Privacy Policy

Updated April 3, 2019

This Lucidchart Privacy Policy (“Policy”) describes how Lucid Software Inc. (“Lucidchart,” “Lucid,” “we,” or “us”) collects, uses and discloses your personal information. This Policy applies to information we collect when you use our websites, mobile applications and other online products and services where this Policy is posted (collectively, the "Services").

We may change the provisions of this Policy at any time and will indicate when changes have been made by revising the date at the top of this Policy. We encourage you to review the Policy whenever you access the Services to make sure that you understand our information collection, use and disclosure practices. If we make material changes to this policy, we will provide you with additional notice of such changes and request your affirmative consent before using or sharing previously collected information in a materially different way.

Information That You Provide to Us

  • Lucid may collect information that you provide when you use the services, such as when you: (1) create an account; (2) make a purchase; (3) participate in events or promotions; (4) send questions or comments via e-mail or live chat to Lucid customer support; (5) apply for a job with us online; (6) fill out surveys; or (7) otherwise communicate with us through the Services. The types of personal information that you provide may include your name, e-mail address, telephone number, postal address, credit card information, and other contact or identifying information that you choose to provide.
  • Content. Lucidchart stores, processes and maintains files that you create and/or upload using the Services (as well as previous versions of your files), including Lucid charts that you create, sharing lists, and other data related to your account in order to provide the service to you.

Information That We Collect Automatically From You

  • Account activity. Lucid's servers automatically record certain information about your use of Lucidchart. Similar to other web services, Lucid uses both persistent and session cookies, web beacons, and pixel tracking technology to record information such as account activity (e.g., storage usage, number of log-ins, actions taken), data displayed or clicked on (e.g., UI elements, links), other log information (e.g., browser type, IP address, date and time of access, cookie ID, referrer URL, etc.), and to remember user preferences while using the services. Lucidchart may collect automated error reports in the case of software malfunction; such error reports may contain some or all of the information in your documents and may be reviewed to help resolve problems with the Lucidchart software or service.

Information We Collect From Third Parties

  • We may obtain information from other sources and combine that with information we collect through our Services. For example, if you create or log into your account through a third-party social networking site, we will have access to certain information from that site, such as your name, account info and friends, in accordance with the authorization procedures determined by such third-party social networking site.
  • If you elect to purchase a license to use Lucidchart, we may receive information about your purchase from our third-party payment processor.
  • We use analytics services and software provided by third parties to help us understand how users access and use the Services. These tools and services place cookies, web beacons and other devices or technologies on our Services to enable them to track traffic data. The data collected typically includes information such as your IP address, your Internet Service Provider, your web browser, the time spent on webpages, the links clicked and the advertisements viewed on those pages. We use this information to improve our Services and your experience, to see which areas and features of our Services are popular and to count visits.
  • We may display advertising to you on our site that is provided by third parties.

How We Use Your Information

  • We use personal information collected through Lucid’s services for purposes described in this Policy or otherwise disclosed to you on or in connection with our services. For example, we may use your information to:
    • Operate and improve our services;
    • Send you advertising or promotional materials, including information about new products, contests, features and enhancements, special offers and other events of interest from Lucid and our select partners;
    • Provide and deliver the products and services you request, process transactions, and to send you related information, including confirmations and invoices;
    • Send you technical notices, updates, security alerts and support and administrative messages;
    • Respond to your comments, questions and requests and provide customer service;
    • Monitor and evaluate trends, usage and activities in connection with our Services;
    • Personalize and improve the Services and provide ads, content, communications or features that match user profiles or interests; and
    • Link or combine with other information we get from third parties to help understand your needs and provide you with better service.
  • Files you create, upload, or copy to Lucidchart may, if you choose, be read, copied, used and redistributed by people you know or, again if you choose, by people you do not know. Information you disclose using the chat function of Lucidchart may be read, copied, used and redistributed by people participating in the chat. Use care when including sensitive personal information in files you share or in chat sessions, such as social security numbers, financial account information, home addresses or phone numbers.
  • Some features may be provided by third parties (e.g., the payments processing services such as Amazon Payments, sharing features of social networks such as Facebook and Google+, etc.), who may receive and process your data. When you use one of these features, you may be sharing data with the third party, including allowing the third party to process your data. Access to your data by these third parties is not governed by this Privacy Policy.
  • Lucidchart reserves the right to review documents to help resolve problems with the Lucidchart software or service, or to ensure compliance with our Terms of Service.

