Privacy Policy

Lux et Artis Effective Date: April 1, 2026

Lux et Artis ("Provider," "we," "us," or "our"), a general partnership operating an AI solutions studio at luxetartis.com, is committed to protecting the privacy of our clients, website visitors, and chatbot users. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, services, or AI chatbot.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our website or services.

1. Information We Collect

We may collect the following types of information:

Information You Provide Directly

  • Contact Information — Name, email address, company name, phone number, and any other information you submit through our contact form, email, or other communication channels.
  • Project Details — Business information, project requirements, brand assets, content, credentials, and other materials you provide in connection with a service engagement.
  • Payment Information — Billing details necessary to process payments. We do not store full credit card numbers on our systems; payment processing is handled by third-party payment processors.

Information Collected Through Our Chatbot

  • Chatbot Conversations — Messages, questions, and inputs you provide when interacting with our AI-powered chatbot. See Section 5 for details on how chatbot data is handled.

Information Collected Automatically

  • Usage Data — We may collect basic, non-identifying usage data such as pages visited, time spent on site, referring URLs, browser type, device type, and IP address.
  • Server Logs — Our hosting provider (Vercel) may collect standard server logs including IP addresses, request timestamps, and request URLs as part of normal platform operations.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide Services — To deliver the AI solutions, web development, automation, and content services you have engaged us to perform.
  • To Communicate — To respond to your inquiries, provide project updates, send invoices, and communicate about our services.
  • To Improve Our Services — To understand how our website and services are used, identify areas for improvement, and develop new features and offerings.
  • To Fulfill Legal Obligations — To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
  • To Protect Our Rights — To enforce our Terms of Service, protect our rights and property, and ensure the safety and security of our services.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Data Storage

  • Hosting and Infrastructure — Our website is hosted on Vercel. Data transmitted through our website (including contact form submissions and chatbot interactions) is processed through Vercel's serverless infrastructure. Vercel's serverless function logs may temporarily contain request data as part of normal operations; these logs are subject to Vercel's data retention policies.
  • AI Processing — When you interact with our AI chatbot or when we use AI tools in the course of providing services, data may be processed through the OpenAI API. Data sent to OpenAI is subject to OpenAI's data usage policies. As of the effective date of this policy, OpenAI's API does not use submitted data to train its models.
  • Email — Email communications sent to our domain are processed through ImprovMX for email forwarding purposes.
  • Security — We implement reasonable administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services in the operation of our website and delivery of our services. Each of these services has its own privacy policy governing its collection and use of data:

  • OpenAI (openai.com) — Provides AI model inference and natural language processing for our chatbot and AI-assisted services. Chatbot conversations and AI processing requests are transmitted to OpenAI's API. We recommend reviewing OpenAI's Privacy Policy and API Data Usage Policy.
  • Vercel (vercel.com) — Provides web hosting, deployment, and serverless function execution for our website. We recommend reviewing Vercel's Privacy Policy.
  • ImprovMX (improvmx.com) — Provides email forwarding services for our domain. Emails sent to our domain addresses are routed through ImprovMX. We recommend reviewing ImprovMX's Privacy Policy.

We may also use additional third-party tools and services in the course of delivering client projects (e.g., cloud hosting providers, analytics platforms, domain registrars). These will be disclosed to the Client as relevant to their specific engagement.

We are not responsible for the privacy practices or content of third-party services.

5. Chatbot Data

Our website features an AI-powered chatbot designed to answer questions about our services and assist visitors.

  • Processing — Chatbot conversations are processed in real-time through the OpenAI API to generate responses. Messages you send to the chatbot are transmitted to OpenAI for processing.
  • No Permanent Storage — We do not permanently store or log chatbot conversations on our systems. Conversations exist only for the duration of your browser session and within the transient execution of serverless functions. No conversation logs are maintained beyond the scope of function execution.
  • No Training Use — Your chatbot conversations are not used by us to train AI models. OpenAI's API data usage policies govern how OpenAI handles data transmitted through its API.
  • Sensitive Information — Do not share sensitive personal information, passwords, financial details, or confidential business information through the chatbot. The chatbot is intended for general informational inquiries about our services.

6. Cookies

Our website uses minimal cookies:

  • Essential Cookies — We may use cookies that are strictly necessary for the operation of our website, such as session management or security cookies.
  • No Tracking Cookies — We do not use advertising cookies, behavioral tracking cookies, or third-party marketing cookies.
  • No Analytics Cookies — As of the effective date of this policy, we do not use cookie-based analytics tracking tools (such as Google Analytics).

You can configure your browser to refuse cookies, but doing so may affect the functionality of certain features of our website.

7. Data Retention

  • Contact Form Submissions — Information submitted through our contact form is retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter for follow-up and record-keeping purposes.
  • Client Project Data — Business information, project files, and other materials provided during a service engagement are retained for the duration of the engagement and for a reasonable period thereafter (typically up to two years) for support, warranty, and record-keeping purposes, unless the Client requests earlier deletion.
  • Chatbot Conversations — Not permanently stored (see Section 5).
  • Server Logs — Subject to Vercel's data retention policies for serverless function logs.

Upon request, we will delete or anonymize your personal information within a reasonable timeframe, subject to any legal obligations requiring us to retain certain data.

8. Client Data Handling

When providing AI chatbot development or other services, the Client may provide us with business information, product details, FAQs, brand voice guidelines, and other data for the purpose of training, configuring, or customizing AI solutions ("Client Training Data").

  • Client Training Data is used solely for the purpose of building and configuring the Client's project.
  • Client Training Data is stored securely and access is limited to authorized personnel working on the Client's project.
  • Upon completion of the engagement, Client Training Data will be retained only as long as necessary for ongoing support or as agreed upon with the Client.
  • Deletion on Request — Clients may request the deletion of their Training Data at any time by contacting us at contact@luxetartis.com. We will process deletion requests within thirty (30) calendar days.

9. Children's Privacy

Our website, services, and chatbot are not directed at children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as soon as possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at contact@luxetartis.com so that we can take appropriate action.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access — You have the right to request a copy of the personal information we hold about you.
  • Correction — You have the right to request that we correct any inaccurate or incomplete personal information.
  • Deletion — You have the right to request that we delete your personal information, subject to certain legal exceptions.
  • Restriction — You may have the right to request that we restrict the processing of your personal information under certain circumstances.
  • Data Portability — You may have the right to receive your personal information in a structured, commonly used, machine-readable format.
  • Objection — You may have the right to object to certain types of processing of your personal information.

To exercise any of these rights, please contact us at contact@luxetartis.com. We will respond to your request within thirty (30) calendar days or as required by applicable law.

11. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

  • Right to Know — You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete — You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.
  • No Sale of Personal Information — We do not sell personal information as defined under the CCPA.

To exercise your California privacy rights, contact us at contact@luxetartis.com.

12. European Data Protection Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation:

  • Legal Basis for Processing — We process your personal information based on one or more of the following legal bases: (a) your consent, (b) performance of a contract, (c) our legitimate business interests, or (d) compliance with legal obligations.
  • Data Transfers — Your information may be transferred to and processed in the United States or other countries where our service providers operate. We take reasonable steps to ensure that such transfers comply with applicable data protection laws.
  • Right to Lodge a Complaint — You have the right to lodge a complaint with your local data protection authority if you believe that we have not complied with applicable data protection laws.
  • Data Protection Contact — For data protection inquiries, contact us at contact@luxetartis.com.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Effective Date" at the top of this policy and post the revised version on our website.

For material changes that significantly affect how we handle your personal information, we will make reasonable efforts to provide notice (such as a prominent notice on our website or direct communication for active clients).

Your continued use of our website or services after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lux et Artis Email: contact@luxetartis.com Website: luxetartis.com

This Privacy Policy is effective as of April 1, 2026.