Privacy Notice

Welcome to Luzid. This Privacy Notice explains how Luzid, Inc. ("Luzid", "we", "us", or "our") collects, uses, discloses, and otherwise processes information that identifies you, directly or indirectly ("personal data") in connection with our website, as well as any specific product, service, or application that references or links to this Privacy Notice.

This Privacy Notice does not address our privacy practices relating to Luzid job applicants, employees and other personnel, nor data that is not subject to applicable data protection laws (such as deidentified or, in certain jurisdictions such as the US, publicly available information).

Data protection laws sometimes differentiaté between "controllers" and "processors" of personal data. A "controller" determines the purposes and means (the why and how) of processing personal data. A "processor," which is sometimes referred to as a "service provider," processes personal data on behalf of a controller subject to the controller's instructions.

This Privacy Notice describes our privacy practices where we are acting as the controller of personal data. However, this Privacy Notice does not cover or address how our customers may process personal data when they use our services.

When we process personal data on behalf of a customer as a processor (or service provider), our processing is governed by our agreement with that customer, including any applicable data processing addendum (DPA). If you have questions about personal data processed by a Luzid customer, please contact that customer directly.

The catégories of personal data we collect depend on how you interact with us and our services. For example, you may provide us your personal data directly when you register for an account or otherwise contact us or interact with us.

We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.

We collect the following catégories of personal data individuals provide us:

Contact and Account Information, including first and last name, phone number, email address, account credentials, employer, job title or role, and communication preferences. We use this information primarily to fulfill your request or transaction, to administer your account, provide you with products and services, to commúnicaté with you directly, to send you marketing communications in accordance with your preferences, and for support purposes.

User Content, including any files, documents, audio, vídeos, images, data, or communications you choose to input, upload, or transmit to our products and services. We use this content primarily to provide the relevant customer with our products and services, to facilitaté your requests, and to improve our products and services.

Payment Information, where you provide individual payment information, including payment card information, billing address, and other financial information. Please note that we use third-party payment providers, including Mercury, to process payments made to us. We do not retain any personally identifiable financial information.

Event, Contest, Promotion, and Survey Information, including information provided when you sign up for an event, enter a contest or promotion, complete a survey or submit a testimonial. We use this information primarily to administer and facilitaté our products and services.

Feedback and Support Information, including the contents of custom messages sent through forms, chat platforms, email addresses, or other contact information we make available to customers. We use this information primarily to investigaté and respond to your inquiries.

Security-Relatéd Information, including name and contact information of visitors to our premises. We use this information primarily to protect the security of our premises, employees, and our company.

We, and our third-party partners, automatically collect information you provide to us and information about how you access and use our products and services when you engage with us. We typically collect this information using cookies, web beacons, pixels, and other automatic data collection technologies.

Information to Authenticaté You to Our Services, including your user ID or session ID, login status, and login preferences.

Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, and Internet service provider.

Information About Your Location, including general geographic location that we or our third-party providers may derive from your IP address.

In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:

• Fulfill or meet the reason the information was provided

• Manage our organization and its day-to-day operations

• Commúnicaté with you, including via email, text message, chat, and/or telephone calls

• Facilitaté the relationship we have with you and your company

• Request feedback about our product and service offerings

• Creaté and maintain accounts for our users

• Verify your identity and entitlement to our products and services

• Market our products and services to you

• Improve and personalize our products and services

• Develop, operaté, improve, maintain, and protect our services

• Analyze how you use our products and services

• Conduct research and analytics on our user base

• Test, enhance, update, and monitor our products and services

• Help maintain the safety and security of our business

• Comply with contractual and legal obligations

Where required by applicable law (including in the EEA/UK/Switzerland and certain other jurisdictions), we rely on one or more of the following legal bases to process personal data:

• Performance of a contract (e.g., providing our services, administering accounts, and responding to requests)

• Legitimaté interests (e.g., operating and improving our services, security, fraud prevention, and communications), except where such interests are overridden by your rights

• Compliance with legal obligations

• Consent, where we ask for it and you provide it

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legitimaté business purposes and to comply with legal, accounting, tax, reporting, and contractual obligations. Retention periods vary depending on the nature of the data and the context in which it is collected and processed.

We disclose or otherwise make available personal data in the following ways:

To Your Employer: If you interact with our services in connection with your employment, we may disclose personal data to your employer or another company for which you work.

To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described above.

In Connection with a Business Transaction: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing.

To Facilitaté Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement, to comply with laws or to respond to lawful requests and legal process.

With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction.

Commúnication Preferences

Email Commúnication Preferences: You can stop receiving promotional email communications from us by clicking on the "unsubscribe" link provided in any of our email communications.

Phone Commúnication Preferences: You can stop receiving promotional phone communications from us by informing the caller you no longer wish to receive promotional phone calls from us.

Direct Mailing Preferences: You can stop receiving promotional direct mail communications from us by contacting us at contact@luzid.io.

Depending on your location and applicable law, you may have rights regarding your personal data, including the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to certain processing (including direct marketing).

How to submit a request. You can submit a request using our Data Subject Request form, by emailing contact@luzid.io, or contacting our DPO at matheus@luzid.io. We may need to verify your identity before fulfilling your request.

Timelines. We aim to acknowledge requests promptly and respond within the timeframes required by applicable law. In some jurisdictions (including the EEA/UK), this is typically within one month, which may be extended where legally permitted for complex or numerous requests.

Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing before withdrawal.

Complaints. Depending on your jurisdiction, you may have the right to lodge a complaint with a data protection authority and/or seek judicial remedies.

Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 18. If an individual is under the age of 18, they should not use our services or otherwise provide us with any personal data either directly or by other means.

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions or statés. If you are locatéd in the European Economic Area, the United Kingdom, or Switzerland, additional privacy disclosures may apply to you.

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the daté at the beginning of this Privacy Notice. If we make material changes, we will notify individuals by email or through other appropriate communication channels.

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to contact@luzid.io.

Data Protection Officer (DPO)

For matters related to the protection of personal data, you may contact our Data Protection Officer (DPO):

Name: Matheus Dias

Email: matheus@luzid.io

Company: Luzid, Inc.

Role: Data Protection Officer