Privacy.

What we collect

Account essentials — your name, email, organisation name. The delivery data you put into Lighthouse — initiatives, people, contractors, budgets, scenarios. Usage telemetry that helps us know which features are working (pages visited, timings, errors) — never the contents of the work you do.

What we don't collect

We don't buy data. We don't sell data. We don't use your workspace data to train AI models — yours or anyone else's. We don't scrape your inbox, your calendar, or anything outside the integrations you explicitly authorise.

How AI uses your data

Lighty is powered by Anthropic Claude. When you ask Lighty a question, the relevant slice of your workspace data is sent to Anthropic to produce the answer. Anthropic's policy (linked in their privacy policy) is zero-retention on API traffic — they don't store the prompt or response, and they don't train on it. We hold the same contract.

Where data lives

Primary hosting is in Sydney, Australia (Supabase + Vercel ap-southeast-2). EU data residency is available on Enterprise. Daily backups, encrypted at rest (AES-256) and in transit (TLS 1.3).

Who can see it

Inside your workspace: only people you've invited, scoped by the role you give them. Internally at Lighthouse: a small number of engineers can access production data for support / debugging, with audit logging. No marketing, sales, or anyone else.

Your rights

Export your data anytime (CSV export from every list view; a full workspace JSON export from Settings). Delete your workspace anytime — soft-deleted for 90 days for reactivation, then hard-deleted. Request access / correction / deletion of your personal data by emailing privacy@lighthouse.delivery. We respond within 30 days.

Cookies

Essential session cookies only. No third-party trackers, no advertising pixels, no analytics that follow you off-site.

Sub-processors

• Supabase — primary database + auth (Sydney, AU)
• Vercel — application hosting + edge network
• Anthropic— Lighty's AI (zero-retention API)
• Stripe — billing only (we never see card numbers)
• Sentry — error monitoring (scrubs PII)

A full Data Processing Addendum is available on Enterprise plans.

Changes to this page

We'll email every workspace owner at least 30 days before anything material changes. Older versions are kept available on request.