Privacy Policy

This Privacy Policy (the “Policy”) explains how LuciRift Studio (“LuciRift,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects Personal Information when you access or use our websites, storefronts, accounts, software, Digital Products, Physical Products (including 3D-printed items), Commissions, memberships, Community Market, support systems, creator tools, APIs, and other products or services that link to this Policy (collectively, the “Services”).

By accessing or using the Services, creating an Account, placing an order, submitting information, connecting a third-party account, or otherwise interacting with LuciRift, you acknowledge the practices described in this Policy. This acknowledgment is not consent where applicable law requires separate, affirmative consent.

If you do not want your information handled as described in this Policy, do not use the Services or provide Personal Information to LuciRift.

1. Scope and Who Is Responsible

LuciRift Studio is responsible for the Personal Information it processes for its own business purposes. Depending on the law that applies, LuciRift may be described as a controller, business, or similar responsible organization.

This Policy applies only to information processed by or on behalf of LuciRift. It does not control the independent privacy practices of third-party websites, payment providers, authentication providers, delivery services, external marketplaces, or independent Sellers. Those parties may process information under their own privacy policies and legal obligations.

For this Policy:

• “Account” means an account created through the Services.
• “Community Market” means a marketplace, seller platform, creator market, or similar system operated or hosted by LuciRift.
• “Commission” means custom creative, artistic, technical, development, consulting, or production work requested by a customer.
• “Digital Product” means software, downloadable content, digital assets, media, templates, licenses, access credentials, or other electronically delivered products.
• “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include information that applicable law treats as properly deidentified, anonymized, or publicly available.
• “Physical Product” means merchandise, 3D-printed items, made-to-order goods, or other tangible products sold through the Services.
• “Seller” means an approved third-party creator, individual, or business participating in the Community Market.
• “Sensitive Personal Information” means Personal Information treated as sensitive under applicable law, including certain Account credentials, government identifiers, financial-account access information, precise geolocation, biometric information, health information, or the contents of certain private communications.
• “User Content” means files, messages, reviews, listings, applications, screenshots, references, media, comments, or other content submitted through the Services.
• “you” and “your” mean the individual using the Services.

2. Privacy at a Glance

• We collect information you provide, information generated when you use the Services, and limited information received from providers you choose to use.
• We use information to operate Accounts, process orders, deliver products and Commissions, provide support, run the Community Market, prevent fraud, improve the Services, and comply with law.
• We do not sell Personal Information for money, share it for cross-context behavioral advertising, or process it for targeted advertising, as described in Section 9.
• We disclose information only as reasonably necessary to provide the Services, complete transactions, work with service providers and Sellers, protect users and LuciRift, or comply with legal obligations.
• You may manage certain information through your Account and may submit eligible privacy requests through the LuciRift Support Center.

This summary is provided for convenience. The complete Policy below controls.

3. Information We Collect

The information we collect depends on which Services you use and how you interact with LuciRift.

3.1 Account and Profile Information

When you create or manage an Account, we may collect:

• name;
• username, display name, or account identifier;
• email address;
• authentication credentials or password-derived records maintained in protected form;
• profile image;
• profile settings and preferences;
• account status;
• age or eligibility confirmation where required; and
• other information you choose to add to your profile.

Do not share your password with LuciRift support or any other person.

3.2 Third-Party Authentication Information

If you sign in or connect an Account through a supported third-party provider, we may receive information authorized by you and made available by that provider, such as:

• provider account ID;
• username or display name;
• email address;
• profile image;
• public profile information; and
• authentication or connection status.

The exact information depends on the provider, its settings, and the permissions you approve. You may be able to disconnect a provider through your Account or the provider’s settings, but disconnecting it does not automatically delete information already received and lawfully retained by LuciRift.

