Lucetivo Privacy Notice

Policy draft for the independent external English release. Not yet published or effective.

Who operates Lucetivo

Astroblaster LTD, company number 13946500, 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, operates Lucetivo. Contact michalcilek@astroblasterltd.com for technical support or privacy requests. This notice covers https://lightmaster.astroblaster.app and its MCP endpoint. Original Sites records remain separate and are not automatically migrated.

What the service processes

Auth0 handles account registration, email verification and login credentials. Lucetivo checks an access token and derives a stable opaque account identifier from its verified issuer and subject. Email is not the ownership key. Cloudflare provides hosting, the D1 database and private R2 photo storage.

Saved workspaces contain the goals, briefs, equipment and room descriptions, lesson selections, illustrative lighting plans, framing settings, observations, experiment steps, photo references, timestamps and revisions used to save and reopen your setup. Keep descriptions limited to what a lighting lesson needs.

You choose whether to select photos in the panel. Your browser resizes and re-encodes each selection as JPEG before upload. Up to four images can be saved in a session; their label may include the original filename. A photo shared in chat is not automatically imported. You can use lessons without uploading photos. Avoid identifying other people or including private, medical or payment information in images and descriptions.

The panel stores a theme preference in browser local storage. The external server has no microphone or AI model backend. Your selected host handles chat, voice, image interpretation and generation under its own terms and privacy controls. When you request coaching, tool responses may return selected workspace content to that host. Removing Lucetivo data does not remove the host's conversation history.

Support receives the email address and message or attachments you choose to send. Never send passwords, tokens or unrelated conversations. Network providers process technical information needed to deliver and secure requests. Operator access may be necessary for support and privacy requests.

Purposes and legal bases

The purposes are to authenticate the account, deliver the requested educational workspace, store and retrieve the content you select, protect the service and respond to support or privacy requests. Selecting a photo is optional; it does not authorise unrelated use of your content.

Providers and international processing

Cloudflare hosts the application, database and private photo objects. Auth0 provides authentication. The selected host provides the chat and model features separately. Processing is not confined to the UK; provider infrastructure and support may involve other countries.

Storage and deletion

Saved sessions currently have no automatic expiry and remain in active application storage until removal is handled. There is no self-service whole-account or session deletion function. Disconnecting the plugin does not erase records or close an Auth0 account.

Successful panel-photo removal removes its reference from the current owned session and deletes the active R2 object after the session update succeeds. Provider database recovery history, logs and authentication records are separate; this is not immediate erasure from every backup.

Support messages and attachments are retained for up to 30 days after the request closes, then removed from the active support mailbox under the existing support policy. Earlier deletion can be requested. This period does not set session, authentication or provider backup/log retention.

Contact the privacy address for account or session deletion. We verify ownership proportionately and never ask for passwords or tokens. Requests are handled through support. This is not an automatic whole-account deletion feature, and a particular backup purge date is not promised. Requests involving host-held records must also be addressed through that host.

Eligibility

Lucetivo account use is for people aged 18 and over, subject to any higher applicable age or host requirement. Do not provide personal information about children under 13.

Your rights

Contact the privacy address to request applicable access, correction, deletion, restriction, objection or portability rights. Applicable rights depend on the processing and law; the operator will explain the response and any lawful limits. You can complain to a relevant supervisory authority, including the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ .

The effective date will be set on publication of the completed notice. Material changes will be described through the service where practicable.