Legal
Privacy Policy
Effective date: October 7, 2026
Legal entity: Stackzen Technology Group. The Service is currently offered only to Organizations located in the United States (see Section 9).
1. Introduction
Lampkey.ai ("Lampkey," "we," "us," or "our"), operated by Stackzen Technology Group, provides an AI-powered project management platform that ingests project documents, extracts and reconciles project data, and provides AI-assisted analysis and reporting to project managers and their organizations (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information when you or your organization use the Service, including the public website at lampkey.ai and the Lampkey.ai application. It does not apply to third-party websites or services linked from within the Service. The Service is currently offered only to Organizations located in the United States. If you are accessing the Service on behalf of an organization (an "Organization"), this Policy applies to your Organization's use of the Service, and your Organization is responsible for obtaining any consents needed from its own personnel, clients, and vendors before uploading documents or data containing their information.
2. Information We Collect
Account and Registration Information: name, work email, password (stored as an irreversibly hashed value, never in plain text), organization name, and role. Documents and Content You Upload: the core of the Service is processing documents you or others in your Organization upload — statements of work, project plans, budgets, schedules, timesheets, risk logs, and related materials ("Uploaded Content"), which may include business, financial, personnel, vendor, and client information; you and your Organization are responsible for your right to upload it. AI Assistant Conversations: questions you ask and responses generated are stored as part of your project record. Billing and Payment Information: if your Organization subscribes to a paid plan, we collect the subscriber's name, work email, organization name, and selected plan; checkout and full card details are collected and processed directly by Stripe, Inc. — we do not receive or store your full card number, only limited billing status (subscription status, plan tier, payment success/failure). Usage and Log Data: IP address, browser type, device information, pages visited, actions taken, and timestamps, collected automatically. Cookies: necessary cookies to keep you signed in and operate the Service securely (see Section 10). Communications: if you contact us or the Service sends you notification emails, we retain a record of that correspondence and your preferences.
3. How We Use Information
To provide, operate, and maintain the Service, including processing, extracting, and reconciling data from Uploaded Content; power the AI Assistant and other AI-based features; process subscription payments and manage billing status, including the dunning process in our Terms of Service if a payment fails; send transactional and service emails consistent with your notification preferences; maintain security, including detecting and preventing fraud, abuse, and unauthorized access; provide customer support; improve and develop the Service; and comply with legal obligations. We do not sell your personal information or your Organization's Uploaded Content.
4. How AI Processing Works
To extract structured data from Uploaded Content and power the AI Assistant, the Service sends relevant portions of your Uploaded Content and your questions to one or more third-party AI service providers. This is necessary for the Service to function — it is how documents become the structured project data, citations, and answers you see in the app.
5. How We Share Information
Within Your Organization: data is visible to other members according to the role-based permissions your administrators configure. Payment Processing: we share billing-relevant account information with Stripe, Inc. to process subscription payments; Stripe collects your full payment details directly under its own privacy policy. Other Service Providers: vendors who help operate the Service (cloud hosting/storage, email delivery, AI processing), under obligations to use it only to provide services to us. Legal Requirements: disclosure where required by law or to protect rights, property, or safety. Business Transfers: information may transfer as part of a merger, acquisition, financing, or asset sale, subject to this Policy or one at least as protective. Each Organization's data is logically isolated; we do not share Uploaded Content across Organizations.
6. Data Security
We use technical and organizational measures including encrypted transmission (HTTPS/TLS), hashed password storage, role-based access controls scoped to your Organization, and audit logging of account and administrative activity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention and Deletion
We retain information for as long as your account remains active or as needed to provide the Service, including to administer billing and the dunning process in our Terms of Service. When you or your Organization deletes a document or account, we remove the associated data from the active application and database. Certain records may be retained afterward for legal, security, or operational reasons (backups, audit logs, billing records), then deleted or anonymized in the ordinary course.
8. Your Rights and Choices
Depending on where you are located, you may have rights to access, correct, or request deletion of personal information we hold about you, or to object to or restrict certain processing. To exercise these rights, contact us using the information in Section 13. If you are located in the European Economic Area, United Kingdom, or a U.S. state with its own privacy law (such as California), you may have additional rights under applicable law, and we will honor requests to the extent required by that law. Because Uploaded Content is controlled by your Organization, requests concerning information in Uploaded Content should generally be directed to your Organization first. You can manage your email notification preferences at any time in Account Settings.
9. International Users
The Service is currently offered only to Organizations located in the United States, and the Service is operated from and our servers are located in the United States. We do not currently market or sell the Service outside the United States.
10. Cookies
We use cookies that are necessary to operate the Service, primarily to keep you securely signed in (session cookies). We do not currently use advertising or third-party tracking cookies within the application itself.
11. Children's Privacy
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice — such as by posting a notice within the Service or sending an email — before the changes take effect. The effective date at the top reflects the most recent revision.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
Stackzen Technology Group
5109 Lakeshore Ct, #1014, Indianapolis, IN 46250, USA
support@lampkey.ai
Questions?
For questions about this Privacy Policy, contact support@lampkey.ai.