3.3 Orders, Payments, Licenses, and Fulfillment

When you place an order, purchase a product or service, redeem a license, or request fulfillment, we may collect or create:

• order, invoice, and transaction identifiers;
• products or services purchased;
• purchase, download, redemption, and license history;
• payment status and limited payment metadata received from a payment provider;
• refund, cancellation, dispute, or chargeback information;
• tax-related information where required;
• billing or contact information you provide;
• shipping recipient, delivery address, shipping method, tracking, customs, and fulfillment information for Physical Products; and
• records needed to verify ownership, entitlement, delivery, or support eligibility.

Full payment-card numbers are generally collected and processed directly by authorized payment providers. LuciRift does not intentionally store full payment-card numbers in its own systems.

3.4 Commissions, Support, and Other Communications

When you request custom work, contact support, report a problem, or communicate with LuciRift, we may collect:

• project descriptions and requirements;
• references, uploaded assets, screenshots, and files;
• technical specifications;
• messages and support-ticket history;
• revision requests, approvals, and project decisions;
• delivery information;
• feedback, survey responses, or reviews; and
• any other information you voluntarily include.

Please provide only information reasonably necessary for the request. Do not submit government identification, financial credentials, health information, or other highly sensitive information unless LuciRift specifically requests it through an appropriate process.

3.5 Community Market and Seller Information

If you apply to or participate in the Community Market, we may collect:

• application responses;
• creator, business, or professional information;
• Seller profile and listing information;
• products, descriptions, prices, licenses, and media;
• transaction, fulfillment, support, and dispute records;
• payout or tax information where required; and
• communications with LuciRift, customers, or other marketplace participants.

Some Seller or listing information is intended to be publicly displayed. Payout and tax information may be collected directly by a third-party payment or marketplace provider rather than LuciRift.

3.6 User Content and Community Activity

Depending on the feature, we may collect User Content such as:

• reviews and ratings;
• public comments;
• profile content;
• Community Market listings;
• applications;
• uploaded files and media;
• support messages;
• reports and moderation information; and
• records of participation in community features.

Section 7 explains which User Content may be public and which is treated as non-public.

3.7 Information Collected Automatically

When you access or use the Services, we and our authorized providers may automatically collect technical and usage information, including:

• IP address;
• approximate location derived from an IP address;
• browser type and version;
• operating system and device information;
• language, region, and time-zone settings;
• referring and exit pages or URLs;
• pages, features, and content viewed;
• dates, times, duration, and interaction information;
• session and cookie identifiers;
• download, license, and feature-use events;
• error, crash, diagnostic, and performance data;
• security, authentication, fraud-prevention, and access logs; and
• general website and service analytics.

We do not collect precise device location unless a specific feature requires it and an appropriate notice or permission is provided.

3.8 Information About Other People

You may provide information about another person when, for example, you enter a shipping recipient, submit a Commission reference, report misconduct, or upload collaborative materials. You are responsible for having the authority to provide that information and for avoiding unnecessary disclosure of another person’s Personal Information.

4. How We Obtain Information

We obtain Personal Information from:

• you directly, including through Accounts, checkout, forms, uploads, support, Commissions, reviews, and Seller applications;
• your device and use of the Services, including through cookies, logs, analytics, and security systems;
• providers you choose to use, such as authentication, payment, storefront, or connected-account providers;
• transaction and fulfillment partners, such as payment processors, Sellers, shipping carriers, or external marketplaces; and
• other users or authorized parties, when they provide information needed for a transaction, report, collaboration, or support request.

If LuciRift obtains Personal Information from a source other than you, we will provide any additional notice required by applicable law.

5. How We Use Personal Information

We use Personal Information only for reasonably necessary, proportionate, and disclosed purposes, including the following.

5.1 Providing and Performing the Services

We use information to:

• create, authenticate, and manage Accounts;
• process and fulfill orders;
• deliver Digital Products and Physical Products;
• maintain licenses, downloads, redemptions, and ownership records;
• perform Commissions and custom services;
• operate memberships and subscription features;
• provide customer support;
• operate the Community Market;
• review Seller applications and manage Seller participation;
• provide requested integrations or connected-account features; and
• communicate about orders, Accounts, security, support, and material service changes.

