Privacy Policy
Last updated 23 October 2026
In short: this policy explains what personal data we collect when you visit www.luciqo.ai or use the Luciqo platform, why we use it, who we share it with and how long we keep it. We collect only what we need to run the service, we never sell your data, and you can ask us to access, correct or delete your data at any time.
1. Who we are
1.1 Luciqo is an AI visibility and marketing intelligence platform operated by Virtuance Digital Marketing Ltd, a company registered in England and Wales ("Luciqo", "we", "us", "our").
1.5 For any question about this policy or your personal data, email us at contact@luciqo.ai.
2. Our role
2.1 We are the controller of personal data about our website visitors, customers and their team members, such as account details, billing details and usage logs. This policy covers that data.
2.2 When a customer connects a data source (such as Google Analytics 4, Matomo or HubSpot) or adds data that contains personal data about their own customers, the customer is the controller and we act as their processor. In that case we follow the customer's instructions under our Data Processing Addendum. If you are a customer of one of our customers, please contact that business about your data.
3. The data we collect
3.1 Account and profile data. When you sign up or are invited to a workspace, we collect your name, email address, phone number, company name, job title and login credentials. Passwords are stored only in hashed form. If you sign in with Google, we receive your name, email address and profile picture from Google.
3.2 Billing data. When you buy a plan or top-up, our payment provider Stripe collects your payment details. We receive and keep your billing name, billing address, VAT number where you give one, and a record of your purchases and invoices. We do not see or store your full card number.
3.3 Usage and technical data. When you use the website or platform, we collect browser and device information, IP address, log data (such as pages visited, times and errors) and information about which features you use and how much, such as tokens and GEO articles used.
3.4 Form and contact data. When you fill in a form or email us, we collect what you send us. To protect our forms from spam and abuse, we also keep a scrambled (hashed) form of your IP address, which lets us limit repeated submissions without storing the address itself.
3.5 Content you add. This includes brand profiles, buyer questions, competitor lists, personas and the reports and articles produced for you. This content is mainly about businesses, but it can include personal data if you add it.
3.6 Connected data. If you connect Google Analytics 4, Matomo or HubSpot, we store only pseudonymised and aggregated journey and analytics data. We never store contact names or email addresses from your CRM or analytics. We act as processor for this data, as explained in section 2.2.
4. How we use your data and our lawful bases
4.1 We use personal data only where we have a lawful basis under UK GDPR (and EU GDPR where it applies):
| Purpose | Data used | Lawful basis |
|---|---|---|
| Creating and running your account, providing the platform and support | Account, usage, content | Contract |
| Taking payments, issuing invoices and keeping tax records | Billing, account | Contract and legal obligation |
| Sending service emails, such as sign-in links, receipts, usage alerts and important changes | Account | Contract |
| Keeping the service secure, preventing spam, fraud and abuse | Usage, technical, form data | Legitimate interests (protecting our service and users) |
| Understanding how features are used and improving the service | Usage | Legitimate interests (improving our product) |
| Telling you about new features and offers relevant to your business | Account | Legitimate interests, or consent where the law requires it |
| Replying to enquiries | Form and contact data | Legitimate interests (responding to you) |
| Meeting legal and regulatory requirements | Any relevant data | Legal obligation |
4.2 You can opt out of marketing emails at any time using the link in the email or by contacting us. Service emails cannot be switched off while you have an account, because we need them to run the service.
4.3 Where we rely on legitimate interests, we have considered your rights and expectations and believe our use is fair and proportionate. You can object at any time (see section 9).
5. How AI is used
5.1 To answer buyer questions, the platform sends the questions you choose, together with relevant brand profile details, to third-party AI assistants: OpenAI ChatGPT, Anthropic Claude, Google Gemini and Perplexity. We also use AI providers to write GEO articles, create personas and optional cartoon avatars, prepare reputation reports and answer "Ask your data" questions. For "Ask your data" and data-based personas, only the question and aggregated figures from your connected data (such as visits or deals by channel) are sent to the AI provider, never individual records.
