Privacy Policy

Account information. When you register, we collect your name, email address, organisation name, and authentication credentials. If you authenticate via a third-party provider (e.g., Google, GitHub), we receive the profile information that provider shares with us.

Customer Data. This is the data you upload or generate within LTprophecy — revenue datasets, forecast configurations, model parameters, knowledge graph definitions, and research session outputs. You own this data entirely.

Usage data. We collect information about how you interact with the platform: pages visited, features used, API calls made, and session duration. This helps us improve the product.

Technical data. We automatically receive your IP address, browser type, operating system, and device information. We also collect error logs and performance metrics.

Communications. If you contact us via email or our contact form, we retain those communications to help resolve your inquiry.

We use the information we collect to:

• Provide, operate, and improve the LTprophecy platform
• Process your account registration and authenticate your identity
• Process payments and manage your subscription
• Send you transactional emails (account updates, billing, security alerts)
• Respond to your support requests and inquiries
• Monitor platform security and detect fraudulent activity
• Comply with legal obligations
• Send you product updates and announcements (with your consent, and with an easy opt-out)

We do not use your Customer Data to train models that serve other organisations. Your revenue data is never shared with or exposed to other LTprophecy customers.

LTprophecy is architected with multi-tenant isolation as a core principle, not an afterthought. Every organisation's data is isolated using Postgres row-level security (RLS). Database queries automatically filter to your organisation's data — other tenants cannot access your data, even through bugs in application logic.

Data at rest is encrypted with AES-256. Data in transit is encrypted with TLS 1.2 or higher. API keys are hashed with SHA-256 and never stored in plaintext.

Authentication is handled by Clerk, with support for MFA, SSO, and SAML for Enterprise customers.

We conduct regular security reviews. If you believe you have discovered a security vulnerability, please report it responsibly to [email protected].

We do not sell your personal information or Customer Data. We share data with third parties only in the following circumstances:

• Service providers. We use third-party providers for infrastructure (cloud hosting), payments (Stripe/Razorpay), authentication (Clerk), and monitoring. These providers access data only as necessary to perform services on our behalf and are contractually bound to protect it.
• Legal requirements. We may disclose information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, safety, or property of CogniRegal Lab, our users, or the public.
• Business transfers. If CogniRegal Lab is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you before any such transfer and your data will remain subject to this Privacy Policy.

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 90 days, subject to any legal obligations to retain it longer.

Customer Data (uploaded datasets, models, forecasts) is retained for the duration of your subscription plus 90 days following termination. You may request early deletion by contacting [email protected].

Backup copies may persist for up to 30 days after deletion to protect against accidental loss.

Depending on your location, you may have the following rights regarding your personal information:

• Right to access: request a copy of the personal information we hold about you
• Right to correction: request that we correct inaccurate or incomplete information
• Right to deletion: request that we delete your personal information
• Right to portability: request your data in a machine-readable format
• Right to object: object to the processing of your information for certain purposes
• Right to withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We use essential cookies to keep you signed in and remember your preferences. We use analytics cookies to understand how the platform is used so we can improve it. You can read more in our Cookie Policy.

LTprophecy is designed for use by businesses and professionals. We do not knowingly collect personal information from children under 18. If we become aware that a child has provided us with personal information, we will delete it promptly.

Our servers are primarily located in India. If you access LTprophecy from outside India, your information will be transferred to and processed in India. By using the service, you consent to this transfer.

Where we transfer data internationally through third-party processors, we ensure appropriate safeguards are in place in accordance with applicable law.

We may update this Privacy Policy from time to time. When we do, we will update the “Last revised” date above and notify you by email if the changes are material. Your continued use of LTprophecy after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your data, please contact our Data Privacy team: