Privacy Policy

1. Introduction

Lightwork AI, Inc. ("Lightwork," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our platform and related services.

By using our Services, you agree to the practices described in this policy. This policy applies to all users, including business users (contractors) and end users (customers submitting project requests).

2. Data Collection

2.1 Information You Provide

• Account Information: Name, email, phone number, and business details when creating an account.
• Project Data: Addresses, project descriptions, photos, and scheduling preferences submitted through our platform.
• Payment Information: Billing details processed securely through our payment provider.
• Communications: Messages and support inquiries sent through our platform.

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system.
• Usage Data: Pages visited, features used, and interaction patterns.
• Location Data: Approximate location based on IP address.

2.3 Information from Third Parties

• Connected Accounts: When you connect third-party services (such as Google Calendar), we access data as described in Section 5.
• Authentication: Basic profile information from sign-in providers.

3. Data Storage

Your data is stored securely using industry-standard practices:

• Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Infrastructure: We use reputable cloud infrastructure providers with data centers in the United States.
• Access Controls: Strict role-based access controls limit data access to authorized personnel only.

4. Data Usage

We use collected data to:

• Provide, maintain, and improve our Services
• Process transactions and send related communications
• Generate estimates and facilitate scheduling
• Send service updates and respond to inquiries
• Ensure security and prevent fraud
• Comply with legal obligations

We may use automated systems to analyze project data and provide estimates. All automated recommendations are advisory; final decisions remain with our users.

5. Google User Data Disclosure

This section describes how Lightwork accesses, uses, stores, and protects data obtained from Google APIs, in compliance with the Google API Services User Data Policy.

5.1 Google Data We Access

When you connect your Google Calendar to Lightwork, we request access to the following scopes:

• calendar.readonly: Read access to view your existing calendar events to check your availability and prevent double-booking.
• calendar.events: Write access to create, update, and delete calendar events when you schedule appointments with customers through our platform.

Specific data accessed includes: Event titles, start/end times, event descriptions, and event locations from your primary Google Calendar.

5.2 How We Use Google User Data

We use your Google Calendar data exclusively for the following purposes:

• Availability Checking: We read your calendar events to display your existing commitments and prevent scheduling conflicts.
• Appointment Syncing: When you schedule a customer appointment through Lightwork, we create or update a corresponding event in your Google Calendar.
• Rescheduling: If an appointment is rescheduled in Lightwork, we update the corresponding Google Calendar event.
• Calendar Display: We display your Google Calendar events alongside Lightwork bookings in our unified calendar view.

We do NOT use your Google Calendar data for advertising, marketing profiling, or share it with third parties for their independent use.

5.3 Google Data Storage and Security

• Refresh Tokens: We securely store your Google OAuth refresh token (encrypted) to maintain calendar access without requiring repeated logins.
• Calendar Event Data: We temporarily cache calendar event data during your session. We do not permanently store a copy of your full Google Calendar.
• Event IDs: We store Google Calendar event IDs associated with appointments you create through Lightwork to enable updates and deletions.

5.4 Google Data Sharing

• We do NOT sell, rent, or lease your Google user data to any third parties.
• We do NOT share your Google user data with advertising networks or data brokers.
• We do NOT use Google user data for purposes unrelated to providing our scheduling functionality.

5.5 Revoking Google Access

You can revoke Lightwork's access to your Google Calendar at any time through:

• Lightwork Settings: Navigate to your account settings and disconnect Google Calendar.
• Google Account: Visit Google Account Permissions to remove Lightwork's access.

Upon revocation, we will delete your stored Google OAuth tokens within 30 days.

5.6 Limited Use Disclosure

Lightwork's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

• Service Providers: We work with third-party service providers who process data on our behalf to deliver our Services (e.g., payment processing, email delivery, hosting). All providers are bound by data processing agreements.
• Contractor-Customer Sharing: If you submit a project request, your information is shared with the contractor whose service you are requesting.
• Legal Requirements: We may disclose information if required by law, court order, or to protect our rights and safety.
• Business Transfers: In the event of a merger or acquisition, user data may be transferred to the acquiring entity with prior notice.

7. Data Retention & Deletion

• Account Data: Retained while your account is active, plus 30 days after deletion for recovery.
• Project Data: Retained for the duration of the associated account plus 2 years for business records.
• Transaction Records: Retained for 7 years as required for tax and legal compliance.
• Google Tokens: Deleted within 30 days of disconnection or account deletion.

You may request deletion of your data at any time by contacting us at [email protected]. We will process requests within 30 days, subject to legal retention requirements.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data.
• Restrict Processing: Request that we limit how we use your data.
• Data Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing for direct marketing purposes.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected].

9. Security

We implement industry-standard security measures including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security monitoring and updates
• Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Additional Policies

• Children's Privacy: Our Services are not directed to children under 16. We do not knowingly collect data from children.
• Cookies: We use essential cookies for functionality and analytics cookies to improve our Services. You can control cookies through your browser settings.
• Policy Changes: We may update this policy from time to time. Material changes will be communicated via email or in-app notice.