Privacy.

What we collect

Account essentials — your name, email, organisation name. The delivery data you put into Lighthouse — initiatives, people, contractors, budgets, scenarios. Usage telemetry that helps us know which features are working (pages visited, timings, errors) — never the contents of the work you do.

What we don't collect

We don't buy data. We don't sell data. We don't use your workspace data to train AI models — yours or anyone else's. We don't scrape your inbox, your calendar, or anything outside the integrations you explicitly authorise.

How AI uses your data

Lighty is powered by Anthropic Claude. When you ask Lighty a question, the relevant slice of your workspace data is sent to Anthropic to produce the answer. Retention is governed by the service used and any applicable agreement. See Anthropic's commercial data handling and retention information. Zero data retention requires an approved arrangement for eligible products; it is not the default API retention policy.

Where data lives

Primary hosting is in Sydney, Australia (Supabase + Vercel ap-southeast-2). EU data residency is available on Enterprise. Daily backups, encrypted at rest (AES-256) and in transit (TLS 1.3).

Who can see it

Inside your workspace: only people you've invited, scoped by the role you give them. Internally at Lighthouse: a small number of engineers can access production data for support / debugging, with audit logging. No marketing, sales, or anyone else.

Your rights

CSV exports are available on supported views. To request a full workspace export or workspace deletion, or access, correction or deletion of your personal data, email privacy@lighthouse.delivery. We respond within 30 days.

Cookies

Essential session cookies only. No third-party trackers, no advertising pixels, no analytics that follow you off-site.

Sub-processors

• Supabase — primary database + auth (Sydney, AU)
• Vercel — application hosting + edge network
• Anthropic — AI responses
• Stripe — billing only (we never see card numbers)
• Sentry — error monitoring (scrubs PII)

A full Data Processing Addendum is available on Enterprise plans.

Changes to this page

We'll email every workspace owner at least 30 days before anything material changes. Older versions are kept available on request.