Trust Center · Privacy Policy
Privacy Policy
Last updated October 14, 2026
Lustena is operated by Lustena Technologies Inc. (“Lustena”, “we”). This policy covers this website and the Lustena services. Where we process data on behalf of a customer company, that company is the controller and we act as its processor.
1. On this website
- Contact requests: the name, work email and phone you submit, and the consent sentence you accepted, to reply to your request. Kept until you ask us to delete them.
- Analytics and error monitoring, only after you accept them in the cookie banner. You can decline and the site still works.
- Essential cookies to remember your cookie choice and, if you log in, your session.
2. In the product
The browser extension classifies prompts, pastes and uploads on the employee's device. By default it sends only content-free findings: categories, counts, destinations, channels and HMAC fingerprints. Raw prompt text, file contents, file names, page titles and raw conversation ids are never stored or sent; redacted text is sent only if the company opts in, as described below.
A customer company may turn on redacted content capture. It is off by default, requires the company to record a lawful basis and a retention period of up to 365 days, replaces every detected value with its category on the device before sending, is encrypted at rest, and every read is audited. The extension shows employees when capture is on.
The SDK, the MCP server and the scanner send governance metadata about agents and scans, not the content of conversations.
3. Legal bases
- Consent, for analytics and monitoring cookies and for contact requests.
- Performance of a contract, for providing the services to customer companies.
- Legitimate interest, for security of the services. Where we are a processor, the customer company determines the legal basis for its employees' data.
4. Who processes data
Our subprocessors are listed in the Trust Center, with their purpose and region. Data may be processed outside the European Economic Area and Brazil under appropriate safeguards.
5. Retention
Findings follow the customer workspace's retention settings. Redacted content is deleted by a scheduled sweep when its retention ends. After termination, workspace data can be exported for thirty days; it is then deleted.
6. Your rights
Under the GDPR and the LGPD you can ask us to confirm, access, correct, anonymize, port or delete your data, to revoke consent, and to know who we share it with. You can also complain to your data protection authority, such as an EU supervisory authority or Brazil's ANPD. If your data reached us through your employer's use of Lustena, we will forward your request to them.
7. Contact
Privacy requests: contato@lustena.ai, with the subject Privacy. We answer within fifteen days.
Data Protection Officer (Encarregado pelo tratamento de dados pessoais, LGPD art. 41): reachable at the same address, with the subject DPO.