Privacy Policy

1. Introduction

LCA Desk (“we,” “us,” or “our”) is operated by Stabroek Advisory LLC, a company registered in Houston, Texas, USA. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website (lcadesk.com) and platform (app.lcadesk.com).

By using LCA Desk, you consent to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, company name, role, and phone number when you register.
• Compliance data: Employment, procurement, and capacity development data you enter into the platform for LCA report generation.
• Payment information: Billing details processed by our payment provider (Stripe). We do not store credit card numbers on our servers.
• Communications: Emails, contact form submissions, and support requests.
• Email subscriptions: Email address and subscription preferences when you sign up for filing deadline reminders or opportunity alerts.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and interactions within the platform.
• Device information: Browser type, operating system, screen resolution, and IP address.
• Cookies: We use essential cookies for authentication and session management, and analytics cookies (Google Analytics) to understand site usage. See Section 7.

3. How We Use Your Information

• Provide, maintain, and improve LCA Desk services, including generating compliance reports.
• Process transactions and send billing-related communications.
• Send filing deadline reminders, opportunity alerts, and product updates you have opted into.
• Respond to your support requests and inquiries.
• Analyze usage patterns to improve the platform experience.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties.

4. AI Data Processing

LCA Desk uses AI features powered by Anthropic's Claude API to assist with report generation, compliance gap detection, and document analysis. When you use AI features:

• Your data is sent to Anthropic's API for real-time processing only. It is not stored by Anthropic after the request completes.
• Your data is not used to train Anthropic's AI models.
• AI-generated outputs (such as narrative report drafts) are stored on our servers as part of your account data.
• You retain full ownership of all data and AI-generated content.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit: All data is transmitted over TLS 1.3.
• Encryption at rest: Data stored on our servers is encrypted using AES-256.
• Access controls: Role-based access controls limit data access to authorized personnel only.
• Infrastructure: Hosted on SOC 2-compliant cloud infrastructure with automated backups.
• Monitoring: We monitor for unauthorized access attempts and security anomalies.

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Cancelled accounts: Upon account cancellation, we retain your data for 90 days to allow for reactivation. After 90 days, your data is permanently deleted unless required by law.
• Email subscriptions: We retain your email address until you unsubscribe. You can unsubscribe at any time via the link in any email.
• Legal requirements: We may retain certain data longer if required to comply with legal, tax, or regulatory obligations.

7. Cookies

We use the following types of cookies:

You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

8. Third-Party Services

We share data with the following third-party services, strictly for operational purposes:

• Anthropic (Claude API): AI processing. Data processed in real-time, not stored.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Resend: Transactional email delivery (filing reminders, alerts).
• Google Analytics: Anonymous site usage analytics.
• Vercel: Website and application hosting.
• Neon: Database hosting (PostgreSQL).

We do not share your compliance data (employment, procurement, capacity development figures) with any third party except Anthropic for AI processing, as described in Section 4.

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data.
• Export: Request an export of your data in a standard machine-readable format.
• Opt out: Unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us.

To exercise any of these rights, email privacy@lcadesk.com. We will respond within 30 days.

10. International Data Transfers

LCA Desk is operated from the United States. If you are accessing our services from outside the US (including Guyana, Nigeria, or other jurisdictions), your data may be transferred to and processed in the United States. By using our services, you consent to this transfer. We ensure that appropriate safeguards are in place to protect your data in accordance with this policy.

11. Children's Privacy

LCA Desk is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of LCA Desk after changes constitutes acceptance of the revised policy.

13. Governing Law

This Privacy Policy is governed by the laws of the State of Texas, United States, without regard to conflict of law provisions.

14. Contact

For privacy-related inquiries: