Privacy Policy

1. Information We Collect

When you use Lucy, we collect the following types of information to provide and improve our services:

• Account Information: Your email address, name, and profile picture obtained through Google authentication when you sign in to our service.
• Voice Data: Audio recordings captured when you interact with Lucy using voice commands. These recordings are processed in real-time to convert your speech to text.
• Usage Data: Information about your queries, commands, and interactions with the system, including the questions you ask and the features you use.
• Log Data: Technical information including your IP address, browser type, device information, access times, and pages viewed.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our voice assistant services and respond to your queries accurately.
• Query Processing: To process your voice commands and text queries and deliver relevant financial information and insights.
• Authentication: To verify your identity and ensure secure access to your account and data.
• System Monitoring: To monitor system performance, detect and prevent technical issues, and ensure the security of our platform.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Third-Party Services

Lucy integrates with the following third-party services to provide its functionality. Each service has its own privacy policy governing their handling of your data:

• Google OAuth: We use Google's authentication service to provide secure sign-in. Google's privacy policy applies to the authentication process.
• AssemblyAI: We use AssemblyAI for speech-to-text transcription of your voice commands. Audio data is transmitted securely and processed according to AssemblyAI's privacy policy.
• ElevenLabs: We use ElevenLabs for text-to-speech responses, enabling Lucy to speak back to you. Text data is processed according to ElevenLabs' privacy policy.

4. Data Retention

We retain your information for the following periods:

• Account Data: Retained for as long as your account is active. You may request deletion of your account at any time.
• Voice Recordings: Processed in real-time and not stored permanently on our servers. Audio is converted to text and discarded.
• Login Logs: Retained for 90 days for security monitoring and audit purposes.
• Query History: Retained for 30 days to improve service quality and provide context for follow-up questions.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: All data transmission is encrypted using SSL/TLS protocols to protect your information in transit.
• Secure Authentication: We use Google OAuth 2.0 for authentication, ensuring your credentials are never stored on our servers.
• Access Controls: We maintain strict access controls and user approval systems to ensure only authorized users can access the platform.
• Regular Monitoring: We conduct regular security monitoring and logging to detect and respond to potential threats.
• Data Isolation: Each client's data is stored in separate, isolated databases to prevent unauthorized access.

6. Your Rights

You have the following rights regarding your personal information:

• Access: You have the right to request a copy of the personal data we hold about you.
• Correction: You have the right to request correction of any inaccurate or incomplete data.
• Deletion: You have the right to request deletion of your personal data, subject to legal retention requirements.
• Withdrawal of Consent: You have the right to withdraw your consent to data processing at any time.
• Data Portability: You have the right to receive your data in a structured, commonly used format.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make significant changes, we will notify you by email or through a prominent notice within the application. We encourage you to review this policy periodically for the latest information on our privacy practices.