Privacy Policy

Luceris Cloud (“we”, “us”) is established in France. For data-protection purposes, we are the controller of the personal data we collect about you to run our website and your account (your email, billing details, support correspondence, security telemetry).

We are the processor of the content you store in the databases you create on Luceris Cloud. That data belongs to you; we only process it as your service provider, under the operating licence in our Terms.

Our Data Protection Officer can be reached at [email protected].

To operate Luceris Cloud, we collect:

• Identity: name, email, organization, role.
• Authentication: hashed credentials, session metadata, IP and user-agent for security purposes.
• Billing: billing address and contact details associated with your account.
• Telemetry: request logs, error stack traces, audit trail of administrative actions.
• Support correspondence: any email or in-product message you send us.

We do not currently collect analytics, marketing, or tracking data, and we do not use advertising identifiers.

We process your data under the following GDPR Article 6 lawful bases:

• Performance of a contract (Art 6(1)(b)): creating and operating your account, provisioning clusters, billing.
• Legitimate interest (Art 6(1)(f)): security, fraud detection, abuse prevention, service-quality investigation.
• Legal obligation (Art 6(1)(c)): retaining invoices for accounting and tax law (10 years under French Commercial Code).
• Consent (Art 6(1)(a)): any future analytics or marketing cookies — opt-in only via the cookie banner.

We disclose personal data only to a small number of sub-processors who help us operate the service (hosting and transactional email). The current list is on our GDPR page. Sub-processors are contractually bound to handle personal data consistently with this policy.

• Account data: while your account is active, plus 30 days after termination to allow recovery.
• Billing records and invoices: 10 years from the issue date (Article L.123-22 of the French Commercial Code).
• Security and audit logs: 90 days, then deleted.
• Support correspondence: 2 years after the ticket is closed, then deleted.

Luceris Cloud hosts all customer personal data in the European Union — France is the primary region, with replicas in Germany. We do not transfer customer personal data outside the EU. No Article 44–49 GDPR transfer mechanisms apply because no transfers occur.

Under the GDPR you have the right to:

• Access (Art 15) — request a copy of the personal data we hold about you.
• Rectification (Art 16) — correct inaccurate data.
• Erasure (Art 17) — request deletion subject to legal retention.
• Restriction (Art 18) — limit our processing temporarily.
• Portability (Art 20) — receive your data in a structured, machine-readable format.
• Objection (Art 21) — object to processing based on legitimate interest.
• Withdraw consent (Art 7(3)) — for any processing based on consent.
• Lodge a complaint (Art 77) with the CNIL — the French data-protection regulator (www.cnil.fr).

To exercise your rights, use the request form on our GDPR page or email [email protected]. We aim to acknowledge within 30 days as required by Article 12(3).

We protect personal information using technical and organizational measures described in our Security policy. If we become aware of a personal-data breach affecting your information, we notify CNIL within 72 hours as required by Article 33 and notify affected users when required by Article 34.

We use only strictly-necessary cookies today (authentication, CSRF, theme preference). Any future analytics or marketing cookies require your opt-in via the cookie banner. See our Cookie Policy for the full list.

The Service is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, write to [email protected] and we will delete the data unless retention is required by law.

We may update this Privacy Policy from time to time. When changes are material, we will notify you by email or through an in-product notice before they take effect.

Privacy questions and requests can be sent to [email protected].