Information Sharing

  • Lucidchart may share your personal information with third parties in the following limited circumstances:
    • When we have your consent.
    • With third party vendors, consultants and other service providers who are working on our behalf, who are hosting our data, and need access to your information to carry out their work for us. These entities have agreed to maintain the confidentiality, security, and integrity of the personal information they obtain from us, and, unless we notify you otherwise and provide you with an opportunity to opt-out, will not use your personal information for any purpose other than as described in this Policy.
    • With data analytics and advertising services in order to understand your preferences and to show you advertising on our site or through our service.
    • With law enforcement, courts of competent jurisdiction, or others when we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process or enforceable governmental request, (b) enforce applicable Terms of Service, including investigation of potential violations thereof, (c) detect, prevent, or otherwise address fraud, security or technical issues, or (d) protect against harm to the rights, property or safety of Lucidchart, its users or the public as required or permitted by law.
    • With your employer if you are a Lucidchart registered user, and the domain of the primary email address associated with your Lucidchart account is owned by your employer and that email address was assigned to you as an employee of that organization, and an authorized representative of that organization wishes to establish a Lucidchart company account and add you to it, then certain information concerning your individual account may become accessible to that organization’s administrator including your name and email address, and your account may be added to the corporate account.
  • We may share with third parties certain pieces of aggregated, non-personal information, such as the number of users who used a type of document, for example, or how many users clicked on a particular advertisement. Such information does not identify you individually.
  • In connection with, or during negotiations of, any merger, sale of some or all of Lucid’s assets, bankruptcy or reorganization, financing or acquisition of all or a portion of Lucid’s business to another company.

Data Security

  • Lucidchart takes reasonable measures to protect your personal information and your documents from loss, misuse and unauthorized access, disclosure, alteration and destruction and to ensure that your documents remain available to you.

Data Retention

  • We store the information we collect about you for as long as is necessary for the purpose(s) for which we originally collected it. We store our backups for six (6) months. We may retain certain information for legitimate business purposes or as required by law.

EU-U.S. Privacy Shield and Dispute Resolution for Users in the European Union

  • In connection with Lucid’s processing of personal data it receives from the EU (“EU Data”), Lucid adheres to the EU-U.S. Privacy Shield Framework Principles issued by the U.S. Department of Commerce (the “Principles”). For more information about the Principles, please visit the Department of Commerce’s Privacy Shield website (www.commerce.gov/page/eu-us-privacy-shield).
  • Please direct any inquiries or complaints regarding our compliance with the Principles to the point of contact listed in the “Contact Us” section below. If Lucid does not resolve your complaint, you may submit your complaint free of charge to privacy@lucidchart.com, Lucid’s designated Privacy Shield dispute resolution provider. Lucid has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit https://www.jamsadr.com/file-an-eu-us-privacy-shield-or-safe-harbor-claim for more information or to file a complaint. The services of JAMS are provided at no cost to you. Under certain conditions specified by the Principles, you may also be able to invoke binding arbitration to resolve your complaint.
  • Lucid is subject to the investigatory and enforcement powers of the FTC. If Lucid shares EU Data with a third-party service provider that processes the data solely on our behalf, then Lucid will be liable for that third party’s processing of EU Data in violation of the Principles, unless Lucid can prove that it is not responsible for the event giving rise to the damage.
  • Under the Principles, you have the right to access your information that Lucid has collected from you. You may do so by contacting Lucid using the “Contact Us” information below or through our designated Privacy Shield dispute resolution provider. You have the right to limit the use and disclosure of your personal data by not providing said information to Lucid or by not using the Lucid Services. You may request that Lucid correct, amend, or delete your information where it is inaccurate, or has been processed in violation of the Principles, except where the burden or expense of providing access would be disproportionate to the risks to your privacy in the case in question, or where the rights of other persons would be violated.

Your Choices

  • You may terminate your use of Lucidchart at any time.
  • Editing or Deleting your Personal Information. If you have created an account, you may at any time review and/or update the contact information we have for you. Please note that even if you delete information from your account, or deactivate it, we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of your information for a certain period of time.
  • Promotional Communications. You may opt out of receiving promotional emails, text messages, or mail from Lucid by visiting your user settings page at www.lucidchart.com/users/settings and updating your communications preferences, by following the instructions in emails or text messages, or by sending an e-mail to privacy@lucidchart.com. If you opt out, we may still send you transactional or relationship messages, such as emails about your account or updates to our Services.
  • Cookies. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Removing or rejecting browser cookies does not necessarily affect third party flash cookies used in connection with our Services. For more information about how to delete or disable flash cookies please visit www.adobe.com/products/flashplayer/security. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.

