← Back to site

Privacy Policy

Data controller

Nada Atia, sole trader (EI), publisher of LucenTask, 47 rue Vivienne, 75002 Paris. Contact: rgpd@lucentask.com

Data collected

Account: first name, last name, email, password (stored hashed, never in plain text), optional photo, language.

Content: tasks, projects, categories, comments and attachments you create.

Organization: status (student, employee...), usage patterns, schedules and blocked time slots you indicate.

Connected calendars (if you connect them): Google Calendar and Outlook access tokens, stored encrypted. Outlook meetings are read on demand to be displayed and are never saved.

Technical data: connection logs and IP address (security), anonymous audience statistics without cookies (Umami, hosted by us).

Why and on what basis

Providing the service and its features: performance of the Terms of Service.

Security, fraud and abuse prevention: legitimate interest.

Account-related emails (verification, reset, notifications): performance of the Terms of Service; notifications can be disabled in Settings.

Connecting your calendars: your consent, which you can withdraw at any time by disconnecting.

Anonymous statistics to improve LucenTask: legitimate interest.

AI Assistant

When you use the AI Assistant or import a schedule, the text or file sent is transmitted to Anthropic (Claude models) for analysis. LucenTask does not keep these files after analysis. Under its commercial terms, Anthropic does not use this data to train its models.

The AI's suggestions are just that—suggestions: you remain free to accept or reject them.

Subprocessors

Vercel Inc. (United States): hosting of the application and website.

Railway Corp. (United States): server, database and statistics.

Anthropic PBC (United States): AI Assistant analysis.

Resend (United States): sending emails.

Google LLC and Microsoft Corporation (United States): only if you choose to sign in with Google or connect your Google or Outlook calendar.

A payment provider will be added when paid plans launch; this page will be updated accordingly.

Transfers outside the European Union

Some data is hosted or processed in the United States. These transfers rely on the EU-US Data Privacy Framework where the provider adheres to it, and on the European Commission's standard contractual clauses.

Retention period

As long as your account is active.

Upon deletion of your account: your data is immediately erased from the database, and from backups within a maximum of 30 days.

Accounts inactive for 3 years: may be deleted after a notice email.

Technical logs: 12 months maximum.

Your rights

You have the right to access, rectify, erase, restrict, object to, and port your data, as well as the right to withdraw your consent. You can edit your information and delete your account from Settings.

For any request: rgpd@lucentask.com. Response within one month.

If you believe your rights are not being respected, you can contact the CNIL (https://www.cnil.fr).

Cookies

LucenTask does not use any advertising or tracking cookies. Only technical storage, essential for keeping your session open and remembering your preferences, is used in your browser. Audience statistics are anonymous and cookie-free.

Security

Encrypted connection (HTTPS), hashed passwords, encrypted calendar tokens, two-factor authentication available, data access limited to what is strictly necessary.

Minors

LucenTask is intended for people aged 15 and over. Below that age, parental consent is required.

Changes

This policy may evolve. In case of a significant change, you will be notified by email or within the app.

Last updated: October 21, 2026