Privacy policy

1. Who we are

LucaLab is the edge-AI product studio of Luca Capula, operating this website at lucalab.ai ("we", "us", "our"). This policy explains what happens to information when you use this website or write to us through it. It is deliberately short, because the site does deliberately little.

2. What we collect

What you send us

If you complete the contact form, we receive what you typed into it: your name, email address, optionally your company, the type of enquiry you selected, the details of your project and your message. Nothing in that form is required except your name, your email address and your message.

What the server records

Our web server and the reverse proxy in front of it keep standard request logs — IP address, timestamp, the page requested, the browser's user-agent string — which exist for security and troubleshooting. When you submit the contact form we hold your IP address in memory for sixty seconds, purely to stop an automated script from submitting the form repeatedly.

What we do not collect

No cookies are set by this website. There is no analytics, no advertising pixel, no tracking script and no user profile. We do not know who you are until you tell us.

3. How we use it

To answer you, and to have the conversation that follows. We do not use contact-form submissions for marketing, we do not add you to a mailing list, and we do not sell, rent or share your information with anyone for their own purposes.

4. Third parties

Three services are involved in serving this site, and each sees a limited amount:

• Google Fonts serves the typefaces this site uses. Your browser requests them directly from Google, which means Google receives your IP address and user-agent as part of that request.
• Cloudflare Turnstile may be used on the contact form to distinguish people from bots. Where it is active, Cloudflare receives the information needed to make that assessment. It is a privacy-preserving alternative to a CAPTCHA and does not track you across sites.
• Our mail server receives and stores the contact-form message so we can read and reply to it. Mail is hosted on infrastructure we operate ourselves.

The site loads no other third-party resources: no content delivery network for scripts, no embedded video, no social widgets, no advertising network.

5. Storage, security and retention

Messages sent through the contact form live in our mailbox for as long as the relationship is live, and are reviewed periodically so that enquiries which came to nothing are deleted. Server logs rotate on a short cycle. Transport to this site is encrypted with TLS, and mail is transmitted over an encrypted connection.

No method of transmission or storage is perfectly secure, and we will not pretend otherwise. We keep the amount of data we hold small, which is the only security measure that never fails.

6. Your rights

Wherever you live, you may ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Use the contact form and say so; we will act on the request and confirm when it is done. There is no charge and no hoop to jump through.

If you are in the European Union or the United Kingdom (GDPR)

Our lawful basis for processing what you send through the contact form is legitimate interest — specifically, responding to a person who has asked us to contact them — and, where you have given it, your consent. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your national supervisory authority. Our infrastructure is operated from the United States; sending us a message involves transferring your message there.

If you are in California (CCPA/CPRA)

We do not sell or share personal information as those terms are defined under California law, and we have not done so in the preceding twelve months. You have the right to know what we collect, to request deletion, to request correction, and not to be discriminated against for exercising those rights.

7. Children

This site is aimed at businesses and professionals. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, tell us and we will delete it.

8. Changes

If this policy changes, the revised version appears here with a new date at the top. Changes take effect when posted.

9. Contact

Questions about this policy, or about information we hold, go through the contact form — choose "Something else" and say what you need.