Responsible data use across every Lubyc workflow.
Lubyc connects people, work, customers, reports, bookings, and everyday productivity. This policy explains how information moves through those connected experiences and how we work to keep that information understandable and protected.
We process information for defined service and security needs.
Workspace visibility follows configured roles and access.
Important AI-supported outputs require responsible review.
Privacy at Lubyc
What this policy covers and who it applies to.
This Privacy Policy explains how Lubyc collects, uses, stores, shares, and protects personal information when you visit our website, create a Lubyc account, join an organization workspace, contact our team, or use Lubyc products and services.
Lubyc is designed to support both business operations and personal productivity. Depending on the services enabled for you, Lubyc may include CRM, HRM, Reporting, Services, Booking, Todo, communication, analytics, payment, support, and other connected workflows.
When your account is provided or managed by an organization, that organization may decide which Lubyc features you can access, what information is added to its workspace, and how workspace information is used. In that situation, the organization may act as the controller of some personal information while Lubyc processes that information to provide the platform.
Information we collect
The information that may be processed through Lubyc.
Account and profile information, including name, email address, phone number, profile image, organization, role, job title, login credentials, and account preferences.
Workspace information submitted by authorized users, such as employee records, shifts, attendance, leave, payroll-related records, career plans, contacts, deals, activities, invoices, quotes, bookings, services, reports, todos, notes, messages, and files.
Business and customer information added to CRM, Services, Booking, Reporting, Support, or other Lubyc modules by an organization or its authorized users.
Usage, browser, device, and diagnostic information, including IP address, browser type, operating system, device identifiers, pages viewed, feature interactions, timestamps, error logs, and approximate network-based location.
Communication information provided when you contact support, submit feedback, respond to a survey, request a demonstration, or communicate with Lubyc.
Subscription and billing information. Payment details may be handled by payment providers, while Lubyc may receive transaction references, payment status, billing contact information, and subscription details.
Information received through integrations when you or your organization connects an authorized third-party platform to Lubyc.
Only add personal or sensitive information to Lubyc when it is necessary, permitted, and appropriate for the relevant workspace and feature.
How we use information
Why Lubyc may process personal information.
Provide, maintain, personalize, and improve Lubyc websites, accounts, applications, and connected services.
Create and manage user accounts, organization workspaces, subscriptions, roles, permissions, and security settings.
Support CRM, HRM, Reporting, Services, Booking, Todo, Support, payment, notification, analytics, and other enabled workflows.
Calculate or display operational summaries, attendance information, task progress, report insights, booking activity, customer activity, and other workspace results requested by users.
Authenticate users, prevent unauthorized access, detect misuse, investigate incidents, and maintain platform reliability.
Respond to support requests, product questions, privacy requests, feedback, and other communications.
Understand product performance, troubleshoot errors, improve user experience, and develop new Lubyc features.
Send service notices, security alerts, account updates, and permitted product or marketing communications.
Meet legal obligations, enforce agreements, and protect Lubyc, our users, organizations, and the public.
Organizations, roles and permissions
How workspace access affects information visibility.
Lubyc workspaces may include owners, administrators, managers, employees, team members, customers, or other authorized roles. Information visible to each person depends on the permissions, modules, teams, branches, assignments, and settings configured by the organization.
Workspace owners and authorized administrators may be able to add, update, export, restrict, or remove workspace information. They may also manage user access, review activity, and configure integrations. Users should contact their organization when a privacy request relates primarily to organization-controlled workspace data.
AI and automated assistance
How Lubyc may use AI-supported features.
Some Lubyc features may use automated analysis or artificial intelligence to create summaries, suggestions, classifications, scores, insights, or workflow assistance. The information processed depends on the feature, workspace configuration, user instructions, and connected data.
AI-supported results are designed to assist people, not replace appropriate human judgment. Organizations and authorized users should review outputs before using them for employment, financial, legal, medical, or other significant decisions.
When an AI-supported feature relies on a service provider, Lubyc may transmit the minimum information reasonably required to provide that feature and will seek appropriate contractual, technical, and organizational safeguards.
Employee reports, performance insights, or automated scores should always be reviewed by an authorized manager before a consequential decision is made.
