--- title: "Privacy Policy" description: "How Lusor collects, uses and protects your information." canonical: "https://lusor.ai/privacy" updated: "2026-11-02" --- # Privacy Policy Last updated November 2, 2026 ## Introduction This policy explains what Lusor, Inc. ("Lusor", "we", "us") collects when you use Lusor, how we use it, who we share it with, and what you can ask us to do about it. It applies to lusor.ai, the Lusor web app, the Lusor Mac app, the Lusor API, and the Lusor Phone, Internet and connector features. It takes effect on 1 October 2026. Lusor is an AI agent that operates a real phone for you. That means the agent sees what is on the phone screen. Please read the sections on AI processing and on recordings and screenshots: they matter more here than in most products. ## Who we are Lusor is operated by Lusor, Inc. (a Delaware corporation), 295 Main Street, Room 1070, Buffalo, NY 14203, USA. For privacy questions or requests, write to privacy@lusor.ai. For the personal data you put through the agent, such as the content of your phone, we act for you. For your account, billing and usage records, we decide how the data is used. ## Information we collect We collect the following, by category. - Account and identity: your email address, name, profile picture, workspace (organisation) and role. Sign-in is handled by our authentication provider. We keep an opaque user ID and your workspace name in our own database, and fetch your email, name and picture from the authentication provider when we need to show them. - Workspace and access: workspace members, their roles, and the API keys you create (name, who created it, when it was created or revoked). The key secret is held by our API key management provider. - Billing: your plan, subscription status, credit balance and invoices. Card and billing details are entered on a page run by our payment processor and never reach our systems. We pass your email and name to the processor to create your customer record. - Usage: credit ledger entries, AI token counts per session, agent runtime, recording time, and Lusor Internet traffic volume in bytes. - Tasks and agent activity: the instructions you give the agent, its outputs and errors, the messages and events of each session, and the names you give to sessions, agents, skills and datasets. - Phone content: screenshots, screen recordings and descriptions of what is on the phone screen (the on-screen text and controls), captured while an agent runs on your phone. See "Phone recordings and screenshots" below. - Devices: for a phone you pair, its platform, the device name, a device ID and a device credential (we store only a hash). For a Lusor cloud phone, the identifiers needed to run it. - Saved logins and secrets: logins and notes you save in your workspace vault are stored encrypted. The vault does not accept payment card details, so we never store card numbers or security codes there. You decide what you type into a prompt for the agent. We do not ask for passwords or other sensitive data there, so save logins in the vault instead. Our logs record that a secret was created, changed or used, never its value. - Connectors: for each connected service, the account name (for example your GitHub username), which tools the agent may use, and a log of each call (tool name, time, size and outcome, with no content). The sign-in tokens for connected services are held by our service providers, not by the agent. - Phone numbers and messages: if you use a Lusor phone number or inbox, the messages that arrive there (sender and full text). - Technical data: IP address, browser or app type and request details, in server logs of our hosting providers. - Messages to us: what you send to privacy@lusor.ai. Usage data collected automatically: when you use our site and app we collect browser type and version, operating system, device information, IP address and the approximate location derived from it, pages viewed, interactions with the site and app, recordings of how you use the site and app (session replay), error reports, and the date and time of access. We use PostHog, Inc. (US) as our processor for product analytics, session replay and error tracking. Task data: when you use the service to run tasks on a phone, we process prompts and instructions, device and app configuration, agent steps and actions, tool inputs and outputs, screenshots and recordings of the phone during a run, task results, runtime logs and error data, and usage and analytics data. Parts of this, such as tool inputs and outputs and screenshots, are also sent to PostHog as analytics data. We use no advertising trackers. ## How we use information - To run the service: sign you in, run agents on your phone, show your session history and replays, and provide connectors, phone numbers and Lusor Internet. - To bill you: charge your plan, grant and debit credits, and keep financial records. - To keep Lusor safe: detect abuse, enforce the acceptable use rules in our Terms, debug failures, and protect accounts. - To support you: answer your requests. - To meet legal obligations. We do not sell your personal data. We do not use it for advertising. We do not use the content of your phone or tasks to train our own AI models. ## AI processing To do a task, the agent sends information to an AI model provider. This applies to the model that carries out the task (the agent), the model that checks whether it was done (the verifier), and smaller models that screen requests and steps or pick an obvious next tap so the agent can move faster. What reaches the provider is: - your task prompts and the agent's instructions; - the conversation history of the session, including the agent's own earlier steps; - screenshots of the phone screen; - the text and structure of the phone screen (the on-screen text, labels and controls); - the results of tools the agent reads, such as the output of a connected service. We send this to a third-party AI model provider, which runs the model that decides each next step and returns the result to us. This data may be processed outside your country, including in China. The AI model provider may keep this data and may use it in de-identified form to improve its services. Anything visible on the phone screen can reach the model provider. Do not ask the agent to open things you are not willing to have processed this way, and do not use Lusor on a phone showing other people's confidential information unless you have the right to do so. Agent output can be wrong. See the Disclaimers in our Terms. ## Phone recordings and screenshots While an agent runs, Lusor captures screenshots and a screen recording of the phone, and a record of the on-screen text and controls. For your own iPhone, the Lusor Mac app relays the screen from the phone to our servers over your Mac. For a Lusor cloud phone, the capture happens on the cloud phone. These are stored in our cloud storage so you can replay a session. They show whatever was on the screen, which may include other people's messages, names, account pages and your own sensitive information. After you type a credential for the agent, we stop taking screenshots until the credential is no longer on screen. Live view uses a real-time relay provider to carry the video between the phone and your browser. Only you and the members of your workspace (by role) can see a session's recordings and screenshots in the product. Our staff do not browse them; access is limited to what is needed to run, secure and fix the service. ## Lusor Internet Lusor Internet routes the network traffic of agent phones through our gateway and an exit network operated by a residential network provider. For billing, we record how many bytes each workspace used, with a time stamp. In our own database we do not store the addresses or sites visited, and the exit provider is not given your workspace identity. Our gateway keeps operational logs: the network address of each cloud phone connection to the gateway, and a running byte count per workspace. It does not log the web addresses, pages or content your phone visits. When a connection to a site fails, the gateway logs the site's host name and port with the error, without your workspace. During short diagnostic periods that we switch on deliberately, it logs, for each connection, the workspace, the phone, the site's host name and port, and the amount of data. These logs stay on our gateway server, which only our operators can read, and are overwritten as space runs out, usually within about four weeks. The residential network provider receives the traffic itself (encrypted where the site uses HTTPS), the site it connects to, the country you chose and a random session code, but not your workspace or your own network address. ## How we share information We share information with the service providers listed below so they can do their jobs, with the people in your workspace, with a connected service when you ask the agent to use it, and where the law requires. If Lusor is sold or merged, your information may transfer to the new owner under this policy. We do not sell personal data. Where an agent acts on a website or app on your phone, that site or app receives what the agent does there, as if you did it. ## Service providers and subprocessors We name the providers below, except the cloud phone and AI model providers and two network suppliers, which we describe by category. Each receives only what it needs for its role. - WorkOS (authentication, identity and secret storage): your email, name, workspace and role; connector sign-in tokens; sign-in emails; API keys and their usage; encrypted vault entries and secrets you give the agent during a session. - Stripe (payments): your billing details, payment method and invoices. - PlanetScale (database hosting): our application data. - Cloudflare (web hosting, storage, content delivery and network): requests to lusor.ai and the web app, screenshots, recordings, backups, app downloads, network tunnels and the live view relay. - Latitude.sh (dedicated server hosting): the servers that run Lusor, including session transcripts and logs. - Vercel (standby web hosting): requests to a few lusor.ai addresses that link our apps, and a standby copy of lusor.ai and the web app. - PostHog, Inc. (US): product analytics, session replay and error tracking. - Composio (connector tool execution): carries out the tool requests the agent makes in apps you connect. - AI model provider(s): the data described under AI processing. - Cloud device infrastructure provider: the contents and control of Lusor cloud phones. - Residential network provider: network traffic routed by Lusor Internet. - SMS number provider: text messages sent to Lusor phone numbers. - Services you connect, such as GitHub: whatever the agent reads or writes there for you. We will update this list when we add or change a provider that handles your data. ## Data retention Your session history (messages, events, screenshots, and the task text and output) is visible to you for the history window of your plan: 7 days on the Free plan, and without a set limit on paid plans. Screen recordings are available for replay for 7 days on the Free plan and 30 days on paid plans. We then delete this data automatically: once a session's history is older than your plan's history window plus a 7-day grace period, its messages, task text and output, screenshots and screen-state records are deleted from our database and cloud storage. Screen recordings are deleted 30 days plus the 7-day grace period after they are made, on every plan. The deletion job runs every 5 minutes, so deletion follows shortly after the period ends. Copies in backups are removed as the backups expire. Session transcripts kept on our own servers are not covered by that automatic deletion; we delete them when you ask (see Your rights and choices). Some records are kept as long as your workspace exists because we need them to run and bill the service: your account and workspace records, billing and credit records, Lusor Internet byte counts, and the connector call log. Credits records are financial records and are not deleted on request while we must keep them. Text messages to a Lusor number are kept until the number is removed. Server logs are kept for a short time, up to about 14 days for web server access logs, and system logs for longer, bounded by disk size. Analytics data held by our analytics provider is deleted once it is no longer needed for the purpose it was collected for, subject to legal retention requirements. Our providers keep data under their own rules. Backups of our workflow state are taken hourly and a small number are retained. ## Security We use encryption in transit, encrypted storage for saved logins and secrets, hashed device credentials and API keys held by a dedicated provider, workspace-level access control, and access logs for vault use. Connector sign-in tokens are held by a separate provider and not by the agent. No system is perfectly secure, and we cannot promise it. If you think your account is compromised, write to privacy@lusor.ai. ## International data transfers We run our servers in the United States, and our providers process data in the United States and other countries. AI processing may take place outside your country, including in China. If you use Lusor from outside the United States, your information is transferred to these countries. Where the law of the European Economic Area, the United Kingdom or Switzerland applies to your information, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum or Swiss equivalents) with our providers, or another transfer mechanism the law allows, and we can give you a copy of the relevant safeguards on request to privacy@lusor.ai. ## Your rights and choices You can ask us to give you a copy of your information, correct it, or delete it. At present there is no way to delete your account or data inside the app. To make a request, email privacy@lusor.ai from the email address on your account. We handle requests within 30 days. You can also delete individual connections, API keys, devices and saved logins yourself in the product, and revoke connector access at the connected service. Depending on where you live, you may have more rights, including to object to or limit some processing and to complain to your data protection authority. We will respond to the requests the law requires us to. We keep some records we are required to keep, such as billing records. ## Cookies and similar technologies We use cookies needed to run the service, such as the sign-in cookie set by our authentication provider. We and our providers may use similar technologies to analyze usage. We use no advertising cookies. Our hosting providers see your IP address and request details in their server logs. ## Children's privacy Lusor is not for anyone under 18. We do not knowingly collect information from them. If you think a child has given us information, write to privacy@lusor.ai and we will remove it. ## Changes to this policy We will post changes here and update the date above. If a change is material, we will tell you by email or in the product before it takes effect. ## Contact us Lusor, Inc. (a Delaware corporation), 295 Main Street, Room 1070, Buffalo, NY 14203, USA. Email: privacy@lusor.ai.