Privacy Policy

Effective date: 4 November 2026

1. Who we are

Lampara Intelligence LLC (“Lampara”, “we”, “us”) operates the Lampara Intelligence website, customer portal, reports, API and supported integrations.

For privacy enquiries and requests, contact hello@lamparaintelligence.com.

This policy explains how we collect, use, share and retain personal information.

2. Our role

We act as a data controller for information used to manage accounts, operate our business, provide support and secure the Service.

When we process personal information in customer-submitted material solely on a customer’s instructions, we act as a data processor where applicable. That processing is governed by the relevant customer agreement and any applicable data processing agreement.

3. Information we process

Depending on your use of the Service, we process:

• Account and contact details you provide, such as your email address, name and organisation.
• Workspace settings, including industries, technologies, intelligence priorities and adversary profiles.
• Reports and other information submitted for analysis.
• Generated analysis and saved intelligence history.
• Subscription, billing and transaction information.
• Support enquiries and other communications.
• Technical and usage information generated through the Service, such as access records, IP addresses, API activity and error information.

Reports, workspace settings and generated analysis may contain personal information.

We receive information directly from you, from authorised users or organisations managing your workspace, from service providers supporting your use of Lampara, and from intelligence sources used to deliver the Service.

4. How we use information

We use information to:

• Create and manage accounts and workspaces.
• Tailor intelligence to your requirements.
• Process submitted reports and generate analysis.
• Deliver reports through the portal, API and integrations.
• Manage subscriptions and payments.
• Respond to enquiries and provide support.
• Maintain, troubleshoot and secure the Service.
• Prevent misuse and unauthorised access.
• Meet legal obligations and establish or defend legal claims.

Where UK or EU data protection law applies, our lawful bases include performing a contract, legitimate interests in operating and securing our business, compliance with legal obligations, and consent where required.

Where our contract is with your organisation, we generally rely on legitimate interests to manage our relationship with its users. You may contact us for more information about these interests.

5. Commercial reports and AI processing

Commercial reports submitted for analysis are processed on the fly.

Lampara does not save the original commercial report in its database or retain it after processing. Our AI provider processes the submitted report information without retaining it.

We save the resulting analysis in our database so it can be accessed through the Service. The analysis may include personal information and other details derived from the original report. Non-retention of the original report does not mean that all information derived from it is deleted.

Customers must have permission to submit reports for this processing and should avoid submitting personal information that is unnecessary for the requested analysis.

6. Who receives information

We use providers to support hosting, database storage, AI processing, communications, payments and other service operations. They receive information needed for their role, subject to applicable contractual and data protection requirements.

Information may also be available to:

• Authorised users in your workspace.
• An MSP, vCISO or organisation administering your workspace.
• Services you connect through integrations.
• Professional advisers where necessary.
• Authorities or other recipients where disclosure is legally required or necessary to protect legal rights and security.

Information may be transferred as part of a merger, acquisition or business transfer, subject to applicable safeguards.

Contact us for information about the providers involved in processing your data.

7. International processing

Our providers may process information in countries other than your own.

Where applicable data protection law requires safeguards for international transfers, we use a recognised transfer mechanism, such as an adequacy decision or appropriate contractual safeguards.

You may contact us for details of relevant safeguards and how to obtain a copy.

8. Retention

Original commercial reports are not retained by Lampara or our AI provider after processing.

Other information is retained according to its purpose:

• Account and workspace information is retained while needed to provide and administer your account.
• Generated analysis and intelligence history are retained to provide the Service and the history available under your plan.
• Support records are retained as needed to manage enquiries and related disputes.
• Security and technical records are retained as needed to investigate issues, prevent misuse and protect the Service.
• Billing and accounting records are retained for applicable legal and tax requirements.

After account closure, we delete or anonymise information when it is no longer needed for those purposes. Relevant information may be retained longer to meet legal obligations or resolve disputes.

Backup copies are removed through the normal backup replacement cycle and are not used for ordinary service operations.

We determine retention periods by considering the information’s sensitivity, its purpose, applicable legal requirements and the need to resolve disputes. Contact us for details relevant to your account.

9. Cookies and similar technologies

We use cookies or similar technologies where needed to operate features such as authentication, session management and security.

Where optional cookies or similar technologies require consent, we request that consent before using them. You can manage cookies through available website controls and your browser settings. Blocking essential cookies may affect the Service.

10. Security

We use technical and organisational measures appropriate to the information we process and the risks involved. Access is restricted according to operational needs.

No online service can guarantee absolute security. Protect your credentials and API keys and notify us promptly if you suspect unauthorised access.

11. Your rights

Depending on applicable law, you may have the right to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request deletion.
• Restrict or object to processing.
• Receive information in a portable format.
• Withdraw consent where processing relies on consent.

Rights are subject to applicable conditions and exceptions. Withdrawing consent does not affect the lawfulness of earlier processing.

To make a request, email hello@lamparaintelligence.com. We may verify your identity before responding.

If we process information on behalf of your organisation, we may direct your request to that organisation and assist it in responding.

You may complain to your local data protection authority. Where UK data protection law applies, you can contact the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

12. Automated processing

We use automated processing and AI to generate intelligence and analysis. Outputs may contain errors and should be reviewed before consequential decisions are made.

This analysis is intended to support customer decisions. It is not intended to make solely automated decisions about individuals that produce legal or similarly significant effects.

13. Changes and contact

We may update this policy to reflect changes to the Service or our processing. We will publish the revised policy and provide additional notice of material changes where appropriate.

For privacy enquiries, data requests and support:

Lampara Intelligence LLC hello@lamparaintelligence.com