Who this notice covers
Lucentra Intelligence is a sole proprietorship operating this preliminary historical drug revenue research service from India. This notice covers website visitors, invited testers, account holders and people who contact us. Privacy and account enquiries can be sent to contact@lucentraintelligence.com. A drug search is a commercial research query; please do not submit patient records, medical histories or other sensitive personal information.
Information collected and why
- Account information: email address, a password hash, verification status and any name, company or professional role you provide. Email and a password are needed for an account; the other profile fields are optional.
- Research and access records: drug queries, saved results, retrieval times, successful unlocks, search status, allowance balances, requests for extra access, review decisions and account events. These deliver your research history, apply access limits, resolve problems and help us understand product interest. Public availability previews show reporting years and research-section availability; they do not identify customers, reveal their queries or publish their saved figures.
- Enquiries: your name, email, optional company and message, so we can respond and keep track of the conversation.
- Technical information: our infrastructure providers may process IP addresses, browser/request details and service logs to deliver and secure the website. The application uses a keyed identifier derived from a request's address for rate limiting.
- Preferences: whether you separately choose product updates. Declining updates does not affect free account access or essential account messages.
We use account and enquiry information to provide the service you request, maintain security and comply with applicable obligations. Where the EU or UK GDPR applies, account provision and requested research rely on contractual necessity; service security, support and limited product-interest analysis rely on our legitimate interests in running and improving the service, subject to your rights; statutory compliance relies on legal obligations; and optional marketing relies on consent. Where another law requires consent for a particular use, we must obtain it before that use. Optional marketing relies on your separate choice; a privacy notice is not permission for unrelated uses.
Who receives information
The platform uses Render for web hosting, Neon for the account database, Resend for account and service email, and Zoho for our business inbox. Cloudflare manages domain DNS; this alone does not mean that all website traffic passes through Cloudflare. Providers and their authorised subprocessors process the information needed for their roles. Authorised Lucentra personnel may access records for support, service administration and security.
Database and web regions selected for the platform are Singapore, and the Resend sending region is Tokyo. Provider support, subprocessors and email delivery may involve other countries. These selections do not guarantee that all copies remain in one region. Where applicable law requires transfer safeguards, those safeguards must be in place; using the site is not a waiver of transfer protections. Contact us for information about relevant providers and safeguards.
We do not sell personal information or use it for advertising audiences. A drug query may be sent to financial or regulatory source services when needed to retrieve disclosures; we do not deliberately attach your account name or email to those research requests. Information may also be disclosed where legally required or reasonably necessary to protect rights and security.
Cookies, local storage and analytics
We use an essential session cookie for account access and form security. The workspace can keep a search request identifier in browser session storage to resume an interrupted request. Blocking these can prevent login or search recovery. This release does not embed advertising pixels or third-party behavioural analytics. Product-interest analysis uses our account and service records; we do not make decisions with legal or similarly significant effects about you solely by automated processing.
Retention and deletion
Account and saved research records are retained while needed to provide your account and requested access. Enquiries are retained while needed to answer and follow up the matter. After an account closure or deletion request, we assess what can be deleted or de-identified and what must be retained for a specific security, dispute, accounting or legal purpose. Retention is assessed against the record's purpose, age, legal requirements and unresolved issues; it is not an entitlement to keep everything indefinitely.
Deletion from active systems may not immediately remove protected backups or provider logs. Such copies remain subject to provider retention and access controls. This preliminary release handles requests by email; it does not currently offer automatic account deletion or a self-service personal-data export.
Your choices and privacy requests
Email us from your registered address to request access, correction, account closure, deletion or withdrawal of an optional marketing choice. Where the law provides them, you may also request restriction, portability, object to processing or withdraw consent for processing based on consent. We may ask for proportionate verification, but never your password. Withdrawal does not undo earlier lawful processing; withdrawing information necessary for the service can mean we can no longer provide that service.
You can also raise a privacy grievance at the contact address above. We will explain applicable limits or reasons if a request cannot be fulfilled and respond within the period required by the law that applies. You retain the right to approach a competent regulator or other lawful complaint channel. Where applicable, UK users can contact the Information Commissioner's Office, and EEA users can contact their local supervisory authority. No fee is charged merely for contacting us about privacy.
Security, age and changes
We use password hashing, HTTPS for the hosted service, access restrictions and form protection. No service can guarantee absolute security. If a relevant incident occurs, notification duties are assessed under applicable law. This service is intended for professional users aged 18 or over, not children. Contact us if you believe a child has supplied personal information.
Material changes to data use will be explained before they take effect, with a fresh choice where required. The date above identifies this notice's current edition.