggregated and anonymous, and does not contain personally identifiable information.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit
• Encryption of data at rest
• Secure authentication mechanisms
• Access controls for internal systems
• Regular security assessments and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You should not upload highly sensitive or confidential information that requires absolute security guarantees.

7.1 Your Responsibility for Confidential and Personal Data

You are solely responsible for ensuring that your use of the Service complies with all applicable data protection laws, privacy regulations, and confidentiality obligations with respect to any confidential information or personal data you input into the Service.

Before entering any confidential information or personal data of third parties into the Service, you must ensure that you have obtained all necessary consents and authorizations, and that such use complies with your legal and contractual obligations, including applicable data protection laws and non-disclosure agreements.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses or other legally recognized mechanisms.

By using the Service, you consent to the transfer of your information to these countries.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Request your data in a portable, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

10. Analytics and Tracking

We use Vercel Web Analytics to understand how users interact with the Service. Vercel Web Analytics is designed with privacy in mind and does not use cookies or collect personal identifiers.

10.1 How It Works

Instead of cookies, visitors are identified by a hash created from the incoming request. This hash cannot be used to track users across different websites or applications. Visitor session data is automatically discarded after 24 hours.

10.2 Data Collected

The following anonymous, aggregated data may be collected:

• Page URLs visited
• Referrer URL
• General geolocation (country, region, city)
• Device type (mobile, desktop, tablet)
• Operating system and version
• Browser and version
• Event timestamps

10.3 Data Not Collected

Vercel Web Analytics does not collect:

• IP addresses
• Personal identifiers
• Cross-site tracking data
• Information that could identify individual users

11. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately, and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically for any changes.

13. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Singapore. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Singapore.

14. Contact Us

If you have questions or concerns about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us through the contact information provided on our website.