Where the GDPR, UK GDPR, or a similar law applies, this processing is generally necessary to perform a contract with you or to take requested steps before entering into a contract.

5.2 Operating, Improving, and Protecting LuciRift

We use information to:

• maintain, troubleshoot, test, and improve the Services;
• understand service performance and usage;
• develop features and improve usability;
• prevent spam, fraud, abuse, chargebacks, piracy, license misuse, and unauthorized access;
• detect, investigate, and respond to security incidents;
• moderate User Content and enforce platform rules;
• protect users, Sellers, LuciRift, and third parties;
• establish, exercise, or defend legal claims; and
• maintain business continuity, records, and internal operations.

Where applicable, we rely on legitimate interests in operating a secure, reliable, and sustainable service, provided those interests are not overridden by your rights and interests.

5.3 Complying With Legal Obligations

We may use and retain information to:

• calculate, collect, report, or document taxes;
• maintain accounting and transaction records;
• respond to lawful process and valid government requests;
• comply with consumer-protection, privacy, security, sanctions, export, and other legal obligations;
• investigate or document suspected unlawful conduct; and
• satisfy audit, reporting, recordkeeping, or regulatory requirements.

5.4 Consent-Based Processing

We rely on consent where required, including for certain optional communications, non-essential cookies or similar technologies, connected-account permissions, or other optional processing presented to you.

You may withdraw consent at any time through the method provided for that feature or by contacting LuciRift. Withdrawal does not affect processing lawfully completed before the withdrawal and may prevent LuciRift from providing a feature that depends on the information.

5.5 Deidentified and Aggregated Information

We may create and use aggregated, statistical, anonymized, or deidentified information for analytics, reporting, security, service improvement, and business planning. Where required by law, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except to test whether deidentification measures are effective.

6. Information You Must Provide

Some information is required to provide a requested Service. For example:

• an email address and authentication information may be required for an Account;
• transaction and payment information is required to complete a purchase;
• a delivery address is required to ship a Physical Product;
• project information and required files may be necessary to perform a Commission; and
• Seller information may be required to review an application or operate a marketplace relationship.

You may choose not to provide information, but LuciRift may be unable to create the Account, complete the transaction, deliver the product, perform the service, or provide the requested feature.

Optional information, such as some profile details or marketing preferences, may generally be omitted without affecting core Services.

7. Public and Non-Public Information

7.1 Public Information

Information you intentionally publish through public-facing features may be visible to other users or the public. This may include:

• username, display name, profile image, and public profile details;
• public reviews, ratings, comments, or posts;
• Community Market Seller profiles and listings;
• product images, descriptions, and creator information; and
• other content clearly identified as public when submitted.

Public information may be indexed, copied, cached, quoted, or redistributed by third parties outside LuciRift’s control. Review information carefully before making it public.

7.2 Non-Public Information

Support tickets, private messages, payment information, unpublished Seller materials, Commission references, and uploaded project files are not intentionally made public merely because they are submitted to LuciRift.

Non-public information may still be accessed or disclosed when reasonably necessary to:

• fulfill your request;
• perform a Commission;
• provide support;
• complete a marketplace transaction;
• work with an authorized service provider or relevant Seller;
• investigate fraud, abuse, or a security issue;
• enforce LuciRift policies; or
• comply with law.

LuciRift will not publicly use non-public Commission materials or private support content for marketing or portfolio display unless permitted by the applicable Commission terms, the information has otherwise been lawfully made public, or you provide permission.

8. Communications

We may send service-related communications, including order confirmations, invoices, delivery notices, license information, security alerts, Account notices, support responses, policy notices, and information about material changes to the Services. These communications are necessary to administer the Services and may not include an unsubscribe option while the relevant Account, transaction, or service relationship remains active.

If LuciRift offers promotional or marketing communications, we will provide any consent and unsubscribe options required by law. Unsubscribing from marketing does not stop transactional, security, legal, or support communications.

