Privacy policy

• Account: name, email, language, authentication, and business memberships.
• Business: name, logo, settings, team, permissions, and preferences.
• Operations: customers, contacts, quotes, orders, designs, files, invoices, recorded payments, inventory, expenses, and calendar.
• Communications: invitations, customer responses, consents, and promotion opt-outs.
• Technical data: device, browser, routes, response times, errors, network address, and security logs when available.
• Support: issue description, screen, business, version, and follow-up communications.

Luzdara does not request full card numbers or passwords through Support. Billing is not active yet.

• Create accounts, separate businesses, and enforce roles and permissions.
• Provide requested features, generate documents, and share authorized portals.
• Send transactional emails, invitations, and requested alerts.
• Prevent abuse, protect data, investigate errors, and maintain stability.
• Measure performance and improve flows using technical or aggregated information.
• Meet legal obligations and enforce the terms.

We process data to perform the requested service, protect legitimate interests such as security and fraud prevention, meet legal obligations, and, where applicable, with consent. Each business must determine its own legal basis for storing customer, worker, and promotion-recipient data.

We may use providers for:

• Hosting, database, and authentication.
• Email delivery, and SMS only when enabled with cost controls.
• Monitoring, security, backup, and authorized import from connected services.

We share only information reasonably necessary to provide those functions. We may also disclose information when required by law, to protect rights and safety, or in a business reorganization with appropriate protections.

Luzdara does not sell personal information or share it for cross-context behavioral advertising.

We retain data while the account or business is active and for as long as reasonably needed to provide the service, resolve disputes, protect security, keep consent records, and comply with law. Protected logs and backups may take an additional period to be removed.

We use business separation, role-based permissions, server controls, activity records, encrypted transport, and incident monitoring. No system is infallible; users must also protect their devices, accounts, and passwords.

Depending on your location and relationship with Luzdara, you may request confirmation, access, correction, deletion, or a portable copy, withdraw consent, and object to certain processing. We will not discriminate for exercising an applicable right.

• Business users: use Menu → Support.
• A business's customers: first contact the business that entered your data; Luzdara will help it respond.
• We may request reasonable verification before disclosing or deleting data.

Luzdara is a business service and is not directed to people under 18. We do not knowingly collect minors' data to create accounts. If you believe this occurred, notify Support.

Providers may process information in the United States or other places where they operate, subject to their contractual and security measures. We will publish changes to this policy and request renewed acceptance when a material change requires it.

Submit requests from Menu → Support inside Luzdara. If you cannot sign in, reply to a legitimate Luzdara transactional email. Do not include passwords, full card numbers, or unnecessary information.