How information may be shared
The circumstances in which information may be disclosed.
With workspace owners, administrators, managers, employees, or other authorized users according to configured roles and permissions.
With hosting, infrastructure, communication, analytics, support, security, billing, payment, and other service providers that help us operate Lubyc.
With third-party platforms when you or your organization enables an integration, requests a connection, or directs Lubyc to transfer information.
With professional advisers, auditors, insurers, or business partners when reasonably necessary and subject to appropriate confidentiality obligations.
As part of a merger, financing, acquisition, restructuring, sale of assets, or similar business transaction, subject to applicable safeguards.
When disclosure is required by law, legal process, regulation, or a valid request from an authorized public authority.
When reasonably necessary to protect Lubyc, our users, another person, or the public from fraud, abuse, unlawful activity, security threats, or harm.
Lubyc does not sell personal information for money. Some privacy laws define “sale” or “sharing” more broadly, and additional regional choices may apply.
Cookies and similar technologies
How Lubyc may remember preferences and understand usage.
Lubyc may use cookies, local storage, pixels, and similar technologies to keep users signed in, remember preferences, support security, understand feature usage, measure performance, and improve our website and services.
You can manage cookies through your browser and, where available, through Lubyc’s cookie preference tools. Blocking some cookies may affect authentication, saved settings, or other functionality.
Security and account protection
How we work to reduce privacy and security risks.
Lubyc uses administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption, monitoring, backups, secure development practices, and incident response procedures.
No online platform or storage method can guarantee absolute security. Users should protect their credentials, use strong passwords, enable available security controls, review workspace access, and contact Lubyc promptly when unauthorized activity is suspected.
Data retention
How long Lubyc may keep information.
Lubyc retains information for as long as reasonably necessary to provide services, maintain accounts and business records, meet contractual commitments, comply with legal requirements, resolve disputes, prevent fraud, and protect platform security.
The retention period may depend on the category of information, workspace settings, account status, backup cycles, applicable law, and instructions from the organization controlling the workspace. When information is no longer required, Lubyc may delete, anonymize, or securely isolate it until deletion is completed.
International data transfers
What may happen when information is processed across borders.
Lubyc and its service providers may process information in countries other than the country where you live or where your organization operates. Privacy and data protection laws may differ between jurisdictions.
Where required, Lubyc may use contractual safeguards, transfer assessments, approved certification mechanisms, or other lawful measures intended to protect information transferred internationally.
Your privacy rights
Requests and choices that may be available to you.
Request access to personal information associated with you.
Request correction of inaccurate or incomplete information.
Request deletion of information, subject to legal, security, and contractual limitations.
Object to or request restriction of certain processing where applicable.
Request a portable copy of eligible information.
Withdraw consent when processing depends on consent.
Opt out of eligible marketing communications.
Submit a complaint to an appropriate data protection authority.
When an organization manages your Lubyc account, you may need to send the request to that organization first. Lubyc may verify identity and authority before completing a request.
Children’s privacy
Age-related limitations for Lubyc services.
Lubyc is not intended for children who are not legally able to consent to personal-information processing under applicable law. We do not knowingly collect children’s personal information without appropriate authorization.
Contact the Lubyc privacy team if you believe a child has provided personal information without the required permission so that we can review the situation and take appropriate action.
Third-party links and integrations
Privacy practices outside the Lubyc platform.
Lubyc may contain links to or integrations with external websites and services. Those services operate under their own privacy policies and security terms, not this Privacy Policy.
Review an external service’s privacy practices before connecting it to Lubyc, authorizing data access, or providing personal information through that service.
Changes to this policy
How Lubyc may communicate future updates.
Lubyc may update this Privacy Policy to reflect changes in our products, technology, legal requirements, service providers, or business practices. The revised policy will include an updated effective date.
Where required, Lubyc may provide additional notice through the platform, email, website, account message, or another appropriate communication channel.
Contact Lubyc
How to ask a privacy question or submit a request.
For questions about this policy, the use of personal information, or a privacy request, contact the Lubyc privacy team. Include enough information to identify the relevant account or workspace without sending unnecessary sensitive information.