Residents of the European Economic Area

  • If you are a resident of the European Economic Area (EEA), you have certain rights and protections under the law regarding the processing of your personal data.
  • Legal Basis for Processing. If you are a resident of the EEA, when we process your personal data we will only do so in the following situations:
    • We have your consent to do so. For example, we may ask your consent to send you marketing communications.
    • We need to use your personal data to perform our responsibilities under our contract with you (e.g., processing payments for and providing the Lucidchart Services you have requested).
    • We have a legitimate interest in processing your personal data. For example, we may process your personal data to communicate with you about changes to our Services, and to provide, secure, and improve our Services.
  • Data Subject Requests. If you are a resident of the EEA, you have the right to access personal data we hold about you and to ask that your personal data be corrected, erased, or transferred. You may also have the right to object to, or request that we restrict, certain processing. If you would like to exercise any of these rights, you may do so by following the instructions under “Your Choices.” Alternatively, you may contact us as indicated below.
  • Questions or Complaints. If you are a resident of the EEA and have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you reside. For contact details of your local Data Protection Authority, please see: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

Contact Us

  • If you have questions or concerns regarding this Policy, please contact Lucid at: privacy@lucidchart.com, contact Sales at (877) 210-9890, or at 10355 S Jordan Gateway, Suite 300, South Jordan, UT 84095.

 

Lucid for Education Privacy Policy

What is Lucid for Education?

Lucid Software Inc. (“Lucid,” “we,” or “us”) offers web- and app-based visual communication tools that students and teachers can use to create flowcharts, diagrams, and design materials that bring 21st century learning to the classroom. Our services include Lucidchart, a visual diagramming tool and Lucidpress, a design creation tool (collectively, “the Services”).

Teachers and students use these Services to learn core content in creative and collaborative ways that foster critical thinking while mastering the key literacies.  More than 5 million students, teachers, and administrators around the world are using Lucid for Education to learn and work together. We are committed to protecting the privacy and security of all our users, including students. We care deeply about empowering today’s students for the future of work and are humbled that millions already trust us to do that. We are committed to keeping the trust of schools and parents by protecting the personal information we collect and using that information only to provide our Services.

When does this Privacy Policy Apply?

This Lucid for Education Privacy Policy (“Policy”) applies to information we collect from students who are using our Services through a K-12 school (“Students”). This Policy does not apply to Lucid’s general services offered outside of a K-12 classroom setting.  To understand how Lucid collects, uses, and discloses personal information outside of its relationship with K-12 schools, please visit the Lucidchart Privacy Policy.

Schools that use our Services may integrate with other technology services such as Canvas or Google Classroom and allow students to access or share content through our Services. This Policy does not apply to features or other services Students may access through our Services.

What Information Do We Collect about Students?

Lucid will not collect, maintain, use or share Student personal information beyond that needed for authorized educational/school purposes, as authorized by the parent or Student or as otherwise allowed by this Policy.

Account Information

When a Student registers for the Services, Lucid collects (1) name, (2) email address, and (3) password. Registration information may be provided by the Student directly or by their school.

In limited situations, we may receive additional information, such as questions or comments via e-mail or live chat to Lucid customer support or responses to surveys. If a Student upgrades to a paid account or participates in an event (e.g. a webinar), we will collect additional information subject to our regular privacy policy above.

Information That We Collect Automatically from Students

When Students use the Services, we collect and maintain the files that Students create and/or upload using the Services (as well as previous versions of those files), including documents that Students create, sharing lists, and other data related to the Student’s account.

Similar to other web services, Lucid uses both persistent and session cookies, web beacons, and pixel tracking technology to record information such as:

  • account activity (e.g., storage usage, number of log-ins, actions taken);
  • data displayed or clicked on (e.g., UI elements, links, web pages viewed);
  • other log information (e.g., browser type, operating system, device name and model, IP address, date and time of access, length of time spent on our websites or in our Services, device identifier or a similar unique identifier, referrer URL, webpage that led a user to our website); and
  • user preferences while using the Services (e.g. language).

