Skip to content
LUCA LLC
Book a call
Legal

Privacy Policy

Last updated: October 5, 2026

1. Introduction

LUCA LLC ("LUCA," "we," "us," or "our") is committed to protecting your privacy. This policy describes the public corporate website at lucatechnology.com and its inquiry forms. It does not establish the privacy terms for a product account, banking connection, payment, client portal or healthcare engagement. The applicable product notices and service agreements apply when those services are used. Visiting a page is not consent to every optional use of your data.

2. Information We Collect

We may collect the following categories of information:

Personal Information You Provide

Your name, work email, company, optional phone number, message and selected division, service or product. Depending on the form, you may also provide industry, inquiry type, a Media package, event date and location, or Website Delivery kickoff answers about your business, pages, content, design and delivery needs. Do not include patient information, bank credentials, passwords, access tokens or private document links.

Request and Referral Information

When you request a page, hosting services receive network and request information, such as your IP address, requested URL and browser headers. An inquiry may include the page and campaign parameters used to reach the form. These details support page delivery, inquiry routing, reliability and abuse prevention. A form request is not consent to advertising tracking.

Client Service Data

For clients under active service agreements, we may process technical data, system configurations, and operational data as necessary to deliver contracted services. This data is governed by the applicable SOW, MSA, or Business Associate Agreement (BAA).

3. How We Use Your Information

  • •To provide, maintain, and improve this website and its inquiry handling
  • •To respond to inquiries and communicate with you about our services
  • •To send marketing communications (with your consent, where required)
  • •To detect, prevent, and address technical issues and security threats
  • •To comply with legal obligations and enforce our Terms of Service
  • •To analyze usage patterns and improve user experience

4. Cookies and Browser Storage

Your browser settings let you manage cookies and site storage. This website does not provide a separate cookie-preference panel. Blocking or clearing site storage may affect sign-in or saved data in a product you use. Product sign-in and hosting services may use their own cookies. Their notices apply separately from this website's inquiry forms.

This website's inquiry forms do not automatically save a draft in your browser. Unsaved entries may be lost when you close or reload a page. Filling in a form does not submit it to LUCA or book a call. Do not include patient information, passwords, access tokens or private document links.

The Website Delivery kickoff at /onboard offers optional Save draft on this device, Resume saved draft and Delete saved draft controls. Choosing Save stores the business information you entered in this browser's site storage. Resuming restarts at Business so you can review each step. Later edits require another save. The draft does not sync across devices, and saving it does not send it to LUCA.

A saved draft expires after seven days and is removed when this form next opens; this is not a background deletion timer. Anyone using this browser profile can read it, so do not save on a shared device. Use Delete saved draft or clear this site's browser storage to remove the local copy. Deleting that copy does not cancel or change a request already submitted to LUCA.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • •Service Providers: With trusted service providers involved in website hosting, inquiry storage and notifications. The website uses Vercel for hosting. When an inquiry connection is enabled, Supabase supports inquiry storage and FIRMA routing, and Resend supports owner email notifications. An unavailable form does not mean a request has been saved or delivered: follow its displayed result, or use the email and phone options. A product link is not authorization to share bank or payment information.
  • •Legal Requirements: When required by law, subpoena, court order, or government regulation
  • •Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset
  • •Protection of Rights: To protect the rights, property, or safety of LUCA, our clients, or the public

MPM is a separate company with separate customer records. A link to MPM does not transfer your LUCA inquiry. If a request needs an MPM handoff, we ask for your permission and share only the details needed for that handoff.

6. Data Security

Public inquiry forms are not a channel for patient records, bank credentials or secrets. We limit use of inquiry details to handling your request and the purposes described in this policy. No method of Internet transmission or electronic storage is completely secure; do not treat this website as an approved protected-data channel.

7. Data Retention

The optional device-local kickoff draft follows the seven-day lazy expiry described above. That is not the retention schedule for submitted inquiries, hosting logs, notifications or backups. Submitted information is kept as needed to respond to your request, manage an agreed engagement and meet applicable legal obligations. You may request deletion using the contact details below; records required for legal obligations or an active agreement may need to be retained. This policy does not replace obligations already applicable to data collected under an existing policy or agreement.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • •Right to access the personal information we hold about you
  • •Right to request correction of inaccurate personal information
  • •Right to request deletion of your personal information
  • •Right to opt out of marketing communications
  • •Right to data portability where applicable

To exercise any of these rights, contact us at info@lucatechnology.com.

9. HIPAA Safeguards

Healthcare engagements require HIPAA-aligned workflows under an applicable Business Associate Agreement (BAA). A BAA and an approved protected channel must be in place before protected health information (PHI) is shared with LUCA. Do not send patient names, claim numbers, medical records or other PHI through this website's public inquiry forms. A signed BAA does not by itself authorize every workflow or establish a certification; the agreed scope and safeguards must also be reviewed before protected data is processed.

10. Children's Privacy

This business website is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

11. Third-Party Links

This website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We identify updates using the date at the top of this page. We provide any notice or obtain consent required for material changes. Updating this page does not authorize a new use of previously collected information that is inconsistent with the applicable notice or consent.

13. Contact Us

For questions or concerns about this Privacy Policy, contact us at info@lucatechnology.com. Or call (402) 741-3200.