5.2 These requests are sent through the providers' APIs. Under their API terms, these providers do not use API data to train their models by default.
5.3 Please avoid putting personal data about individuals into buyer questions or brand profiles unless it is needed.
5.4 We do not use AI to make decisions about you that have legal or similarly significant effects.
6. Who we share data with
6.1 We do not sell your personal data, and we do not share it with third parties for their own marketing.
6.2 We share personal data only with trusted service providers who help us run Luciqo and who act on our instructions under written contracts. These include:
| Provider | What they do for us |
|---|---|
| Vercel Inc. | Website and app hosting |
| Supabase Inc. | Database and authentication |
| Inngest Inc. | Background job scheduling |
| Stripe Payments Europe Ltd / Stripe Inc. | Payments and billing |
| OpenAI | AI answers |
| Anthropic PBC | AI answers |
| Google LLC | Gemini AI answers, Google Analytics connection and Google sign-in |
| Perplexity AI Inc. | AI answers |
| Resend Inc. | Transactional email |
| HubSpot Inc. | Only when a customer connects HubSpot |
6.3 The full list, with locations, is in our Data Processing Addendum.
6.4 We may also share personal data with our professional advisers, with authorities where the law requires it, to protect our rights or the safety of others, or with a buyer or successor if our business or part of it is sold or reorganised. In that case we will make sure your data stays protected.
6.5 If you create a share link to a report, anyone with the link can view that report. Please share links only with people you trust.
7. International transfers
7.1 Some of our providers are based in, or store data in, the United States or other countries outside the UK and European Economic Area.
7.2 Where we transfer personal data outside the UK, we make sure it is protected by an approved safeguard, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the UK–US Data Bridge where the provider is certified under it.
7.3 You can ask us for more information about the safeguards we use.
8. How long we keep data
8.1 We keep account data for as long as your account is active.
8.2 After you close your account, we delete or anonymise your personal data, unless we need to keep some of it for longer to meet legal, tax or accounting requirements, to resolve disputes or to enforce our terms.
8.3 Billing records are kept for as long as UK tax law requires.
8.4 Security and form logs are kept only for as long as needed to protect the service.
8.5 Customers can delete a data pull and disconnect a connected source at any time. Disconnecting stops further syncing.
9. Your rights
9.1 Under UK GDPR, and EU GDPR where it applies, you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct personal data that is wrong or incomplete;
- delete your personal data in some circumstances;
- restrict how we use your personal data in some circumstances;
- object to our use of your personal data where we rely on legitimate interests, and at any time to direct marketing;
- data portability, meaning you can receive data you gave us in a commonly used format or ask us to send it to someone else; and
- withdraw consent at any time, where we rely on consent.
9.2 To use any of these rights, email contact@luciqo.ai. We may need to confirm your identity first. We will reply within one month, and tell you if we need longer for a complex request. There is usually no charge.
9.3 You can update many of your details yourself in your account settings.
9.4 If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk. If you are in the EU, you can complain to your local data protection authority.
10. Security
10.1 We use appropriate technical and organisational measures to protect personal data. These include encryption in transit, encryption of OAuth tokens at rest, hashed passwords, access controls that limit data to the people and systems that need it, and storing only pseudonymised and aggregated data from connected sources.
10.2 No system is completely secure. If we become aware of a personal data breach that is likely to put your rights at risk, we will tell you and the ICO as the law requires.
11. Cookies
11.1 We use only strictly necessary cookies, for example to keep you logged in and remember your selected workspace. We do not use analytics or advertising cookies at launch. Our Cookie Policy gives the full details.
12. Children
12.1 Luciqo is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children.
13. Third-party sites
13.1 Our website and reports may link to other websites, such as sources cited in AI answers. We are not responsible for how those websites handle personal data, so please read their privacy policies.
14. Changes to this policy
14.1 We may update this policy from time to time. The date at the top shows when it was last updated. If we make important changes, we will tell customers by email or in the platform.
15. Contact us
15.1 Email contact@luciqo.ai with any questions about this policy or your personal data.
15.2 Virtuance Digital Marketing Ltd.