Privacy Policy & Personal Data Processing Notice

Effective Date: November 12, 2026 · Permanent URL: https://lucera2.com/privacy

This Privacy Policy (hereinafter referred to as the Policy) governs the collection, processing, storage, protection, and disclosure of personal data belonging to individuals (hereinafter referred to as Users) who visit https://lucera2.com and associated project infrastructure (including the customer repository https://redmine.lucera2.com and community forum https://forum.lucera2.com), place orders, or contact technical support.

By accessing the Website, placing an order, or contacting support, the User confirms full and unconditional acceptance of this Policy. If the User disagrees with any provision hereof, the User must discontinue using the Service.

1. Definitions and General Scope

For the purposes of this Policy, the following terms apply in accordance with applicable data protection laws (including GDPR and CCPA principles where applicable):

• Personal Data - any information relating directly or indirectly to an identified or identifiable natural person (data subject), including email address, account username, server or network IP address, and information voluntarily submitted in support inquiries.
• Processing of Personal Data - any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, use, transmission strictly for contract performance, anonymization, restriction, erasure, or destruction.
• Confidentiality of Personal Data - the mandatory obligation of the Operator and authorized personnel not to disclose or distribute personal data without the data subject's consent or another lawful basis, and to ensure appropriate technical and organizational safeguards.
• Operator (Controller / Administration) - the Lucera2 project administration and development team (https://lucera2.com), determining the purposes and means of processing personal data in order to grant authorized access to project services and software builds.
• User - any natural person visiting the Website and/or purchasing digital products and services offered on the Service.
• Service (Website) - the web platform located at https://lucera2.com and its connected subdomains (redmine.lucera2.com, forum.lucera2.com).
• Destruction of Personal Data - actions making it permanently impossible to restore the content of personal data in the Operator's information systems.

2. Rights and Obligations of the Operator and Users

2.1. The Operator has the right to:

• 2.1.1. Receive accurate contact and technical data from the User required to perform the User Agreement (Public Offer), activate repository access, and provide technical support;
• 2.1.2. Continue processing certain transaction records after consent withdrawal where required by applicable tax, accounting, or anti-fraud laws;
• 2.1.3. Independently establish technical and organizational security controls necessary to protect personal data against unauthorized access.

2.2. The Operator is obligated to:

• 2.2.1. Process personal data lawfully, fairly, and strictly within the scope of stated purposes;
• 2.2.2. Respond to verified User requests regarding access, rectification, or deletion of personal data within statutory timeframes;
• 2.2.3. Maintain strict confidentiality of personal data and implement industry-standard security safeguards;
• 2.2.4. Cease processing and erase or anonymize personal data once processing purposes are fulfilled or upon a valid erasure request.

2.3. Users (Data Subjects) have the right to:

• 2.3.1. Request confirmation and details regarding how their personal data is processed by the Operator;
• 2.3.2. Request correction (rectification), restriction, or deletion (erasure) of inaccurate, outdated, or unnecessary personal data;
• 2.3.3. Withdraw consent to data processing or opt out of optional release notifications at any time by contacting the Operator;
• 2.3.4. Opt out of any sale of personal information (note: the Operator never sells personal data to third parties under any circumstances).

2.4. Users are obligated to:

• 2.4.1. Provide valid and accurate information (in particular, a working email address for delivery of activation instructions and an accurate external server IP address for license key binding);
• 2.4.2. Promptly notify support when updating contact details or changing the bound server IP address.

3. Principles and Lawful Basis of Processing

• 3.1. Personal data is processed lawfully, transparently, and solely for specific, explicit, and legitimate purposes.
• 3.2. Incompatible databases containing personal data processed for unrelated purposes are never merged.
• 3.3. Data Minimization: Only strictly necessary data required for order fulfillment, repository authentication, license binding, and support is collected.
• 3.4. Storage Limitation: Personal data is retained in identifiable form no longer than required for the purposes for which it was collected, unless a longer retention period is mandated by law.
• 3.5. Lawful Basis: Processing is carried out on the basis of the User's consent and performance of a contract (Terms of Service / Public Offer) initiated by the User.