“Cookies” are alphanumeric identifiers that we transfer to a computer’s hard drive through a web browser for record-keeping purposes. We may use both session Cookies (which expire once a user closes a web browser) and persistent Cookies (which stay on a computer until a user deletes them). Some Cookies allow us to make it easier for a Student to navigate our website and Services, while others are used to enable a faster log-in process or to allow us to track a Student’s activities, but only as those activities relate to the Student’s use of our websites and Services.

How Do We Use Student Information?

We use the information we collect from Students to provide, administer, operate, and improve our Services, to support the internal operations of our websites and Services, monitor and evaluate trends, usage and activities in connection with our Services and better tailor our Services to our users’ needs. We also use the information we collect to respond to comments, questions and requests and provide customer service and for security reasons and to comply with legal obligations.

When information is provided by schools, we use that information to create an account and to track the number of users on the account for billing purposes. We may use aggregate or de-identified information about the use of the Services for research, analysis, and similar purposes, for example, to better understand how users access and use the Services; to improve the Services; or for other research and analytical purposes.

How Do We Share Student Information?

We are committed to not advertising or marketing to Students or others based on Students’ use of the Services. We will not disclose any personal information about Students to third parties, except as described below.  We never sell, rent, or trade any Student information.

Lucid may share Student personal information with third parties in the following circumstances:

  • We will disclose Students’ personal information: (1) to each Student’s individual teacher(s) and parent(s) or guardian(s); and (2) as directed by the Student’s school. In addition, if the Student has an account through a school, the Student’s teacher(s) and school administrators can see the Student’s profile and work. Teachers may share assignments with other students and with other teachers or administrators.
  • When we have a parent’s or guardian’s consent directly or through the school.
  • With third-party vendors, consultants and other service providers who are working on our behalf, who are hosting our data, and need access to information to carry out their work for us. These entities have agreed to maintain the confidentiality, security, and integrity of the personal information they obtain from us, and, will not use personal information for any purpose other than as described in this Policy.
  • With law enforcement, courts of competent jurisdiction, or others when we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to (1) satisfy any applicable law, regulation, legal process or enforceable governmental request, (2) enforce the applicable Terms of Service, including investigation of potential violations thereof, (3) detect, prevent, or otherwise address fraud, security or technical issues, or (4) protect against harm to the rights, property or safety of Lucid, its users or the public as required or permitted by law.
  • In connection with, or during negotiations of, any merger, sale of some or all of Lucid’s assets, bankruptcy or reorganization, financing or acquisition of all or a portion of Lucid’s business to another company; provided that a successor entity may only maintain Student personal information subject to these same commitments for the previously collected Student personal information.
  • When schools use integrations, like Google Classroom or Canvas, these integrations may receive information needed to provide their services. For example, an assignment created in Lucidchart or Lucidpress may be submitted through Canvas. In this case, Canvas would receive the assignment and submission data.
  • Schools may enable Students to share, publish, or collaborate with other services using our Services. When Schools enable these features, other users will receive access to information Students share or collaborate on and third parties may receive information that Students publish, all of which may be redistributed by those users or third parties.

What Controls Do We Make Available?

Schools control the personal information shared with us, and are responsible for ensuring that they have any parental consent necessary to share personal information with us and to allow us to collect personal information from Students.

Account Information

Parents or legal guardians of a Student who is using the Services through their schools can contact the appropriate official at the Student’s school to access, review, correct, or delete their Student’s personal information or accounts. If the school determines that the request should be implemented, the school may either make the change themselves or submit the request to us.

If your child has registered for a Lucid account independent of a school (or if you set up an account for your child independent of a school), you may update, correct, or delete your child’s profile information or preferences at any time by logging into your child’s account and accessing the account setting page or by emailing privacy@lucidchart.com.  You may ask us to delete the account by emailing us at privacy@lucidchart.com. When you exercise these rights, we may ask you to provide proof of legal guardianship.

If you are not sure what type of account your child has, please contact us at privacy@lucidchart.com and we will assist you.

Please note that even if you delete information from your account or deactivate it, we may retain certain information as required by law. We may also retain cached or archived copies of your Student’s information or content for a certain period of time.

Disabling Cookies

Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our websites who disable cookies will still be able to browse certain areas of the website, but some features may not be available to you.

Contact Us

If you have questions or concerns regarding this Policy, please contact Lucid at: 

  • Email us at: privacy@lucidchart.com;
  • Call us at: 844-465-8243 and ask for the Lucid for Education team; or
  • Write us at: 10355 S Jordan Gateway, Suite 300, South Jordan, UT 84095, Attn: Legal Notice.