Privacy Policy

Last updated: March 4, 2026

1. Introduction

LucidusHub ("we", "us", "our") operates the lucidushub.com website and the LucidusHub HR management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.

2. Data We Collect

Account Data: Name, mobile number, email address, organization name, and role when you register or are added to the platform.

Employment Data: Employee records including department, designation, salary details, attendance records, leave requests, and project assignments as entered by your organization.

Usage Data: Pages visited, features used, browser type, device information, and IP address collected via Google Analytics 4 (GA4) after cookie consent.

Communication Data: Emails or messages you send to [email protected] or through our contact forms.

3. Cookies and Analytics

We use Google Analytics 4 to understand how visitors interact with our website. GA4 cookies are loaded only after you provide consent via our cookie banner. You can withdraw consent at any time by clearing your browser cookies.

Cookies used:

  • _ga, _ga_* — Google Analytics tracking (expires: 2 years)
  • lucidushub_cookie_consent — Stores your cookie preference (localStorage, no expiry)

4. How We Use Your Data

  • Providing and maintaining the HR management platform
  • Processing payroll, attendance, and compliance calculations
  • Communicating service updates, security alerts, and support responses
  • Improving our services through anonymized usage analytics
  • Complying with legal obligations under Indian law

5. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. Account data is retained while your organization's subscription is active and for 90 days after cancellation. Employment and payroll records are retained as required by applicable Indian labour laws.

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers: Cloud hosting (for platform operation), payment processors (for billing), and analytics providers (Google Analytics)
  • Legal authorities: When required by law, regulation, or legal process
  • Your organization: Authorized administrators within your organization can access employee data as configured

7. Your Rights (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access: Request a summary of your personal data we process
  • Correction: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data, subject to legal retention requirements
  • Grievance redressal: File a complaint regarding our data handling practices
  • Withdraw consent: Withdraw previously given consent for data processing

To exercise these rights, contact us at [email protected].

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure authentication (JWT tokens with bcrypt password hashing), and role-based access controls.

9. Children's Data

LucidusHub is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

For questions or concerns about this Privacy Policy or our data practices:

Email: [email protected]

Website: https://lucidushub.com