Privacy Policy

Our Commitment to Privacy

Data Controller

Lucerna Labs Limited is the Data Controller responsible for the collection and processing of your personal data under applicable UK data protection laws.

Registered Address:
25 Dunkellin Way,
South Ockendon,
England,
RM15 5ES

Email: [email protected]

• Account Information: Email address, username, and profile details when you create an account
• Content Data: Text prompts, generated videos, images, and other content you create using our platform
• Usage Data: Information about how you use our services, including API calls, feature usage, and interaction patterns
• Technical Data: IP address, browser type, device information, and cookies for service optimization
• Payment Information: Billing details and payment history (processed securely through third-party providers)

• Service Delivery: To provide AI UGC generation services, process your content requests, and maintain your account
• Platform Improvement: To enhance our AI models, improve content quality, and develop new features
• Communication: To send service updates, billing notifications, and respond to your inquiries
• Security: To protect against fraud, unauthorized access, and ensure platform security
• Legal Compliance: To comply with applicable laws and regulations regarding AI-generated content

Legal Basis for Processing

• Contract: To create and manage your account, provide requested services, and process transactions.
• Consent: For marketing communications, optional cookies, and any processing where your consent is required.
• Legitimate Interests: To improve our services, maintain platform security, prevent fraud, and enhance user experience.
• Legal Obligation: To comply with tax, accounting, regulatory, and legal requirements.

International Data Transfers

Some of your personal information may be processed or stored outside the United Kingdom where our service providers operate.

Whenever personal data is transferred internationally, we ensure appropriate safeguards are in place, including adequacy regulations, Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms recognised under UK data protection legislation.

• Encryption: All data is encrypted in transit and at rest using industry-standard encryption protocols
• Access Controls: Strict access controls limit who can view your data within our organization
• Regular Audits: We conduct regular security audits and penetration testing to identify vulnerabilities
• AI Model Security: Generated content is processed in secure, isolated environments
• Incident Response: We have procedures in place to quickly respond to any security incidents

• Your Content: You retain ownership of the text prompts and instructions you provide to our platform
• Generated Content: You own the AI-generated videos and images created using our platform
• Training Data: We may use aggregated and anonymised usage statistics to improve our services. Your personal prompts, uploaded content and generated content will not be used to train AI models unless you have provided your explicit consent where required.
• Content Moderation: We reserve the right to review content for compliance with our terms of service
• Intellectual Property: We respect intellectual property rights and have procedures for handling claims

• Service Providers: We share data with trusted third-party providers for hosting, payment processing, and analytics
• AI Partners: Some AI processing may be performed by our technology partners under strict data protection agreements
• Legal Requirements: We may disclose information when required by law or to protect our rights and safety
• Business Transfers: In the event of a merger or acquisition, user data may be transferred to the new entity
• No Selling: We do not sell your personal information to third parties for marketing purposes

• Customer accounts are retained while your account remains active.
• Support enquiries are generally retained for up to 24 months.
• Transaction and accounting records are retained for the period required by law.
• Marketing preferences are retained until you withdraw consent or unsubscribe.
• Data may be retained longer where required to establish, exercise or defend legal claims.

Your Rights & Controls

• Access: You can request access to the personal information we hold about you
• Correction: You can update or correct your account information at any time
• Deletion: You can request deletion of your account and associated data (subject to legal requirements)
• Data Portability: You can request a copy of your data in a machine-readable format
• Opt-Out: You can opt out of non-essential communications and certain data processing activities
• Complaint Rights: If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). We encourage you to contact us first so we can try to resolve your concerns.

AI-Specific Privacy Considerations