Privacy Policy

LUCID is a Chrome extension made by ENTRUST AI. It pressure-tests your prompt before you send it and reviews the AI's answer after, against the professional Standard you define. This page says, in plain words, what LUCID reads, what it keeps about you, and who else handles your data.

Who we are

ENTRUST AI, Monsey, New York, United States. Questions about this policy go to contact@entrustai.co. ENTRUST AI decides what LUCID keeps about you and why. Under the data protection laws of the European Union, the European Economic Area, the United Kingdom and Switzerland, that makes us the controller of your personal data.

What LUCID reads

LUCID works only on four sites: claude.ai, chatgpt.com, gemini.google.com and grok.com. It does not run on any other website. On those four sites, while LUCID is switched on, it reads the prompt you are about to send and the answer the AI writes back. That is all it reads.

What happens to your prompt and the answer

LUCID sends your prompt, and afterwards the AI's answer, over an encrypted connection to LUCID's server. The server passes them, with your Standard, to Anthropic's Claude model, which writes your Pressure Test and reviews the answer. The result comes back to you in the LUCID bar and sidebar.

This happens on every site LUCID works on, so a prompt you write in ChatGPT, Gemini or Grok is also seen by Anthropic for this purpose. Anthropic receives it through its API, under its commercial terms, which state that Anthropic may not train models on customer content from its API. That is Anthropic's undertaking, and we rely on it.

Neither your prompt nor the answer is saved by LUCID. The server's log notes only how long they were, never what they said.

When you build a Standard with LUCID's help, your answers to its questions (your profession, what frustrates you about AI, the style you want, what you never allow, and how you use AI) are sent to Anthropic in the same way, to write the Standard.

What LUCID keeps about you

LUCID's database is run by Supabase. It holds only these things:

• Your account. Your email address and name, given to us by WorkOS when you sign in, the date your account was made, your plan (Free or Pro), and, once you upgrade, the customer number Stripe gives you.
• Your sign-in. A record that you are signed in. It ends when you sign out, or after 30 days without using LUCID.
• Your Standard. The profession and rules you set, so LUCID can hold the AI to them. You can change it or clear it at any time in the sidebar.
• Your daily count. How many free Pressure Tests and reviews you have used today, so the free limit can be applied.
• A usage record for each exchange, without words. Which of the four sites you were on, what you chose (sent anyway, dismissed or skipped), the clarity score, whether your Standard was in play, whether the review flagged the answer, and a few markers of how you used the bar, such as whether an upgrade offer was shown. It holds no prompt, no answer, no Pressure Test and no copy of your Standard. We use these records to learn how LUCID is used and to make it better.

These are kept for as long as your account exists.

What stays on your own computer

Some things are kept only in Chrome, on your computer: your sign-in key, your Standing Orders, your sidebar switches, and a copy of your Standard and plan so the sidebar opens quickly. Your Standing Orders never reach LUCID's server. When they are on, LUCID adds them to the prompt you send to the AI site, so that site receives them with your prompt. Removing LUCID from Chrome deletes everything LUCID kept on your computer.

Problem reports and logs

When one of the four sites changes in a way that stops LUCID from working, LUCID tells our server which site, what kind of problem, and which version of LUCID. The report carries no prompt and no answer. It names you only by a short one-way code, enough to tell one person from many and never enough to tell who you are.

The server's log also notes your email address when you sign in, the profession named when a Standard is built, and your Stripe customer number when your plan changes.

Payments

LUCID Pro is paid through Stripe. Your card details go to Stripe and never reach us. We keep only your Stripe customer number and whether your plan is Free or Pro.

Who else handles your data

We use a small number of service providers, and each handles your data only to do its part of running LUCID for us:

• Anthropic: the Claude model that writes your Pressure Tests, reviews the AI's answers and helps build your Standard.
• Supabase: the database.
• Railway: the server LUCID runs on.
• WorkOS: sign-in.
• Stripe: payments.

We may also disclose data where the law requires it.

Why we use your data

Where the law asks for a reason for each use of your data (as the European and UK laws do), these are ours:

• To provide LUCID to you. Your account, your sign-in, your Standard and your daily count are what the service needs to work, and we use them under our agreement with you.
• To take payment. Your Stripe customer number and plan are kept under that same agreement, and payment records for as long as tax and accounting law requires.
• To keep LUCID working and make it better. Problem reports, server logs and the usage records rest on our legitimate interest in running a reliable service and improving it. You can object to this, as described below.

Where your data is processed

ENTRUST AI is in the United States, and your data is processed in the United States and wherever our providers operate. If you are in the European Economic Area, the United Kingdom or Switzerland, this means your data leaves your country. Where it does, we rely on the transfer safeguards in our providers' data processing terms.

What we do not do

• We do not keep your prompts or the AI's answers.
• We do not sell or rent anything about you, and we do not share it with advertisers.
• We do not use what LUCID reads for anything except giving you LUCID's features.
• We do not set advertising or tracking cookies.
• We make no automated decision about you that has legal or similarly significant effects. LUCID judges a prompt and an answer, never you as a person.

Your choices

• Delete your account. Write to contact@entrustai.co from the address you signed in with, and we will delete your account, your Standard and your usage records. This is done by hand, within 30 days of your request. Payment records stay where the law requires us to keep them.
• A copy of what we hold. Ask at the same address and we will send it, in a common machine-readable format if you want to take it elsewhere.
• Correct it. If something we hold about you is wrong, tell us at the same address and we will correct it.
• Limit or object. You can ask us to limit how we use your data, or object to a use that rests on our legitimate interest, at the same address.
• Stop using LUCID. Switch it off in the sidebar, or remove it from Chrome, at any time.
• Complain. If you are in the European Economic Area, the United Kingdom or Switzerland, you can complain to the data protection authority where you live or work. We would ask you to write to us first, so we can put it right.

We answer every request within one month, and we will not charge you for it.

Children

LUCID is not directed at children under 13, and we do not knowingly keep anything about them.

Changes

If this policy changes, the effective date at the top changes with it. Material changes will be announced on this page before they take effect.

Governing law

This policy is governed by the laws of the State of New York, United States.