Privacy notice

This notice explains what personal data LCALens (https://lcalens.com) processes, why, and your rights under the EU and UK General Data Protection Regulation.

Who is responsible

The controller is Muhammad Usman Siddiqui, operating LCALens. Contact details for privacy requests are given on the contact page; choose the topic “Support” and mention “privacy”.

What we collect

• Account data: your email address, optional name, and authentication records (sign-in times, multi-factor settings).
• Workspace data: organisations, memberships and the calculations you save, including the activity data you enter.
• Contact messages: the name, email, company and message you send through the contact form.
• Technical data: server logs (IP address, user agent, time) kept for security and troubleshooting.

Why and on what basis

• To provide the service you sign up for (contract).
• To keep the service secure and prevent abuse (legitimate interests).
• To answer your messages (legitimate interests, or steps before a contract).

We do not sell personal data and do not use it for advertising.

Processors and location

Data is stored with Supabase in the EU (Frankfurt, Germany). The website is served by our hosting provider, and transactional email is sent through an email delivery provider. A current list of sub-processors is available on request.

Retention

Account and workspace data are kept while your account is active and deleted within 30 days of account closure, except locked calculations you have exported or records we must keep by law. Contact messages are kept for up to 24 months.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing. You can also complain to your data protection authority, for example the Garante per la protezione dei dati personali in Italy.