Privacy Policy

1. Introduction

LC3 Impacts ("we," "our," or "us") is committed to protecting your privacy and ensuring transparency about how we collect, use, store, and share your personal information. This Privacy Policy explains our practices regarding data collection and use for both free and paid users of our platform.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our services:

2.1 Information You Provide

• Account information (email address, password)
• Profile information (name, institution, country, city, user type)
• Payment information (processed securely through our payment processor, Stripe)
• Communication data when you contact us
• Usage data related to your interactions with our platform

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log data (access times, error logs)

3. Data Usage by User Type

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our obligations under the service agreement
• Consent: When you have provided explicit consent (for paid users)
• Legitimate Interests: For research purposes (for free users) and platform improvement
• Legal Obligations: To comply with applicable laws and regulations

5. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of data at rest in secure databases
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure hosting infrastructure with industry-standard certifications
• Regular backups and disaster recovery procedures

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Paid Users: Data is retained for the duration of your subscription and for a reasonable period thereafter for legal and business purposes (typically 7 years for financial records)
• Free Users: Data may be retained indefinitely for research purposes, subject to anonymization where appropriate
• Account Deletion: You may request account deletion at any time. Upon deletion, we will remove or anonymize your personal data, except where retention is required by law

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for certain purposes
• Right to Withdraw Consent: Withdraw consent at any time (for paid users)

To exercise these rights, please contact us using the contact information provided below. We will respond to your request within 30 days, as required by applicable law.

8. Data Sharing and Third Parties

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our platform (e.g., payment processors, hosting providers)
• Research Partners: With academic or research institutions for collaborative research (free user data will be anonymized)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice to users)

9. International Data Transfers

Your data may be processed and stored in countries other than your country of residence. We ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Compliance with applicable data protection laws, including GDPR
• Security measures consistent with this Privacy Policy

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users (for significant changes)
• Displaying a notice on our platform

Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are located in the European Economic Area (EEA) or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.