Privacy Policy

Last updated: 10 April 2026

1. Who We Are

LucArc Labs ("we", "us", "our") is a data tools company operated by Jigar Patel, based in Dublin, Ireland. We build software products and services that help organisations make sense of their data, including managed dashboards, open-source libraries, and consulting engagements.

Contact: hello@lucarc.tech

2. Scope

This policy applies to all LucArc Labs products, services, and websites, including lucarc.tech, any software we distribute, and any hosted services we operate on behalf of clients. Where a specific product has additional data practices, those are described in the service-specific sections below.

3. What Data We Collect

Website visitors (lucarc.tech)

We do not use cookies, analytics trackers, or any third-party tracking scripts on this website. The only data collected is standard server logs generated by Cloudflare (our hosting provider), which include IP addresses, browser user-agent strings, and page request timestamps. These logs are managed by Cloudflare under their own privacy policy and are not accessible to us in identifiable form.

Enquiries and communications

When you contact us via email or a contact form, we collect your name, email address, and the content of your message. We use this solely to respond to your enquiry.

Open-source tools

Our open-source libraries (e.g., packages distributed via PyPI or npm) do not collect, transmit, or store any personal data. They run entirely on your own infrastructure.

4. Legal Basis for Processing

Processing ActivityLegal Basis (GDPR Art. 6)
Providing contracted servicesPerformance of a contract (Art. 6(1)(b))
User authenticationLegitimate interest in security (Art. 6(1)(f))
Storing user preferencesLegitimate interest in service quality (Art. 6(1)(f))
Responding to enquiriesLegitimate interest (Art. 6(1)(f))
Compliance with legal obligationsLegal obligation (Art. 6(1)(c))

5. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at hello@lucarc.tech. We will respond within 30 days.

6. Data Retention

7. Cookies

The LucArc Labs website (lucarc.tech) uses only a single localStorage entry to remember your theme preference (light/dark). No cookies are set. Our hosted services use only essential session tokens required for authentication. No third-party advertising or tracking cookies are used anywhere across our products.

8. International Transfers

We host all services using providers with EU data processing capabilities. Where data processing occurs outside the EU/EEA (e.g., Cloudflare's global CDN), we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses. Client database instances are provisioned in EU regions by default.

9. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to active clients. The "last updated" date at the top of this page reflects the most recent revision.

11. Service-Specific: Managed Dashboards

Managed Dashboard Service

The following sections apply specifically to our managed dashboard service, where we host and operate data visualisation dashboards on behalf of client organisations.

Data we collect for dashboard users

When you use a LucArc-managed dashboard, we process:

Client organisation data

We store organisational data uploaded by our clients for the purpose of dashboard visualisation. This data is stored in the client's dedicated database instance and is completely segregated from all other client data. We do not access, analyse, or share client data beyond what is necessary to provide the service.

Infrastructure and sub-processors

Sub-processorPurposeLocation
Supabase Inc.Database hosting, authentication, data storageEU West (AWS London/Ireland)
Cloudflare Inc.CDN, static hosting, Zero Trust access controlGlobal (EU data processing)
UptimeRobotUptime and availability monitoringGlobal
Google FontsFont delivery (no cookies, no tracking)Global

We will notify clients of any changes to our sub-processor list with at least 30 days notice.

Security measures

We implement the following measures to protect dashboard data:

Data Processing Agreement

For managed dashboard clients, a separate Data Processing Agreement (DPA) governs the terms under which we process data on your behalf. Contact hello@lucarc.tech to request a copy.

12. Contact & Complaints

For privacy-related enquiries or to exercise your data rights:

LucArc Labs
Dublin, Ireland
hello@lucarc.tech

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority: www.dataprotection.ie