• Google Analytics Data API (GA4) via the read‑only scope “https://www.googleapis.com/auth/analytics.readonly”. We retrieve aggregated metrics and dimensions (e.g., sessions, page views, events, traffic sources, engagement time).

• In your Google Account: Google Account → Security → Third‑party access (remove Lucira.ai’s access) to revoke from Google’s side as well.

Lucira.ai includes an AI chat where you can ask questions and upload images (e.g., screenshots, charts, product photos). We process this User‑provided Content only to operate visible features (e.g., understanding your prompt, extracting text from an image via OCR, generating a response, keeping your chat history).

When you provide a website URL, Lucira.ai may fetch and analyze publicly available content and metadata from that site to personalize insights (e.g., sitemaps, page titles, meta tags, text snippets, publicly visible analytics signals). We respect standard controls (e.g., robots.txt where applicable) and do not attempt to bypass protections. Retention: we keep derived, aggregated/non‑PII summaries for up to 90 days to power trends and recommendations, then delete or anonymize them. You can request deletion at any time at dieysoftware@gmail.com.

To operate and protect the service, our hosting/security providers may process connection metadata (e.g., network and browser data) for a limited time for security and diagnostics. We also use Google Analytics 4 with first‑party cookies to measure aggregated site/app usage; we do not receive IP addresses or PII from GA4 and we do not enable advertising features. See the Cookie Policy for details.

Lucira.ai does not set first‑party advertising cookies. Third‑party services (e.g., Google) may use cookies to collect aggregated usage information. See our Cookie Policy for details and controls.

If OAuth tokens (access and refresh tokens) are stored, we protect them using industry‑standard controls, including encryption at rest, transport security, and least‑privilege access. Tokens are used only to read the permitted data and are rotated or invalidated per Google’s policies.

Lucira.ai focuses on data minimization. GA4 retention (aggregated, non‑PII): We do not retain raw GA4 rows. We may retain aggregated, non‑PII analytics (e.g., daily totals by channel/device) until you delete them or disconnect Google Analytics (which triggers deletion for your workspace). Backups/logs are fully purged within 30 days. (Website analysis and workspace items have their own retention—see §§3B and 11A.)

• OpenAI (GPT models) and Google Gemini models (via the Gemini API or Google Cloud’s Vertex AI, depending on your configuration) help interpret analytics and generate summaries or recommendations within Lucira.ai. We do not send PII to these providers; we share only the minimum necessary, aggregated analytics context to produce on‑platform insights. Where available, we configure enterprise data controls (e.g., zero data retention on Vertex AI) to prevent model training on our prompts and outputs, and we honor the providers’ data‑use policies.

We use your email address to send transactional notifications related to the service (e.g., “your results are ready”, security alerts, account notices). These messages are not marketing. We may process basic delivery logs (recipient, timestamp, status) for up to 90 days for troubleshooting and fraud prevention. We use vetted email providers acting as our processors under data‑processing terms. You can manage marketing preferences separately, if offered.

Textual insights and configurations you create in Lucira.ai are stored in your workspace until you delete them or your admin sets a shorter retention. These items do not contain raw third‑party data; they are summaries or aggregates generated for your team. When you delete an item, we remove it from active systems and complete purge from backups/logs within 30 days.

Lucira.ai’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This applies to raw data obtained from the authorized scopes and to data that is aggregated, anonymized, or derived from it. We limit use to providing or improving user‑facing features in Lucira.ai, restrict transfers to what is necessary to operate those features, and prohibit selling the data or using it for advertising.