Privacy Policy
Lucent Ops LLC, doing business as LucentOps ("LucentOps", "we", "us"), operates the website at https://lucentops.co (the "Site") and the client portal used to deliver web-design services (together, the "Services"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices available to you. It applies to visitors to the Site, people who submit a contact form or book a call with us, and clients who use our client portal.
This Policy is written to be read quickly. If a term here conflicts with a signed Client Service Agreement on a point specific to that engagement, the Client Service Agreement controls for that engagement; this Policy otherwise governs how we handle personal information.
1. Information we collect
We collect information in three ways: what you give us directly, what our service providers collect on our behalf, and what is generated automatically when you use the Site or portal.
| Category | Examples | When it's collected |
|---|---|---|
| Contact form | Name, email, phone (optional), store name, website, message, catalog size | When you submit our contact form |
| Scheduling | Name, email, phone number (if you ask us to call you), your time zone, store name, website, meeting time, notes | When you book a call on the Site. Scheduling runs on our own software; no scheduling provider is involved. If you choose a video call, the call itself takes place on the video service named in your confirmation (for example Google Meet or Zoom), under that service's privacy policy |
| Deposit checkout | Name, email, store name, phone (optional), a record that you accepted the Client Service Agreement, including the acceptance timestamp, IP address, and browser user agent | When you pay the project deposit |
| Payment | Payment status, amount, the reference code, and the sender name or handle that Zelle, Venmo or PayPal shows us when we confirm a payment | When you pay a deposit, balance or monthly invoice. If card payment is offered, it is processed by Stripe; we never receive or store full card or bank account numbers |
| Client portal | Email address (for magic-link sign-in; we do not use passwords), intake answers, uploaded files (logos, product lists, lab reports/COAs, label artwork, other documents), approvals, and messages | When you use the client portal during a project |
| Email delivery | Delivery, open, and bounce logs for transactional email | Sent through Resend on our behalf |
| Security logs | IP addresses | Collected briefly for rate limiting and fraud prevention |
| Site analytics | Page views, referrer host, a daily-rotating salted hash of your IP address and browser user agent | Automatically, on every page view; see Section 3 |
2. Cookies
The Site and client portal use only strictly necessary session cookies, which keep you signed in to the client portal or the LucentOps admin while you use them. We do not use advertising cookies, and we do not use third-party tracking cookies.
Forms on the Site are protected by Cloudflare Turnstile, a bot-detection tool that processes limited technical data (such as your browser and network signals) to tell human visitors from automated traffic. Cloudflare acts as our service provider for this purpose.
3. Analytics, Do Not Track, and Global Privacy Control
Our Site analytics are cookieless and first-party: we record the page viewed and the referring host, plus a hash of your IP address and user agent that is salted and rotated daily. This hash cannot be reversed to reveal your IP address, and because it changes every day it cannot be used to follow the same visitor from one day to the next. We do not use third-party analytics or advertising trackers.
Because we do not track visitors across other companies' sites, we do not respond differently to a browser's Do Not Track signal. Where a Global Privacy Control (GPC) signal is legally recognized as an opt-out request, we honor it as an opt-out of the sale or sharing of personal information described in Section 6, to the extent we engage in either.
4. How we use information
- To respond to inquiries and book calls
- To deliver the Services under a Client Service Agreement, including intake, design, build, testing, and launch
- To process payments and keep financial and tax records
- To operate and secure the Site and client portal, including preventing fraud and abuse
- To send transactional and project emails (see Section 5 for marketing email)
- To comply with legal obligations and enforce our agreements
5. Marketing email
We only send marketing email to people who affirmatively opt in through an unchecked consent checkbox; we do not send marketing email by default. Every marketing email includes an unsubscribe link, and we honor unsubscribe requests promptly, consistent with the CAN-SPAM Act. Transactional and project-related email — for example, order confirmations, portal notifications, and messages about an active engagement — is sent as part of the Services and is not marketing email.
6. How we share information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We share personal information only with the service providers who help us run the Site, the client portal, and the Services, each acting under its own privacy terms and, where applicable, a data processing agreement with us:
| Provider | Purpose |
|---|---|
| Zelle (through our bank), Venmo and PayPal | Receiving payments; each processes your side of the payment under its own privacy policy |
| Stripe | Card payment processing, when offered |
| Resend | Transactional email delivery |
| Google Meet or Zoom | Video calls, when you choose a video call; the meeting runs on that service |
| Cloudflare | DNS, content delivery and security, email routing, bot protection (Turnstile) |
| Railway | Application hosting, database, and file storage, located in the United States |
| GitHub | Source code hosting; does not receive personal information |
We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy for information collected under it.
7. Data retention
| Data | Retention |
|---|---|
| Contact-form leads that never become clients | Deleted or anonymized after 24 months |
| Client project records and invoices | 7 years, for tax and accounting purposes |
| Uploaded client files | For the life of the project and 12 months after launch, unless you ask us to delete them sooner, subject to any legal hold |
| Security logs | 30 days or less |
| Analytics | Raw data for 90 days; aggregated statistics may be kept longer |
8. Your privacy rights
If you live in a state with a comprehensive consumer privacy law, you may have the right to know what personal information we hold about you, to correct it, to delete it, and to opt out of certain uses. To exercise any of these rights, email contact@lucentops.co from the address associated with your information. We aim to respond within 45 days. We will verify your request before acting on it and may need to ask for additional information to do so.
To review or update the information you've given us, or to ask how it's used, you may also write to us at the address in Section 13.
9. Children's privacy
The Site and Services are directed to businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us at contact@lucentops.co and we will delete it.
10. Security
We use reasonable technical and organizational measures to protect personal information, including encryption of data in transit, encrypted backups, and access controls limiting who can view client and payment data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Where your information is stored
We are a US-based business, and the information described in this Policy is stored and processed in the United States.
12. Changes to this Policy
We may update this Policy from time to time. We will post the revised Policy on the Site with a new effective date and version number at the top. If a change is material, we will provide additional notice where required by law, such as by email to clients or a notice on the Site.
13. Contact us
Questions about this Policy, or requests concerning your personal information, can be sent to:
Lucent Ops LLC, doing business as LucentOps
659 E 800 N, Logan, UT 84321
contact@lucentops.co