Privacy Policy | Lonare.com

1. Introduction & Overview

Welcome to Lonare.com. We respect your privacy and are committed to protecting your personal data in strict compliance with global privacy regulations, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR 2016/679), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable regional data protection laws.

This Privacy Policy explains how Lonare.com collects, uses, discloses, stores, processes, and safeguards your personal data when you visit our website, access or use our software-as-a-service (SaaS) platforms, AI applications, tools, APIs, software solutions, and related services (collectively, the "Services").

By accessing, browsing, registering for, or using our Services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you must immediately discontinue use of all Lonare.com Services.

2. Important Legal Disclaimers & Scope

Disclaimer: Lonare.com provides enterprise-grade AI applications, software platforms, and digital services. This Privacy Policy governs all information collected through our website, mobile applications, APIs, subdomains, and integrated third-party systems.

2.1 Capacity & Binding Agreement

By using Lonare.com, you represent and warrant that:

You are at least 18 years of age (or the legal age of majority in your jurisdiction).
You possess the legal authority to enter into binding agreements.
If you represent an organization, company, or agency, you possess the authority to bind that entity to this Privacy Policy.

2.2 Controller vs. Processor Status

Data Controller Status: Lonare.com acts as a Data Controller with respect to personal data collected directly from direct users, website visitors, account registrants, billing contacts, and marketing subscribers.
Data Processor Status: Lonare.com acts as a Data Processor (or Service Provider) when processing customer-submitted data, enterprise client data, or end-user inputs uploaded through our AI tools, SaaS products, white-label services, or client integrations. In such cases, our processing activities are governed by our Data Processing Addendum (DPA) and enterprise service agreements.

3. Information We Collect About You

We collect personal information through three main channels: information you provide directly, information collected automatically during your interaction with our Services, and information received from third parties.

3.1 Information You Provide Directly

Account Registration & Contact Data: Full name, business name, professional email address, telephone number, mailing address, username, password, job title, and company details.
Billing & Transactional Data: Billing address, VAT/tax identification numbers, payment method details, purchase history, transaction records, subscription status, and invoicing details. (Note: Full credit card numbers are processed directly by PCI-DSS compliant payment gateways, such as Stripe, and are never stored on Lonare.com servers).
User Content, AI Prompts & Inputs: Data, queries, prompts, text, code, files, feedback, survey responses, customer support communications, and materials you submit, upload, or input into our AI tools or platforms.
Identity Verification Data: Verification documents, government-issued identification numbers (where strictly required for compliance, anti-fraud, or enterprise enterprise onboarding), and professional credentials.

3.2 Information Collected Automatically

When you navigate or interact with Lonare.com, our systems automatically capture technical data via cookies, server logs, web beacons, and embedded analytics tools:

Device & Technical Data: Internet Protocol (IP) address, browser type and version, operating system, hardware specifications, unique device identifiers, language settings, and screen resolution.
Usage & Behavioral Data: Clickstream patterns, pages viewed, time spent per page, referral URLs, feature utilization, entry/exit pages, search queries, API calls, timestamped log records, error reports, and interaction metrics.
Geolocation Data: General geographic location (country, region, city) derived from your IP address.

3.3 Information Received from Third Parties

Identity & Authentication Providers: Login details provided through single sign-on (SSO) integrations (e.g., Google OAuth, GitHub, LinkedIn).
Business & Analytics Partners: Public business directories, advertising networks, fraud prevention services, customer database enrichment vendors, and payment processors.

Here is Section 4 rewritten without tables, formatted specifically for easy reading in the Medium.com editor:

4. How We Use Your Personal Data & Lawful Processing Bases

We process your personal data strictly in accordance with lawful processing bases under Article 6 of the UK/EU GDPR and equivalent requirements under California and global data privacy laws:

Service Provision & Platform Execution: We process Contact Data, Account Data, User Content, and Payment Data to set up your account, operate our SaaS platforms, execute AI data processing, and fulfill your transactions.
- Lawful Basis: Contractual Necessity (Art. 6(1)(b) GDPR).
Platform Improvement & AI Model Optimization: We process Usage Data, Device Data, Anonymized User Inputs, and System Feedback to maintain platform performance, debug software issues, optimize user interfaces, and refine algorithmic functionality.
- Lawful Basis: Legitimate Interests (Art. 6(1)(f) GDPR) or Consent (Art. 6(1)(a) GDPR) where explicitly required.
Security, Infrastructure & Fraud Prevention: We process Technical Data, IP Addresses, Security Logs, and Identity Data to detect unauthorized system access, prevent malicious activity, mitigate DDoS attacks, and preserve overall network integrity.
- Lawful Basis: Legitimate Interests (Art. 6(1)(f) GDPR) and Legal Obligation (Art. 6(1)(c) GDPR).
Billing, Invoicing & Financial Accounting: We process Billing Data, Purchase Records, Tax Identifiers, and Transaction History to process payment charges, generate valid tax invoices, and comply with legal financial reporting requirements.
- Lawful Basis: Contractual Necessity (Art. 6(1)(b) GDPR) and Legal Obligation (Art. 6(1)(c) GDPR).
Customer Support & Technical Troubleshooting: We process Contact Data, Support Logs, and User Communications to respond to support tickets, resolve software issues, and administer account-related administrative notices.
- Lawful Basis: Contractual Necessity (Art. 6(1)(b) GDPR) and Legitimate Interests (Art. 6(1)(f) GDPR).
Marketing Communications & Product Updates: We process Contact Data, Marketing Preferences, and System Usage Data to send platform updates, newsletters, product announcements, and promotional offers.
- Lawful Basis: Consent (Art. 6(1)(a) GDPR) or Legitimate Interests (via soft opt-in for existing service subscribers).
Legal Compliance & Enforcement: We process all relevant Data Categories to comply with court orders, regulatory inquiries, tax demands, and enforce our binding terms and legal agreements.
- Lawful Basis: Legal Obligation (Art. 6(1)(c) GDPR).

5. AI Processing, Automated Decision-Making & Analytics

Important Disclosure Regarding Artificial Intelligence: Lonare.com develops and operates cutting-edge AI technologies and automated tools.

5.1 Inputs, Outputs & AI Processing

When you utilize AI tools or SaaS products provided by Lonare.com:

Processing of Prompts: Your input text, datasets, queries, and uploads are processed to generate real-time AI responses, analytics, or outputs.
Third-Party Enterprise Models: We may utilize secure, privacy-compliant enterprise APIs (such as OpenAI Enterprise, Anthropic, Google Cloud AI, or specialized cloud infrastructure) to generate outputs. These third parties are bound by strict contractual confidentiality and data processing standards prohibiting them from using your customer inputs for training public models.
Model Training Controls: We do not sell your personal prompts or enterprise input data to public data pools. Anonymized, aggregated usage telemetry may be used internally to fine-tune system reliability, software logic, and infrastructure scalability.

5.2 Automated Decision-Making & Profiling

Lonare.com does not perform automated decision-making or profiling that produces legal effects or significantly affects individuals (within the meaning of Article 22 UK/EU GDPR). Automated processing is limited to automated threat detection, fraud rate-limiting, and personalized system UI preferences.

6. How We Share & Disclose Your Personal Data

We do not sell, rent, or lease your personal data to third parties for monetary consideration. We disclose personal data only under strict privacy controls and as described below:

6.1 Authorized Sub-processors & Service Providers

We engage carefully vetted third-party service providers to perform operational functions on our behalf. These service providers act as Data Processors bound by legal Data Processing Addendums (DPAs):

Cloud Infrastructure & Hosting: Amazon Web Services (AWS), Google Cloud Platform (GCP), DigitalOcean, Vercel, Cloudflare.
Payment Processing: Stripe, PayPal, or enterprise merchant gateways (processing payment credentials in PCI-DSS compliant environments).
AI Model Infrastructure: Enterprise API providers (e.g., OpenAI, Anthropic, Google Vertex AI).
Communications & Support: SendGrid, Postmark, Twilio, Intercom, Zendesk.
Analytics & Performance Monitoring: Google Analytics (anonymized IP), PostHog, Sentry, Datadog.