4. Categories of Data We Collect

• 4.1. Account & Contact Information:
  • email address entered at checkout (for automatic delivery of activation instructions) and upon registration at redmine.lucera2.com or forum.lucera2.com;
  • account login and cryptographic password hash on the Repository and Forum portals;
  • messenger handle (Telegram, Discord, Teams, Facebook) and message history solely when the User contacts support directly.
• 4.2. Technical & Network Data:
  • external IP address of the User's dedicated server for binding and free re-binding of the server activation key;
  • client IP address and HTTP Accept-Language header for automatic interface localization and anti-abuse rate limiting on payment endpoints.
• 4.3. Order & Transaction Metadata:
  • internal Order ID, payment gateway transaction ID, payment amount, currency, timestamp, and payment status.

5. Purposes of Processing

• 5.1. Executing the Terms of Service (Public Offer) and verifying payment completion;
• 5.2. Automatically sending post-payment onboarding instructions and Order ID confirmations via email;
• 5.3. Granting and managing customer access to the Repository (redmine.lucera2.com), updates, and bug tracker;
• 5.4. Issuing, validating, and re-binding the server activation key to the User's server IP address;
• 5.5. Providing technical support, handling refund inquiries, and preventing DDoS attacks or fraudulent requests.

6. Cookie Policy

• 6.1. On lucera2.com, we use a single strictly necessary functional cookie named lang (configured with HttpOnly, SameSite=Lax, valid up to 365 days) solely to remember your preferred interface language (EN, RU, ES, PT). Temporary browser sessionStorage is also used for smooth section scrolling and polling payment status on the checkout return page.
• 6.2. We do not deploy third-party advertising trackers, behavioral profiling pixels, or cross-site marketing cookies on this Website.
• 6.3. Users may disable or clear cookies at any time via their browser settings.

7. Data Security, Retention, and Third-Party Processors

• 7.1. Security Measures: All traffic is encrypted via HTTPS/TLS; temporary server-side order files are protected with HMAC-SHA256 filenames, blocked from public HTTP access, and verified via cryptographic webhook signatures.
• 7.2. Retention Periods:
  • rate-limit counters expire automatically within 1 hour; temporary checkout cache files expire within 7 days (and the buyer's email in the local order cache is cleared immediately once the instruction email is dispatched);
  • Repository accounts (redmine.lucera2.com) and IP license bindings remain active for the duration of product use or until the User requests account deletion;
  • accounting and payment transaction identifiers are retained as required by applicable financial regulations.
• 7.3. Third-Party Sharing: We never sell, rent, or trade personal data. Minimal technical data is shared strictly to fulfill your order with:
  • accredited payment processors and acquiring banks to process payments;
  • transactional email infrastructure (Brevo SMTP API) solely to deliver your post-purchase activation email.

8. Age Restrictions

8.1. The Service is intended for server administrators and software developers. It is not directed at children under 14 years of age, and paid orders may only be placed by individuals of legal age (18+) or minors aged 14–18 with explicit authorization from a parent or legal guardian where permitted by law.

9. Data Subject Inquiries and Dispute Resolution

• 9.1. Users may submit requests to access, update, or erase their personal data via the official contact channels listed in Section 10. To prevent unauthorized account tampering, the Operator may verify ownership of the associated email address or Order ID.
• 9.2. Formal data protection inquiries are reviewed and answered within 30 calendar days (most requests are resolved within 24–72 hours).

10. Changes and Contact Information

• 10.1. The Operator reserves the right to update this Policy. The current version is always available at https://lucera2.com/privacy.
• 10.2. Official contact channels for privacy and personal data matters:
  • Email: admin@lucera2.com
  • Telegram Support: https://t.me/lucera2 (@lucera2)
  • Discord: https://discord.gg/aMWqnrNet8
  • Customer Portal & Bug Tracker: https://redmine.lucera2.com