9. Cookies and Similar Technologies

LuciRift and authorized providers may use cookies, local storage, session identifiers, pixels, software development kits, logs, and similar technologies for purposes such as:

• keeping you signed in;
• maintaining sessions and shopping-cart functions;
• remembering preferences;
• enabling checkout, licensing, downloads, and support features;
• protecting Accounts and detecting fraud or abuse;
• measuring performance and general usage;
• diagnosing technical issues; and
• improving functionality and usability.

Where applicable law requires consent for non-essential technologies, LuciRift will request that consent before using them. You may also be able to manage preferences through a cookie-control tool or your browser settings. Blocking some technologies may prevent certain Services from functioning correctly.

LuciRift does not sell Personal Information for monetary consideration, share Personal Information for cross-context behavioral advertising, or process Personal Information for targeted advertising as those terms are defined by applicable U.S. state privacy laws. We do not knowingly sell or share the Personal Information of anyone under eighteen (18). If those practices change, we will update this Policy and provide any notice, opt-out method, preference-signal support, or other control required by law before the new practice applies.

Additional details may be provided in the LuciRift Cookie Policy.

10. How We Disclose Personal Information

LuciRift may disclose Personal Information to the following categories of recipients when reasonably necessary for a disclosed purpose.

10.1 Service Providers and Contractors

We may use providers that support:

• payment processing;
• authentication and Account access;
• website and application hosting;
• cloud storage, content delivery, and infrastructure;
• security, fraud prevention, logging, and monitoring;
• analytics and performance measurement;
• email, messaging, and customer support;
• order fulfillment, shipping, and delivery;
• tax, accounting, and business administration; and
• other technical or operational functions.

We disclose only the information reasonably necessary for an authorized function. Where appropriate or required, contracts or applicable law restrict a provider from using that information for unrelated purposes and require appropriate protection of Personal Information.

10.2 Sellers and Marketplace Participants

When you purchase from, communicate with, or otherwise transact with an independent Seller, LuciRift may disclose limited Account, order, contact, support, or fulfillment information to that Seller as necessary to complete the transaction or resolve a problem.

Independent Sellers may be separately responsible for their own processing of information. Review any Seller-specific notice provided with a listing or transaction.

10.3 At Your Direction or With Your Permission

We may disclose information when you direct us to do so, request an integration, connect a third-party service, authorize a disclosure, or otherwise provide valid permission.

10.4 Legal, Safety, and Enforcement Purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, a court order, subpoena, warrant, or other valid legal process;
• respond to a lawful government or regulatory request;
• detect, prevent, or investigate fraud, abuse, piracy, security incidents, or unlawful activity;
• protect the rights, safety, property, or security of LuciRift, users, Sellers, service providers, or the public;
• enforce the Terms of Service, licenses, contracts, or related policies; or
• establish, exercise, or defend legal claims.

10.5 Professional Advisors

We may disclose information to attorneys, accountants, insurers, auditors, consultants, or other professional advisors when reasonably necessary for legitimate business or legal purposes and subject to appropriate duties of confidentiality.

10.6 Business Transactions

Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction. Where required, we will provide notice before Personal Information becomes subject to a materially different privacy policy.

10.7 Aggregated or Deidentified Information

We may disclose information that does not reasonably identify you, including aggregated, anonymized, or properly deidentified information, as permitted by law.

11. Third-Party Services and External Links

The Services may integrate with or link to third-party payment providers, authentication providers, storefronts, marketplaces, hosting services, delivery services, social platforms, APIs, or other external services.

Those providers operate independently and may collect information directly from you. Their handling of information is governed by their own privacy policies and terms, not this Policy, except when they process information solely on LuciRift’s behalf under an applicable agreement.

LuciRift is not responsible for the independent privacy, security, content, availability, or business practices of third-party services outside our direct control. This does not limit LuciRift’s responsibility for our own processing or for selecting and managing service providers where applicable law imposes those responsibilities. Review a provider’s policies before submitting information to it.

12. AI-Assisted and Automated Tools

LuciRift may use automated or AI-assisted tools to support functions such as fraud detection, security, spam prevention, content moderation, customer support, development, analytics, or service operations.

When an automated or AI-assisted tool processes Personal Information on LuciRift’s behalf, that processing remains subject to this Policy and any applicable provider agreement. LuciRift will not use private support content, Commission assets, or other non-public User Content to train a public or general-purpose AI model for unrelated purposes unless you expressly authorize that use, the content has been made public for that purpose, or we first provide clear notice and obtain any consent required by law.

Automated systems may identify or flag suspicious activity for review. LuciRift does not intend to rely solely on automated processing to make decisions that produce legal or similarly significant effects concerning an individual unless that use is separately disclosed and any rights required by law are provided.

Additional information may be provided in the LuciRift AI Usage Policy or in a notice presented with a specific AI-assisted feature.

13. Data Retention

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain records, prevent fraud, resolve disputes, enforce agreements, and comply with legal obligations.

Retention depends on the nature of the information and may include the following considerations:

• Account information may be retained while an Account is active and for a reasonable period afterward for security, support, dispute, and recordkeeping purposes.
• Order, payment, tax, refund, and accounting records may be retained for the period required by tax, accounting, consumer-protection, anti-fraud, and other laws.
• License, redemption, and ownership records may be retained as needed to verify entitlement, prevent piracy or duplicate claims, and provide support.
• Commission and support records may be retained as needed to complete the work, provide revisions or support, document approvals, resolve disputes, and protect legal rights.
• Marketplace and Seller records may be retained as needed to administer listings, transactions, payouts, disputes, safety, and legal obligations.
• Security and technical logs may be retained for periods reasonably necessary to detect threats, investigate incidents, maintain reliability, and prevent abuse.
• Marketing preferences and suppression records may be retained as needed to honor subscriptions and opt-outs.
• Verification information may be retained only as long as reasonably necessary for verification, fraud prevention, security, compliance, or legal requirements, subject to the practices of any independent verification provider.
• Public User Content may remain available until removed by you or LuciRift, subject to applicable features, backups, legal obligations, and copies outside LuciRift’s control.

When information is no longer needed, it may be deleted, securely destroyed, anonymized, aggregated, or isolated from ordinary use. Residual copies may remain temporarily in restricted backups until those backups are overwritten or deleted through ordinary retention cycles.

14. Your Privacy Choices and Rights

Depending on your location and the law that applies, you may have the right to:

• confirm whether LuciRift processes your Personal Information;
• access or obtain a copy of eligible Personal Information;
• correct inaccurate Personal Information;
• delete eligible Personal Information;
• receive certain information in a portable format;
• restrict or object to certain processing;
• withdraw consent where processing relies on consent;
• opt out of a sale, sharing, targeted advertising, or certain profiling where applicable;
• limit certain uses of sensitive Personal Information where applicable;
• appeal the denial of a privacy request where applicable; and
• lodge a complaint with an appropriate privacy or data-protection authority.

These rights are not absolute. A request may be limited or denied where permitted by law, including when information is needed to complete a transaction, provide a requested Service, protect security, prevent fraud, comply with law, maintain tax or transaction records, exercise legal rights, or protect another person’s rights.

14.1 Managing Information and Preferences

Depending on available features, you may:

• review or update Account information through Account Settings;
• disconnect a third-party provider through LuciRift or the provider;
• manage cookie choices through available controls or browser settings;
• unsubscribe from optional marketing through the message or preference settings; and
• remove or edit eligible public content through the relevant feature.

14.2 Submitting a Privacy Request

Privacy requests may be submitted through the LuciRift Support Center:

https://lucirift.com/support

Describe the right you want to exercise and provide enough information for LuciRift to locate the relevant records. We may request reasonable verification to protect your information and prevent fraudulent requests. We will use verification information only for verification, security, fraud prevention, and legally required recordkeeping.