6.2 Corporate Transactions

If Lonare.com is involved in a merger, acquisition, corporate reorganization, asset sale, bankruptcy proceeding, or transition of service to another provider, your personal data may be transferred as a core business asset. We will notify you via email or a prominent site notice prior to any change in ownership or controlling entity.

6.3 Mandatory Disclosures & Legal Defense

We reserve the right to disclose personal data if required by applicable law, search warrant, subpoena, court order, or regulatory authority, or when we determine in good faith that disclosure is reasonably necessary to:

Comply with a legal obligation or judicial process.
Protect and defend the rights, property, or safety of Lonare.com, our employees, users, or the general public.
Detect, prevent, or address fraud, cyberattacks, security vulnerabilities, or infrastructure threats.
Enforce our Terms of Service, contracts, and legal documentation.

7. Cookies, Tracking Technologies & Opt-Out Options

Lonare.com uses cookies, web beacons, clear GIFs, pixels, and local storage objects (LSOs) to collect telemetry and maintain secure user sessions.

7.1 Cookie Categories

Strictly Necessary Cookies: Essential for system operation, security authentication, navigation, and core feature access. You cannot disable these via our preference center.
Performance & Functional Cookies: Remember user settings, language preferences, UI configurations, and custom dashboards.
Analytics & Optimization Cookies: Help us measure traffic patterns, error occurrences, page performance, and content usage to improve platform responsiveness.
Marketing & Targeting Cookies: Used with your consent to display relevant advertisements across third-party networks and assess promotional campaign performance.

7.2 Managing Cookie Preferences

You can manage or disable non-essential cookies at any time via:

Our on-site Cookie Preference Banner.
Adjusting your browser settings to reject cookies or alert you when cookies are sent.
Utilizing industry opt-out tools such as the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA) opt-out platforms.

Disabling necessary cookies may impair the performance, security, and functionality of Lonare.com Services.

8. International Data Transfers

Lonare.com is headquartered in the United Kingdom and operates global cloud infrastructure. Consequently, your personal data may be transferred, stored, and processed in countries outside the UK and European Economic Area (EEA), including the United States.

When personal data is transferred across international borders, we ensure adequate protection mechanisms are in place pursuant to Chapter V of the UK/EU GDPR:

Adequacy Decisions: Transfers to countries recognized by the UK Secretary of State or European Commission as ensuring an adequate level of data protection.
Standard Contractual Clauses (SCCs): Execution of the European Commission’s Standard Contractual Clauses alongside the UK International Data Transfer Agreement (IDTA) / International Data Transfer Addendum.
Supplementary Safeguards: Technical encryption in transit and at rest, zero-trust infrastructure access controls, and strict contractual commitments from third-party vendor operations.

9. Data Retention & Destruction Policies

We retain your personal data only for as long as necessary to fulfill the operational, legal, tax, accounting, and security purposes for which it was collected.

9.1 Retention Schedules

Active Account Data: Retained for the duration of your active registration/subscription plus two (2) years following account deletion or inactivity.
Transaction & Financial Records: Retained for seven (7) years following completion of transaction to comply with UK HMRC, IRS, and international tax and accounting statutory laws.
AI Prompts & Telemetry Logs: Server and security logs are retained for ninety (90) days to twelve (12) months depending on platform diagnostics and security operational protocols.
Marketing Contact Information: Retained until you withdraw consent or click "unsubscribe."

9.2 Safe Erasure

Upon expiration of applicable retention periods, personal data is permanently destroyed, overwritten, or rendered irreversibly anonymized using industry-standard cryptographic erasure and secure data deletion procedures.

10. Security Measures & Limitation of Liability

Security Guarantee Disclaimer: While Lonare.com implements robust enterprise security, no digital transmission over the internet or cloud storage architecture can be guaranteed as 100% immune from malicious security breaches or technical failures.

