Privacy Policy
Effective 10 October 2026
LightDrive is business software. Most of the personal information inside it is not ours and is not about us: it belongs to the businesses that use LightDrive and describes their own customers. This policy explains what we hold, who we hand it to, and what you can ask us to do about it.
The short version. We collect what is needed to run the software and bill for it. We do not sell personal information, we do not share it for advertising, and there is no advertising tracker, analytics tag or third-party pixel anywhere in LightDrive. Data your business enters about its own customers is yours; we process it under your instructions and hand it back or delete it when you ask.
- 1. Who we are
- 2. Two different roles, and why it matters
- 3. What we collect about account holders
- 4. What your business puts into LightDrive
- 5. Why we use it
- 6. Who else it passes through
- 7. Connected social and business accounts
- 8. Artificial intelligence features
- 9. Cookies and what is stored in your browser
- 10. How it is protected
- 11. How long it is kept
- 12. Your rights
- 13. Children
- 14. Where it is held
- 15. Changes to this policy
- 16. Contact us
1. Who we are
LightDrive is operated by LightDrive, Inc., a Delaware corporation, at 1981 Freedom Drive, Clearwater, Florida 33755, United States. In this policy "we", "us" and "LightDrive" mean that company, and "you" means whoever is reading it, whether you hold an account with us or your details are held inside somebody else's.
2. Two different roles, and why it matters
We handle personal information in two quite different capacities, and which one applies changes what we can do for you.
We decide (controller). For the people who sign up for LightDrive and use it: the account holder, the people they invite onto their team, and anyone who contacts us directly. We choose what to collect and why, and this policy governs it.
They decide, we hold (processor). For everything a business loads into LightDrive about its own contacts, customers, patients and clients. We do not decide what goes in, we do not use it for our own purposes, and we act on that business's instructions. If your details are in a LightDrive account because you are somebody's customer, that business is who to ask about them. We will help them answer you, and we will pass your request on if you contact us instead, but we will not change or delete their records on our own.
3. What we collect about account holders
- Account details. Name, email address, a password stored only as a cryptographic hash, your role, and which business account you belong to.
- Business details. The business name, contact details, logo, brand colors and time zone you configure.
- Billing. Where a plan is paid for, we record what was bought and when. Card details are entered directly with our payment processor and we never receive or store a card number.
- Technical information. IP address, browser type, and which pages of the application were used, recorded in ordinary server logs and used to keep the service working and secure.
- What you send us. Support messages, feedback submitted through the app, and anything else you choose to tell us.
4. What your business puts into LightDrive
LightDrive is a customer relationship and marketing system, so the information a business stores in it is substantial. Depending on which parts they use, that can include:
- Contacts and companies: names, email addresses, phone numbers, postal addresses, tags, notes and any custom fields the business defines.
- The history of dealing with a person: deals, tasks, appointments, notes and a timeline of activity.
- Messages: email and text message campaigns and their recipients, conversations, and comments and messages collected from connected social accounts.
- Consent records, which deliberately include the evidence of consent, the page or keyword it came from, and the IP address it was given from, because proving consent is the point of keeping them.
- Form submissions from the business's own websites and landing pages.
- Documents, contracts and electronic signatures, including the signer's name and the time and place of signing.
- Invoices, proposals and payment records.
- Calendars, bookings and appointments.
- Time entries, timesheets and shift records for that business's own staff.
- Surveys, testimonials and reviews.
- Files the business uploads, which can be anything they choose to attach.
We do not look through this information, we do not use it to build any profile, and we do not use it to train any model. We access it only where it is necessary to run the service, fix a fault, or comply with the law, and only by the smallest number of people who need to.
5. Why we use it
- To provide the software you have asked for and to keep your account working.
- To send the emails, text messages and social posts you instruct the software to send.
- To bill for the service and keep the financial records the law requires.
- To keep the service secure, including detecting abuse and investigating faults.
- To answer you when you contact us.
- To comply with legal obligations and to establish or defend legal claims.
We do not use personal information for advertising, we do not sell it, and we do not share it with anyone for their own marketing.
Text Messages
If you give us your cell phone number and agree to receive texts from LightDrive, we use that number only to send you the account texts described in the Terms of Service, and we keep a record of when and how you agreed. Reply STOP to any text to stop them.
No mobile information will be sold, rented or shared with anyone for marketing or promotional purposes. Your number and your text opt-in record are used only by LightDrive, Inc. to send you account texts, and by the messaging provider that delivers those texts for us.
6. Who else it passes through
Running software means service providers process the data for us. These are all of them, what each one does, and where. We hold each to contractual obligations to protect the information and to use it only as we instruct.
| Company | What it does | Where |
|---|---|---|
| Vercel | Hosts the application and stores uploaded files | United States |
| Neon | Hosts the database | United States |
| Amazon Web Services | Delivers outgoing email | United States |
| Resend | Delivers some outgoing email | United States |
| Twilio | Delivers text messages | United States |
| Stripe | Processes card payments | United States |
| Anthropic | Powers the artificial intelligence features described below | United States |
We will also disclose information where the law requires it, and to a buyer of the business if LightDrive is ever sold, in which case this policy continues to apply until the buyer gives notice of a different one.
7. Connected social and business accounts
LightDrive can publish to and read from Facebook, Instagram, LinkedIn, TikTok, X, YouTube and Google Business Profile, but only for an account somebody deliberately connects. When a connection is made:
- The sign-in happens on that network's own website. We never see the password.
- We store an access token, encrypted, so the software can act on that account. It can be revoked at any time from inside LightDrive or from the network's own settings.
- Posts, comments, messages and audience figures come back from that network and are stored against the business the connection belongs to.
- What each network does with the information is governed by that network's own privacy policy, not this one.
8. Artificial intelligence features
Some parts of LightDrive use a large language model provided by Anthropic, for example to rewrite a caption or to summarize research. Where that happens, the text you asked to be worked on is sent to Anthropic to produce the result. We do not send your contact records, customer lists or files to any model for training, and we do not permit our providers to train on the information we send them.
9. Cookies and what is stored in your browser
There is no advertising tracker, analytics tag, heat mapping tool or third-party pixel anywhere in LightDrive. The only things stored in your browser are the ones the software needs to work:
- A sign-in cookie, so you stay signed in. It is marked so that scripts cannot read it.
- Short-lived cookies used during a connection to a social network, which expire within ten minutes.
- Small preferences remembered on your own device, such as which calendars you have hidden or which tools you have pinned. These never leave your browser.
Because none of these is used for advertising or tracking, there is no consent banner to dismiss.
10. How it is protected
- Everything travels over an encrypted connection.
- Passwords are stored only as cryptographic hashes and cannot be read back, by us or by anybody else.
- Access tokens for connected social accounts are encrypted before storage using AES-256-GCM.
- Every account's data is separated from every other account's, and access is checked on each request rather than assumed.
- Access by our own staff is limited to what is needed to operate the service.
No system is perfectly secure, and we do not claim otherwise. If a breach affects your information we will tell you and any regulator we are required to tell, without undue delay.
11. How long it is kept
We keep information for as long as the account is open. When an account is closed we delete its data within 30 days, other than what we have to keep for tax, accounting or legal reasons, which is kept only for as long as that reason lasts. Backups are overwritten on their own schedule and a closed account's data disappears from them within 90 days.
You can delete individual records at any time from inside the software, and an account can be deleted outright on request.
12. Your rights
Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected, to have it deleted, to object to or restrict how it is used, and to receive it in a portable form. You also have the right to complain to your data protection authority.
Residents of California, and of other states with similar laws, have the right to know what is collected, to have it deleted, to correct it, and not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of.
To exercise any of these, write to privacy@lightdrive.us. We will answer within 30 days. If your information is in LightDrive because you are a customer of a business that uses it, see section 2: we will pass your request to that business, who is the one able to act on it.
13. Children
LightDrive is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child's information has been given to us, write to privacy@lightdrive.us and we will delete it.
14. Where it is held
LightDrive is operated from the United States and the information is stored there. If you use it from outside the United States, you are sending your information to the United States, where privacy laws differ from those in your own country.
15. Changes to this policy
We will post any change on this page and update the effective date at the top. If a change materially affects how we handle your information, we will tell account holders by email before it takes effect.
16. Contact us
LightDrive, Inc.
1981 Freedom Drive, Clearwater, Florida 33755, United States
privacy@lightdrive.us