Privacy Policy
| Document Title | Privacy Policy |
|---|---|
| Version | 1.1 |
| Effective Date | [BUSINESS CONFIRMATION REQUIRED] |
| Last Updated | 2026-08-03 |
| Document Owner | LukeZigger AI |
| Status | FOUNDER-APPROVED BUSINESS TERMS — NOT INDEPENDENT LEGAL OR TAX ADVICE |
Who Operates LukeZigger AI
LukeZigger AI is operated by Syed Mazhar (Founder). Contact: lukeai@lukezigger.com.
Categories of Data Collected
- Account information: name, email address, and a securely hashed password (or, for Google/Microsoft sign-in, basic profile information from that provider).
- Business information: whatever a Client or prospective Client describes during a consultation.
- Consultation and approval records: the blueprint, its approval status, and related timestamps.
- Service-delivery records: data created or processed while delivering a signed Statement of Work.
- Security and technical logs: standard technical logs (e.g., login timestamps, error logs) kept for security and troubleshooting, not for profiling.
How Data Is Collected
Data is collected directly from the person providing it — through account registration, the consultation conversation, or communication with the founder. LukeZigger AI does not purchase or acquire data about a person from third parties.
Purposes of Use
- To create and operate an account.
- To generate a consultation and blueprint.
- To deliver a signed Statement of Work.
- To provide support.
- To maintain legally required records (e.g., consent records, invoices).
- To maintain security and detect misuse.
Cookies and Technical Storage
No marketing or tracking cookies are set by default. One session cookie keeps a signed-in user logged in; it is not used for tracking or advertising. Personal data is not stored in browser local storage.
Third-Party Processors
See the Subprocessor Notice for the current list.
Cross-Border Processing
Data may be processed on servers located outside India, since infrastructure and AI providers used may operate internationally. See the Subprocessor Notice for the providers involved.
Data Sharing
Data is not sold. One Client's data is not shared with another Client, even in anonymized form. Data is shared only with the subprocessors listed in the Subprocessor Notice, each acting solely to help deliver the service.
File uploads are currently disabled.
Data Retention
No exact data retention duration is promised unless technically implemented and verified.
Access and Correction Requests
A person may request a copy of their data or ask for correction of inaccurate data by emailing lukeai@lukezigger.com. Requests are currently handled manually by the founder.
Consent Withdrawal
Consent given for a specific purpose may be withdrawn at any time by emailing lukeai@lukezigger.com. Withdrawal does not affect processing already lawfully carried out before the withdrawal.
Grievance Handling
Any privacy concern, question, or complaint may be raised at lukeai@lukezigger.com. [BUSINESS CONFIRMATION REQUIRED]: whether a formally designated Grievance Officer is required and should be named here.
Deletion / Export Limitation
Deletion and full data export are not described as currently operational. Such requests are logged, assessed, and handled according to available verified capability and applicable law — not promised on a fixed timeline until that capability is technically confirmed.
Security Measures
Reasonable technical and organizational measures are used to protect data, including encrypted connections (HTTPS) for data in transit and password hashing. [CA CONFIRMATION REQUIRED / TECHNICAL TEST REQUIRED]: encryption-at-rest and other infrastructure-level measures are described conservatively here and should be confirmed directly with hosting providers before being stated more specifically.
Children and Business-Authority Eligibility
LukeZigger AI is intended for business use by adults aged 18 or older who are authorized to represent a business. Data is not knowingly collected from anyone under 18. If an account is found to belong to someone under 18, it will be suspended and removed.
Policy Updates
Material changes to this Policy will be reflected in the version and date shown at the top of this document, with reasonable efforts made to notify active account holders directly.
DPDP Context
LukeZigger AI aims to align with the Digital Personal Data Protection Act, 2023, whose provisions commence on a phased basis. This document describes current, honest practice and controls adopted as good-faith readiness measures — it is not a claim of certified or complete compliance with every provision, whether or not currently in force.
Contact
lukeai@lukezigger.com