10.1 Technical & Organizational Safeguards

Lonare.com implements security measures commensurate with the sensitivity of personal data collected, including:

Encryption: SSL/TLS 1.3 encryption for data in transit; AES-256 bit encryption for data at rest.
Access Control: Role-based access control (RBAC), multi-factor authentication (MFA), and zero-trust administrative restrictions.
Monitoring & Audits: Continuous vulnerability scanning, intrusion detection systems (IDS), web application firewalls (WAF), and periodic code reviews.
Data Isolation: Enterprise tenant isolation and isolated databases for SaaS client environments.

10.2 User Security Responsibilities

You are responsible for safeguarding your user credentials, passwords, API keys, and account tokens. Do not share credentials with unauthorized individuals. Notify Lonare.com immediately if you suspect unauthorized access to your account.

10.3 Limitation of Liability

To the maximum extent permitted under applicable law, Lonare.com, its directors, officers, employees, and software engineers shall not be held liable for direct, indirect, incidental, consequential, or punitive damages resulting from unauthorized third-party access, cyber incidents, network outages, or data loss beyond our reasonable operational control.

11. Your Global Privacy Rights

Depending on your geographic location and local data privacy laws, you possess specific legal rights regarding your personal data.

11.1 European & UK Privacy Rights (UK/EU GDPR)

Right of Access (Art. 15): Request copies of your personal data held by Lonare.com.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal records.
Right to Erasure / "Right to be Forgotten" (Art. 17): Request permanent deletion of your personal data under specific statutory conditions.
Right to Restrict Processing (Art. 18): Request restriction of data processing in specified circumstances.
Right to Data Portability (Art. 20): Request transfer of your data in a structured, machine-readable format to another provider.
Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

11.2 United States Consumer Rights (CCPA / CPRA & State Laws)

If you are a resident of California or states with equivalent privacy frameworks (e.g., Virginia, Colorado, Connecticut, Utah, Texas):

Right to Know / Access: Request disclosure of categories and specific pieces of personal information collected, sources, business purposes, and categories of third parties to whom data is disclosed.
Right to Delete: Request deletion of personal information collected from you.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: Lonare.com does not sell your personal information or share it for cross-context behavioral advertising.
Right to Non-Discrimination: You will not receive discriminatory treatment or diminished service quality for exercising your privacy rights.

12. Children's Privacy Notice

Lonare.com Services are designed exclusively for business professionals, adults, and enterprise organizations. Our Services are not intended for or directed to individuals under the age of 18 (or under 16 in the EEA/UK).

We do not knowingly solicit or collect personal data from children. If we discover that a child under 18 has submitted personal data to Lonare.com without verified parental consent, we will immediately take technical steps to purge that data from our production databases and backup archives.

If you suspect a minor has provided personal data to Lonare.com, please alert us immediately at privacy@lonare.com.

13. Third-Party Links & External Platforms

Our website and SaaS applications may contain links to third-party websites, external software tools, community platforms, or enterprise services. Lonare.com exercises no control over, and assumes no responsibility for, the privacy practices, cookie configurations, security policies, or content of third-party websites.

Interacting with external links is at your own risk. We strongly recommend reviewing the privacy notices of every website you visit.

14. Changes & Revisions to This Privacy Policy

We reserve the right to modify, update, or revise this Privacy Policy at any time to reflect software enhancements, regulatory updates, technological advancements, or changes in business operations.

When material changes are made to this policy:

We will update the "Last Updated" date at the top of this document.
We will notify registered users via email or present a high-visibility pop-up banner within our platform application dashboards.
Continued use of Lonare.com Services following notification of changes constitutes full acceptance of the revised terms.

15. Regulatory Complaints & Contact Information

If you have questions, comments, or requests regarding this Privacy Policy, or wish to exercise your legal privacy rights, please contact our Data Protection Officer (DPO) and privacy compliance team:

Legal Entity Name: Lonare.com
Data Protection Officer / Compliance Lead: Privacy Officer
Privacy Contact Email: privacy@lonare.com
General Website: https://lonare.com

Regulatory Authority Supervisory Recourse

UK Residents: If you believe Lonare.com has failed to satisfactorily resolve a data privacy concern, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk / Tel: 0303 123 1113).
EU/EEA Residents: You have the right to lodge a formal complaint with your local EU Data Protection Authority (DPA) in the EU Member State of your habitual residence or place of work.