This policy explains how Lucidlane (“we”, “us”), operated by Moonrope OÜ, handles personal data when you visit this website, use the Lucidlane console, or sign in to a client portal built with Lucidlane. Words like “Customer” and “portal user” mean the same as in our Terms of Service.
1. Our role
For account, billing and website data, we decide how the data is used and are the controller.
For the content inside a Customer’s workspace and portals - data synced from the Customer’s Linear workspace, requests, comments, attachments and the names and email addresses of portal users - we act on the Customer’s instructions as a processor. The Customer is the controller of that data. If you are a portal user, the business that invited you to its portal is responsible for it, and you can contact them about your data; we’ll help them respond.
2. What we collect
- Account details - name, email address, role and, where available, profile picture of team members, and which sign-in method they use (email link, Linear or Google).
- Portal users - name, email address and profile picture where available, the portal they belong to, and sign-in links sent to them.
- Linear data - once you connect Linear, the customers and customer requests, issues, comments, statuses and labels the Service needs, and the access tokens that let us reach your workspace. Tokens are stored encrypted.
- Customer Content - requests, messages, attachments, logos and portal settings, including messages received through connected channels such as Slack, Microsoft Teams or Discord.
- Billing details - billing name, address, tax ID and payment history. Card details are collected and held by Stripe; we never see the full number.
- Technical data - session records, browser type, and the IP address of each request, which we use briefly for rate limiting and security.
- Correspondence - what you send us when you contact support.
3. Why we use it
- To provide the Service: sign you in, sync with Linear, show each portal user their own requests, and deliver notifications. (Performance of our contract with you.)
- To bill you and keep the records tax law requires. (Contract and legal obligation.)
- To keep the Service secure, prevent abuse and fix problems. (Our legitimate interest in running a safe, working service.)
- To send service messages - sign-in links, invitations, billing and policy notices. (Contract.) We don’t send marketing email without your consent, and every marketing email has an unsubscribe link. (Consent.)
- To meet legal obligations and respond to lawful requests.
We don’t sell personal data, we don’t show ads, and we don’t use Customer Content to train AI models.
4. AI features
When AI features are used - for example the AI assistant add-on drafting a reply, or writing up and tagging a request - the text needed for that task is sent through Cloudflare AI Gateway to OpenRouter, which routes it to the language model provider that generates the result. We send only what the task needs and use the result only to provide the feature. Anything the AI writes is marked as automated, so you know it didn’t come from a person.
5. Who we share it with
We share personal data only with service providers that help us run Lucidlane, under contracts that limit their use of it to that purpose. For Customer Content, these are our sub-processors, and we’ll tell Customers before adding or replacing one:
- Cloudflare - hosting, database, file storage, email delivery and AI request routing.
- Stripe - payments and invoices.
- Resend - backup email delivery.
- OpenRouter and the model providers it routes to - AI features, only when used.
- Google Fonts - this website loads its typefaces from Google, which receives your IP address when the page loads.
When a team member or portal user posts a request, comment or status change, we write it to the Customer’s Linear workspace labelled with their name “(via Lucidlane)” and, where available, their profile picture, so the Customer’s team can see who it came from. Portal users never get access to Linear itself.
When you connect Linear, Slack, Microsoft Teams, Discord or Google, or reach portals from your own AI client through the MCP server, data passes between us and that service at your direction, and that service’s own privacy policy applies to what it holds. We may also disclose data if the law requires it, to protect our rights or users’ safety, or to a buyer as part of a merger or acquisition, in which case this policy continues to apply to it.
6. Cookies
This website sets no cookies and uses no analytics or advertising trackers. The console and portals use only cookies that are strictly necessary to keep you signed in:
- Authentication session cookies - keep team members and portal users signed in.
ll_portal- remembers the active portal.ll_session- used for agency-assisted portal preview sessions.
Because these cookies are needed for the Service to work, they don’t require consent. Blocking them will sign you out.
7. How long we keep it
We keep account data and Customer Content for as long as the account is open. Deleting a portal deletes its content straight away. Disconnecting Linear revokes our access token and stops syncing. Linear data we already synced stays with the account until it closes, when we delete it with the rest of the account’s data; email us if you want it deleted sooner. When an account closes, we delete or anonymise its data within 30 days of the end of the export window described in the Terms, except billing records, which we keep as long as tax and accounting law requires. IP addresses used for rate limiting are kept for about a minute. Backups age out on their normal cycle.
8. International transfers
Our providers operate globally, so personal data may be processed outside your country, including in the United States. Where data protection law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.
9. Security
Data is encrypted in transit, Linear access tokens are encrypted at rest, sign-in links are single-use and expire quickly, and each portal can only read its own client’s data, checked on every request. No system is perfectly secure; if a breach affects your personal data, we’ll notify you and the authorities as the law requires.
10. Your rights
Depending on where you live, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw any consent you’ve given. Email support@lucidlane.app; we’ll reply within 30 days. If we hold your data as a processor for a Customer, we’ll pass your request to them. You can also complain to your local data protection authority.
11. Children
Lucidlane is a business tool and isn’t intended for anyone under 16. We don’t knowingly collect their data.
12. Changes
We’ll update this policy as the Service changes and change the date at the top. If a change is material, we’ll tell account owners by email or in the console before it takes effect.
13. Contact
Questions or requests about privacy: support@lucidlane.app.
The controller is Moonrope OÜ, Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia.