Privacy Policy

1. Who we are

LUKSAI, LLC is a limited liability company registered in the State of Florida, United States, and operates the Luks.ai platform. We are the business responsible for the personal information described in this policy. You can contact us at hello@luks.ai.

2. Scope of this policy

This policy applies to personal information about visitors, producers (people who create and sell programs), and customers (people who enroll in or buy those programs).

It does not cover the independent privacy practices of producers who use the Services to run their own businesses, or of third-party services we integrate with — each has its own privacy policy.

3. Personal information we collect

Depending on how you use the Services, we collect the following categories of personal information (described using the categories defined under California law):

• Identifiers — name, email address, account username, password credentials, IP address, and online identifiers.
• Customer records — billing details and information you provide when you sign up or make a purchase.
• Commercial information — programs, offers, and subscriptions you create, purchase, or consider, and your transaction history.
• Internet and network activity — page views, clicks, form submissions, referring pages, and UTM campaign parameters collected by our first-party analytics.
• Approximate geolocation — a coarse, country-level location derived from your IP address (not precise location).
• Professional information — business details producers provide about themselves and their programs.
• Audio, electronic, or visual information — content from connected meetings or recordings (for example, Zoom recordings or transcripts) when you choose to connect those integrations.
• Content you provide — your AI-interview answers, uploaded knowledge-base documents, messages, and other content you submit.
• Inferences — insights generated from the above to operate, personalize, and improve the Services.
• Sensitive personal information — account log-in credentials and payment/financial account information (handled by our payment processor). We use this only to provide the Services and for purposes that do not trigger a right to limit; we do not use it to infer characteristics about you.

4. Where the information comes from

We collect personal information:

• Directly from you — when you create an account, complete the AI interview, build programs, upload documents, make a purchase, or contact us.
• Automatically — through your use of the Services, via our first-party analytics and essential cookies.
• From integrations you connect — such as Stripe, Zoom, LinkedIn, or X/Twitter, when you authorize them.
• From producers — customer and lead information that producers add or import into the Services.

5. How and why we use your information

We use personal information for the following business and commercial purposes:

• To provide, operate, secure, and maintain the Services and your account.
• To process payments and producer payouts.
• To generate programs, curricula, landing pages, and marketing assets using AI.
• To send transactional messages such as receipts, confirmations, and security notices.
• To send marketing communications where permitted, from which you can opt out at any time.
• To measure and improve the Services using first-party analytics.
• To prevent fraud, abuse, and security incidents, and to enforce our Terms.
• To comply with legal obligations and respond to lawful requests.

6. How we disclose your information

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising — we do not use third-party advertising networks such as Google Ads or Meta.

We disclose personal information only as follows:

• Service providers that process data on our behalf under contract: Supabase (authentication, database, and storage), Stripe (payment processing and producer payouts), Amazon Web Services (AI processing via Amazon Bedrock, transactional and marketing email via Amazon SES, and hosting via AWS Amplify), and ActiveCampaign (email marketing and lifecycle messaging).
• Integrations you choose to connect — such as Zoom, LinkedIn, and X/Twitter — limited to what the integration requires.
• Producers — if you are a customer or lead, the producer whose program you engage with receives your relevant information.
• Legal and safety recipients — courts, regulators, or law enforcement when required by law, and parties to a merger, acquisition, or sale of assets, subject to this policy.

7. Cookies, analytics, and tracking technologies

We use only essential cookies and first-party analytics; we do not use third-party advertising or cross-site tracking cookies. Our landing pages store an anonymous visitor identifier (the “_lv” cookie) to measure traffic and conversions. For details, see our Cookie Policy.

We honor the Global Privacy Control (GPC) and other recognized opt-out preference signals as a request to opt out of any sale or sharing of personal information for the browser or device that sends them.

8. How long we keep your information

We keep personal information only as long as necessary:

• Account, producer, and customer data — while your account is active and as needed afterward to meet legal, accounting, and tax obligations.
• Analytics events — retained for a limited period (currently about 90 days) and then aggregated or deleted.
• Transactional and payment records — for the period required by law.

9. How we protect your information

We use technical and organizational safeguards — including encryption in transit, encrypted storage of integration tokens, access controls, and row-level security — to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your privacy rights

Depending on where you live, you may have the rights below. We extend these core rights to all U.S. residents as a matter of practice, regardless of your state:

• Right to know / access — the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it.
• Right to delete — request deletion of personal information we collected from you, subject to legal exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to data portability — receive a copy of your personal information in a usable format.
• Right to opt out of sale or sharing — though we do not sell or share personal information for cross-context behavioral advertising.
• Right to limit the use and disclosure of sensitive personal information.
• Right to non-discrimination — we will not deny you services, charge different prices, or provide a different quality of service for exercising your rights.
• Right to appeal — where your state provides it, you may appeal a decision we make about your request.

11. How to exercise your rights

To exercise any of these rights, email us at hello@luks.ai, or use the in-app account controls where available. You do not need an account to make a request.

We will confirm receipt within 10 business days and respond within 45 calendar days; if we need more time, we may extend by up to another 45 days and will let you know. To protect your privacy, we will take reasonable steps to verify your identity before acting on a request. You may use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization and ask you to verify your identity.

12. Your privacy choices (Do Not Sell or Share)

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. If this ever changes, we will update this policy and provide a clear “Do Not Sell or Share My Personal Information” choice. In the meantime, we honor the Global Privacy Control (GPC) signal as an opt-out request.

13. California “Shine the Light”

California residents may request information about our disclosure of personal information to third parties for those third parties’ own direct marketing. We do not disclose personal information to third parties for their own direct marketing. To make a request, contact hello@luks.ai.

14. Children’s privacy

The Services are intended for adults and are not directed to children under 13. You must be at least 18 years old to create an account or transact. We do not knowingly collect personal information from children under 13; if we learn that we have, we will delete it promptly. We do not sell or share the personal information of consumers we know to be under 16.

15. Email communications and your choices

We send transactional emails necessary to operate the Services and, where permitted, marketing emails. Every marketing email includes an unsubscribe link and our postal address, consistent with the CAN-SPAM Act. You can opt out of marketing emails at any time using that link or by contacting us, and we will honor opt-outs promptly. Transactional emails are not promotional and may still be sent.

16. Third-party links and services

The Services may link to or integrate with third-party websites and services we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

17. Changes to this policy

We may update this Privacy Policy from time to time and will review it at least every 12 months. Material changes will be notified through the Services or by email, and the “Last updated” date above will be revised.

18. Contact us

If you have questions or requests regarding this Privacy Policy or your personal information, contact LUKSAI, LLC at hello@luks.ai.