Privacy Policy

1. Who We Are

Lucido LLC ("Lucido," "we," "us," or "our") is a technology consulting company headquartered at 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States. We operate the website at https://lucido.dev and provide CTO coaching, fractional CTO services, technical due diligence, and technology strategy consulting.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website or engage with our services.

2. Information We Collect

Information You Provide Directly

When you contact us via our website form, we collect:

• Name — to identify you and personalize our response
• Email address — to contact you in relation to your inquiry
• Company name (optional) — to understand your business context
• Service of interest (optional) — to route your inquiry appropriately
• Message content — your questions, challenges, or goals

Information Collected Automatically

When you visit our website, we may automatically receive limited technical data, including:

• IP address (anonymized by our analytics provider)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent on the site

We do not build advertising profiles, sell data, or track you across third-party sites.

3. How We Use Your Information

We use the information we collect exclusively to:

• Respond to your inquiries and provide the services you requested
• Schedule and conduct discovery calls or consultations
• Send you information about our services when you have requested it
• Understand how our website is used so we can improve it (using aggregated, privacy-preserving analytics)
• Comply with applicable laws and regulations

We do not use your data for automated decision-making, profiling, advertising, or sell it to third parties.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for processing your personal data is:

• Contractual necessity — to respond to your inquiry and provide services you request
• Legitimate interests — to operate, improve, and promote our services, where such interests are not overridden by your rights
• Consent — where you have explicitly provided consent (e.g., newsletter opt-in, if applicable)
• Legal obligation — to comply with applicable laws

5. Data Sharing & Third Parties

We share your information only with the limited third-party services necessary to operate our website and deliver our services:

• Resend (resend.com) — our transactional email provider, used to deliver contact form submissions to our team. Resend processes email data on our behalf and is contractually bound to protect it.
• Cloudflare (cloudflare.com) — our website hosting and CDN provider. Cloudflare may process technical request data as part of site delivery and DDoS protection.
• Plausible Analytics (plausible.io) — our privacy-friendly website analytics provider. Plausible does not use cookies, does not collect personal data, and does not share data with advertisers.

We do not sell, rent, or trade your personal data to any third party. We will disclose personal data if required by law, court order, or valid legal process.

6. Cookies & Analytics

Our website uses Plausible Analytics, a privacy-first analytics tool that operates without cookies and without collecting personally identifiable information. Plausible does not track users across websites and is fully compliant with GDPR, CCPA, and PECR.

We do not use:

• Google Analytics or other tracking-heavy analytics
• Advertising or retargeting cookies
• Third-party tracking pixels
• Session-recording tools

If we introduce any cookies in the future, we will update this policy and, where required, obtain your consent first.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law:

• Contact form submissions — retained for up to 3 years after your last interaction with us, or until you request deletion
• Email correspondence — retained as long as necessary for the business relationship or legal compliance
• Analytics data — aggregated, non-personal; retained indefinitely as statistical data

After the applicable retention period, personal data is securely deleted or anonymized.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data ("right to be forgotten")
• Restriction — request that we restrict processing of your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@lucido.dev. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights:

• Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete — you may request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out — you have the right to opt out of the sale of personal information. We do not sell personal information
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact us at privacy@lucido.dev.

10. Data Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all data transmitted to and from our website
• Access controls limiting who within our organization can access personal data
• Use of reputable, security-audited third-party providers (Cloudflare, Resend)

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately.

11. Children's Privacy

Our website and services are intended for adults and business professionals. We do not knowingly collect personal information from children under the age of 16. If we learn that we have collected personal data from a child under 16 without parental consent, we will promptly delete it. If you believe we have collected such data, please contact us at privacy@lucido.dev.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: