Privacy Policy

1. Who we are

LAN Brain is operated by LAN Ventures EAS, a Paraguayan company headquartered in Asunción, Paraguay. This policy explains what data we collect, how we use it, who we share it with, and the rights you have over it.

2. Data we collect

· Account data: name, email, organization, role, preferred language.

· Usage data: pages visited, actions within the Service, device, browser, approximate IP address, timestamps.

· Data from platforms you connect: the content and metadata to which you give us explicit access via OAuth or equivalent authorization. We only access the minimum permissions necessary to deliver the functionality you requested.

· Communication data: when you contact us by email, form, or meeting.

3. What we use it for

· To deliver the Service you contracted.

· To index, organize, and return your information in a useful way.

· To improve the quality of the Service, without using your personal data to train AI models.

· To comply with legal obligations and protect our rights and yours.

4. Legal bases

We process your data on the basis of the contract you have with us, your explicit consent (when required), our legal obligations, and our legitimate interests in operating the Service securely.

5. Sub-processors

To deliver the Service we rely on carefully selected providers:

· Anthropic, PBC (language processing via the Claude API)

· Vercel Inc. (application hosting)

· Supabase Inc. (database and storage)

· Google LLC (authentication, calendar, gmail, drive when you connect them)

· Other providers that we will list upon request and that apply equivalent security controls.

These sub-processors access your data only to the extent strictly necessary to deliver the Service and under contractual confidentiality obligations.

6. We do not use your data to train models

Your data is not used to train artificial intelligence models. Calls to the Claude model are made under configurations that exclude your content from training, in line with Anthropic's processing policies.

7. Retention

We retain your data while your account is active and for the additional reasonable time necessary to comply with legal obligations, resolve disputes, or enforce agreements. You can request deletion at any time.

8. Your rights

You have the right to access, rectify, delete, and port your personal data, and to object to or restrict certain processing. To exercise these rights, write to privacy@lanaccelerator.com. We will respond within a reasonable time, no more than 30 days.

9. Security

We apply reasonable technical and organizational measures to protect your data: encryption in transit (TLS), encryption at rest, role-based access control, audit logs, and periodic provider review. No system is perfectly secure, but we make our best effort and we will notify you without delay of any material incident that affects you.

10. Minors

The Service is not directed to minors under 18 years of age and we do not knowingly collect data from minors of that age.

11. International transfers

Some of our sub-processors operate outside Paraguay. When this occurs, we apply contractual clauses and equivalent controls to ensure the same level of protection.

12. Changes to this policy

We may update this policy. We will publish the current version on this page and, for material changes, notify you in advance.

13. Contact

For privacy questions: privacy@lanaccelerator.com · LAN Ventures EAS, Asunción, Paraguay.