Where permitted, an authorized agent may submit a request on your behalf. LuciRift may require proof of the agent’s authority and may verify your identity directly.

We will respond within the time required by applicable law. If a request is denied, we will provide an explanation and any available appeal instructions when required.

LuciRift will not unlawfully discriminate against you for exercising an applicable privacy right.

15. Account Deletion

LuciRift provides a self-service Account-deletion feature through Account Settings.

After you request deletion:

1. the request enters a 14-day pending period;
2. during that period, you may cancel the request through Account Settings or through the cancellation method provided in the confirmation email; and
3. after the pending period expires, deletion processing begins and generally cannot be reversed.

Before confirming deletion, review any warning displayed in Account Settings. Deleting an Account may permanently affect access to purchases, licenses, downloads, memberships, Seller tools, order history, support records, or other Account-based features.

Deleting an Account does not necessarily require immediate deletion of every associated record. LuciRift may retain information where required or permitted by law, including:

• order, invoice, transaction, refund, and tax records;
• license, redemption, and product-ownership records;
• fraud-prevention, security, and access logs;
• chargeback and payment-dispute documentation;
• support, Commission, approval, and dispute records;
• Seller, marketplace, and legal-compliance records;
• information needed to enforce licenses or agreements; and
• information stored temporarily in restricted backups.

Account deletion does not automatically cancel an order already in fulfillment, erase lawful obligations, or require LuciRift to delete information controlled independently by a payment provider, Seller, external marketplace, or other third party.

If you cannot access your Account, submit a deletion or privacy request through the Support Center. Identity or Account-ownership verification may be required.

16. Additional Notices for Certain U.S. Residents

This section applies only where a U.S. state privacy law applies to LuciRift and grants you the described rights.

16.1 Categories of Personal Information

Depending on your use of the Services, LuciRift may collect the following statutory categories:

• Identifiers, such as name, username, email address, IP address, Account ID, or authentication identifier;
• customer-record information, such as contact, billing, or shipping information;
• commercial information, such as purchases, downloads, licenses, subscriptions, refunds, and transaction history;
• internet or electronic activity, such as browsing, usage, session, device, and interaction information;
• approximate geolocation, derived from an IP address;
• audio, visual, and electronic information, such as uploaded images, screenshots, media, files, and messages;
• professional or business information, such as Seller, creator, or business-application details;
• inferences and risk information, such as fraud, abuse, security, moderation, product-interest, or service-usage insights derived from activity associated with the Services; and
• Sensitive Personal Information, such as Account login credentials, the contents of private communications, or sensitive characteristics you voluntarily include in User Content, to the extent a state law classifies that information as sensitive.

We collect these categories from the sources described in Section 4, use them for the purposes described in Section 5, and retain them using the criteria described in Section 13.

16.2 Disclosures for Business Purposes

During the preceding twelve months, or the period required by applicable law, LuciRift may have disclosed the categories above to service providers, contractors, Sellers, fulfillment providers, professional advisors, government authorities, or transaction participants for the purposes described in Section 10.

LuciRift does not sell Personal Information for monetary consideration, share Personal Information for cross-context behavioral advertising, or process Personal Information for targeted advertising.

16.3 State Privacy Requests and Appeals

Eligible residents may submit applicable access, correction, deletion, portability, opt-out, limitation, or appeal requests through the Support Center. To appeal a decision, reply to the decision or submit a new request labeled “Privacy Appeal.”

If LuciRift begins engaging in a practice treated as a sale, sharing, targeted advertising, or qualifying profiling under applicable law, we will provide the required notice and opt-out method before that practice applies.

17. EEA, United Kingdom, and Switzerland

If data-protection law in the European Economic Area, United Kingdom, or Switzerland applies, LuciRift Studio is the controller of Personal Information processed for LuciRift’s own purposes unless a specific notice states otherwise.

The lawful bases we rely on are described in Section 5 and may include:

• performance of a contract or steps requested before a contract;
• compliance with a legal obligation;
• LuciRift’s legitimate interests in operating, improving, securing, and protecting the Services;
• establishment, exercise, or defense of legal claims; and
• consent, where required.

Where processing relies on legitimate interests, you may request information about the applicable balancing considerations. Where processing relies on consent, you may withdraw consent at any time.

Subject to applicable law, you may have rights of access, correction, erasure, restriction, portability, objection, and complaint. You may object at any time to processing based on legitimate interests on grounds relating to your particular situation. You may also object to direct marketing at any time.

You may lodge a complaint with the data-protection authority where you live, work, or believe a violation occurred. We encourage you to contact LuciRift first so we can attempt to address the concern.

18. International Data Transfers

LuciRift is operated from the United States. Personal Information may be processed in the United States and in other countries where LuciRift’s service providers, Sellers, or business partners operate.

Privacy laws in those countries may differ from the laws where you live. Where applicable law requires safeguards for an international transfer, LuciRift will use an appropriate legal mechanism or work with providers that offer an appropriate mechanism. Depending on the circumstances, safeguards may include approved contractual protections, an adequacy decision, or another legally recognized transfer method.

LuciRift does not rely solely on your use of the Services as consent to an international transfer where applicable law requires a different legal basis or safeguard.

19. Information Security and Breach Response

LuciRift uses commercially reasonable administrative, technical, and organizational measures designed to protect Personal Information from unauthorized access, acquisition, use, alteration, disclosure, loss, or destruction.

Measures may include:

• encrypted network connections using HTTPS/TLS;
• authentication and access controls;
• limiting access according to role and business need;
• security monitoring, logging, and fraud detection;
• software, dependency, and infrastructure updates;
• backups and recovery procedures;
• service-provider security review and contractual protections where appropriate; and
• administrative procedures for handling sensitive or non-public information.

No website, application, network, database, or electronic transmission can be guaranteed completely secure. You are responsible for using a strong, unique password, protecting your devices and credentials, and promptly notifying LuciRift if you suspect unauthorized Account activity.

If a security incident involving Personal Information occurs, LuciRift will investigate and provide notices to affected individuals, regulators, or other parties when required by applicable law.

20. Children and Age-Restricted Services

The Services are intended only for adults who are at least eighteen (18) years old and have reached the legal age of majority where they live. The Services are not directed to children or minors, and LuciRift does not knowingly collect Personal Information from anyone under 18.

If we learn that a person under 18 has provided Personal Information in violation of the Terms of Service, we may suspend or delete the Account and take reasonable steps to delete or restrict the information, subject to legal and security obligations.

If you believe a minor has provided Personal Information to LuciRift, contact us through the Support Center.

21. Changes to This Policy

We may update this Policy to reflect changes in the Services, technology, business operations, security practices, providers, or legal requirements.

The Last Updated date identifies the most recent revision. An updated Policy becomes effective when published unless a later date is stated.

If a change is material, we will provide additional notice through the Services, email, Account notification, or another appropriate method when required. If applicable law requires consent for a new processing activity, we will request consent rather than treating continued use as consent.

We will not use a Policy update to materially expand the use of previously collected Personal Information in an incompatible manner without providing the notice, choice, or consent required by law.

22. Contact and Related Policies

Questions, concerns, and privacy requests may be submitted through the official LuciRift Support Center:

Support Center: https://lucirift.com/support

This Policy should be read with the following policies where applicable:

• Terms of Service: https://lucirift.com/tos
• Refund Policy: https://lucirift.com/refund-policy
• Cookie Policy
• AI Usage Policy
• Community Guidelines
• Marketplace Guidelines
• Seller Terms
• Commission Terms
• Digital Product License

For matters specifically concerning the collection, use, retention, disclosure, or protection of Personal Information, this Privacy Policy controls to the extent of a conflict. The Terms of Service and product- or service-specific terms control other matters, subject in all cases to applicable law.