Privacy Policy

This Privacy Policy describes how Luckiest Man Ventures LLC, a Wyoming limited liability company, operating publicly as lightbreak ("we," "us," or "our"), collects, uses, discloses, and protects personal information when you use our platform at app.lightbreak.ai (the "platform") or visit our website at lightbreak.ai (the "website").

1. What we collect

1.1 Account information

We set up each customer's workspace ourselves. For each person given access, we store:

• Email address
• Name, role, and the workspace and publications they can use
• Account preferences and settings

Sign-in is handled by our authentication provider, Supabase. If you use a password, Supabase stores only a hashed form of it. We never see or store your password in plain text. You can also sign in with a one-time email link.

1.2 Billing information

Billing is arranged directly with us and invoiced. The platform does not collect or store payment card details. We keep the billing contact and invoice records needed to run your account.

1.3 Content and settings

Everything you create or configure in the platform is stored so we can provide the service. This includes:

• Newsletter drafts, finished issues, and their edit history
• Publications, brands, templates, sections, and section writing instructions
• Sources you add, such as websites, RSS feeds, and event calendars
• Events, jobs, directory listings, and advertiser records you manage
• Social graphics, GIFs, and images you upload or generate
• Connections you set up, such as an email platform account or a webhook address

Images used in newsletters are stored at public web addresses so they can appear in emails. Anyone with an image's address can view it.

1.4 Information about other people

Some content you manage in lightbreak is about other people, such as responses to forms you publish (which may include names, email addresses, and uploaded files), newsletter sign-ups, advertiser contacts, and event organizers. We process this information on your behalf, to provide the service to you. For form responses we store a one-way hash of the sender's IP address to limit abuse, not the address itself.

1.5 Public local information

To help you write, the platform reads publicly available sources, such as local news sites, event calendars, job boards, business websites, and real estate listings. It stores what it gathers (for example headlines, event details, and links) so you can review and use it in your publications. This material is kept with your publication's data and is covered by the same deletion process described below.

1.6 Usage and technical data

We keep records of what the platform does for you, such as newsletter generation runs, AI usage and cost, pushes to your email platform, and errors. Our hosting and sign-in providers also log technical details such as IP addresses, browser type, and sign-in times as part of running their services.

2. How we use your information

We use the information we collect to:

• Provide the service: operate the platform, including AI writing and review.
• Bill you: prepare invoices and manage your account.
• Fix and improve the platform: find errors and see which features work.
• Support you: respond to questions and troubleshoot issues.
• Keep things secure: detect and prevent abuse and unauthorized access.
• Meet legal obligations.
• Communicate with you: send service messages and alerts about your account.

We do not sell personal information, and we do not use your content to train AI models.

3. Third-party services

We use the following providers to run lightbreak. Each receives only what it needs to do its job.

3.1 Hosting and infrastructure

• Supabase: our database, sign-in, and file storage. Our database is hosted in the United States (US East).
• Vercel: hosts the platform at app.lightbreak.ai.
• Railway: runs background jobs, such as gathering public local information.
• Cloudflare: hosts the lightbreak.ai website.

3.2 AI providers

AI features send the relevant content (for example source articles, event details, your section instructions, and draft text) to AI models to produce the output you asked for. We reach these models through OpenRouter, which passes each request to the model's provider. Today those providers are Google (Gemini), Anthropic (Claude), and xAI (Grok). We may also call Anthropic directly as a backup. We choose models for quality and cost, so this list can change; we will keep this section current.

3.3 Reading and searching the public web

To read and search public web pages, the platform sends web addresses and search terms (not your account details) to Firecrawl, Jina AI Reader, Exa, and Apify. It also uses OpenStreetMap to place event and business addresses on a map.

3.4 Email and monitoring

• Resend: delivers service emails from the platform, such as alerts, support messages, and form notifications. lightbreak does not send your newsletters.
• Sentry: records errors in the platform so we can fix them. We configure it not to collect personal information by default and to strip sensitive values. When an error happens, it may record a short replay of the screen with all text masked and all images blocked.

3.5 Services you connect

When you connect an email platform, such as Beehiiv or ActiveCampaign, we use your API key only to place finished issues there as drafts, and to read the account details needed to do that. We store these keys encrypted. You can disconnect in lightbreak or revoke the key in the email platform at any time.

If you set up a webhook, we send notifications about your workspace (for example, that a draft is ready) to the address you choose. If you use forms or intake built with greetform, a related service we operate, submissions are delivered into your lightbreak workspace. If you create an API key or connect an outside AI agent, that agent can read and change your workspace's content with the access you gave it; we store only a hashed form of each key and token.

lightbreak does not integrate with Facebook, Instagram, or other Meta services. Social graphics you make in lightbreak are downloaded and posted by you.

3.6 Content loaded in your browser

The platform and website load fonts from Google Fonts, maps from OpenFreeMap, and, when you search for a GIF, results from GIPHY. These providers receive your IP address and, for GIF search, your search terms.

3.7 On our website

The contact and demo forms on lightbreak.ai are run by greetform, our sister product at 8th replay. What you type in them comes to us through greetform. The website does not load analytics or advertising trackers.

3.8 How providers handle your data

Each provider above handles data under its own terms and privacy policy. We do not sell your personal information to any of them or to anyone else.

4. Data retention and deletion

We keep your workspace data while your account is active. We do not currently delete workspace data automatically on a schedule.

To have your workspace deleted, email us from an address on your account. After we confirm the request:

• If you ask, we first send you a copy of your workspace data in a machine-readable (JSON) format.
• We delete your workspace data from our live database within 30 days.
• Copies in our providers' routine backups and logs expire on those providers' schedules.
• We may keep records we are required to keep for legal, tax, or accounting purposes, such as invoices.

Deleting your lightbreak data does not delete anything you already placed in an email platform such as Beehiiv or ActiveCampaign. You manage that data in those services.

5. Your privacy rights

Depending on where you live, you may have the right to:

• Access: request a copy of your personal data.
• Correction: update inaccurate or incomplete information.
• Deletion: request deletion of your account and associated data.
• Portability: receive your data in a machine-readable format.
• Objection and restriction: ask us to stop or limit certain processing.

To exercise any of these rights, email hello@lightbreak.ai. We respond within 30 days or as required by applicable law. If the request is about information a lightbreak customer collected (for example, a response you sent to a publication's form), we may refer you to that publication, which decides how its data is used.

6. Cookies and similar technologies

• Platform: app.lightbreak.ai uses essential cookies to keep you signed in and remember which workspace and publication you are working in. It does not use advertising or analytics cookies.
• Website: lightbreak.ai does not set analytics or advertising cookies. The embedded greetform may use essential cookies to run the form.

You can control cookies through your browser settings. Blocking essential cookies will stop you from signing in.

7. Data security

We use reasonable safeguards to protect your data, including:

• Encryption in transit (TLS) for the platform and website
• Encryption at rest provided by our database host
• Additional encryption for the email-platform API keys you give us
• Access limited by workspace, publication, and role
• Error monitoring configured to avoid collecting personal information

No system is completely secure. You're responsible for keeping your sign-in details confidential and telling us about any suspected unauthorized use.

7.1 Security incident notification

If we discover a breach of security that compromises your personal information, we will notify affected customers and, where required by applicable law, the relevant regulators, in accordance with applicable breach-notification laws.

8. Where data is processed

Our database is hosted in the United States. Some of the providers listed above, such as AI model providers, may process data in other countries under their own terms.

9. Children's privacy

The platform is for businesses and is not intended for anyone under 18. We do not knowingly collect personal information from children. If we learn that a child has provided personal information, we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The most current version will always live at this URL with a "Last updated" date at the top. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Regulatory compliance

We aim to handle personal information in line with the privacy laws that apply to our operations, which may include, where applicable:

• GDPR: the EU General Data Protection Regulation
• CCPA/CPRA: the California Consumer Privacy Act, as amended by the California Privacy Rights Act

12. Contact

For privacy questions, concerns, or requests, write to us: