Privacy Policy

Last updated: October 21, 2026

Lakehouse Digital LLC ("Company," "we," "us," "our") operates Prioritas ("the Service"). This Privacy Policy explains how we collect, use, share, and protect your information.

By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.

1. Who We Are

Lakehouse Digital LLC is a Georgia, USA limited liability company. Prioritas is a priority-matrix and ideation platform offered at prioritas.ai.

Contact: support@prioritas.ai

2. Information We Collect

We collect information in three ways: what you provide, what the Service collects automatically, and what we receive from third parties.

2.1 Information You Provide

• Account Information: email address, password (stored as a hash, never in plain text), display name, and optional profile details.
• User Content: projects, ideas, notes, roadmaps, files, AI prompts, and any other content you submit or generate through the Service.
• Brainstorm Participation: if you join a brainstorm session from a link or QR code, we store the name you enter (or a generated guest name if you leave it blank), automatically a hashed identifier for your device made from your browser's user agent, screen size, platform and language, the ideas you submit (text, optional details and priority), when you joined and added each idea, and when you were last active. If you are signed in when you join, your participation is linked to your account.
• Payment Information: when you subscribe to a paid plan, Stripe collects and processes your payment details (card number, billing address, etc.). We do not receive or store full payment card numbers or other card details; we store only Stripe's customer and subscription references for your account, with your plan, its status and its billing period, and, if a payment fails, the invoice reference and amount.
• Communications: support requests, feedback, survey responses, and other correspondence you send us.

2.2 Information Collected Automatically

• Usage Data: pages viewed, counted without cookies by Vercel Web Analytics; how many AI actions of each type you use each month; and, for idea generation requests, the AI model used, the amount of text processed (tokens), its cost, and the response time.
• Device and Connection Data: IP address, browser type and version, operating system, device identifiers, referring URLs, and timestamps.
• Cookies and Similar Technologies: we use cookies to keep you signed in and to protect your requests, and your browser's local storage to remember app state on your device. See Section 7 for details.
• Log Data: errors, performance metrics, and diagnostic information collected by our hosting provider.

2.3 Information From Third Parties

• Payment Processor: Stripe shares billing status and transaction information.
• Analytics: Vercel Web Analytics provides us with aggregated page-view statistics.

3. How We Use Your Information

We use your information to:

• Provide the Service: create and maintain your account, process your User Content, deliver features, and respond to your requests.
• Process AI Features: send User Content to third-party AI providers (Anthropic, OpenAI, Google), through the Vercel AI Gateway, to generate ideas, analysis, and insights at your request. See Section 4.
• Process Payments: bill your subscription, manage renewals and cancellations, send receipts, and prevent fraud (via Stripe).
• Communicate With You: send transactional emails (account confirmations, password resets, payment receipts, billing notices), service announcements, and — with your consent where required — marketing communications.
• Improve the Service: analyze usage patterns, identify bugs, test new features, and enhance performance and security.
• Enforce Our Terms: investigate violations, prevent abuse, and protect the rights, property, or safety of users and the Company.
• Comply With Legal Obligations: respond to lawful requests, comply with applicable laws, and cooperate with law enforcement where required.

We do not sell your personal information to third parties.

4. Third-Party Service Providers

We share information with the following third-party service providers as necessary to operate the Service. Each provider processes data according to its own privacy practices:

We may add or change providers as the Service evolves. Material changes will be reflected in an updated version of this policy.

4.1 Important Note on AI Processing

When you use AI features of the Service, the content of your requests — including prompts, project context, and User Content — is transmitted to Anthropic, OpenAI, or Google for processing. These requests pass through the Vercel AI Gateway, which routes each one to the provider, except audio and video transcription, which is sent directly to OpenAI. These providers may retain content according to their own policies. We do not control their retention or use of data.

Do not submit content to AI features that you are not authorized to share, that contains confidential third-party information, or that you expect to remain private to your account only. If you have concerns about AI processing, do not use AI features.

You can review the AI providers' policies:

• OpenAI Privacy:openai.com/privacy
• Anthropic Privacy:anthropic.com/legal/privacy
• Google Privacy:policies.google.com/privacy
• Vercel Privacy:vercel.com/legal/privacy-policy

5. How We Share Information

We share information:

• With Service Providers (listed in Section 4) as necessary to operate the Service.
• With Your Collaborators: if you invite team members to a project, your User Content within that project is visible to them according to the permissions you set.
• With Your Consent: when you direct us to share information with a third party.
• For Legal Reasons: to comply with laws, regulations, legal process, or governmental requests; to enforce our Terms; to detect or prevent fraud, security issues, or technical problems; or to protect the rights, property, or safety of Lakehouse Digital LLC, our users, or others.
• In Business Transfers: if we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We do not share your information for third-party advertising or sell your personal information.

6. Data Retention

We retain your information as long as your account is active or as needed to provide the Service.

• After Account Deletion: when we delete your account at your request, we remove your account data and User Content within 30 days of confirming the request, except as described below.
• Legal and Financial Records: payment records, tax information, and similar records are retained longer where required by law (typically 7 years for US tax and accounting purposes).
• Backups: residual copies may remain in backups, which are retained for a limited period and then deleted.
• Aggregated Data: anonymized, aggregated data (which cannot identify you) may be retained indefinitely for analytics and Service improvement.

Third-party service providers retain data according to their own policies.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in (session cookies, required).
• Protect your requests against cross-site request forgery (security token cookies, required).
• Remember app state on your device, such as an invitation you have not yet accepted, the access key for a brainstorm session you joined from your phone, and whether you have seen the full-screen help (your browser's local storage, not cookies).

We measure page visits with Vercel Web Analytics, which does not use cookies.

Most browsers let you refuse or delete cookies. However, rejecting these cookies will prevent you from signing in to the Service.

We do not currently use third-party advertising cookies.

8. Security

We use commercially reasonable technical and organizational measures to protect your information, including:

• Encryption in transit (HTTPS/TLS for all traffic).
• Encryption at rest for sensitive data held by our database provider.
• Password hashing (we never store plain-text passwords).
• Access controls limiting who can access production systems.
• Content Security Policy and other web application security headers.
• Authorization checks on every request to enforce access boundaries between users.
• Regular security reviews and updates.

No system is perfectly secure. We cannot guarantee absolute security of your information. You are responsible for keeping your account credentials confidential and notifying us of any suspected unauthorized access at support@prioritas.ai.

9. Your Rights and Choices

9.1 Access and Update

You can view and update most of your account information directly through account settings. Contact support@prioritas.ai if you need assistance accessing or correcting information.

9.2 Deletion

To delete your account, email support@prioritas.ai from the address on your account. We will confirm the request and complete deletion within 30 days. We cancel any active subscription, then delete your account, sign-in sessions, profile, the projects you own with their ideas and files, and your usage records. Ideas and files you added to other people's projects remain in those projects, with your account's name removed from them. Payment records are kept as described in Section 6.

9.3 Data Export

You can export your User Content through the Service in PDF, PNG and CSV formats on every plan. For other data portability requests, contact support@prioritas.ai.

9.4 Marketing Communications

If you receive marketing emails from us, you can unsubscribe using the link in the email. Transactional emails (account confirmations, billing notices, service announcements) cannot be unsubscribed while your account is active.

9.5 Cookies

You can manage cookies through your browser settings. See Section 7.

9.6 Do Not Track

Our Service does not currently respond to "Do Not Track" browser signals because no industry standard for responding to them has been established.

10. California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: request deletion of your personal information, subject to exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell or share personal information for cross-context behavioral advertising. No opt-out needed.
• Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information beyond what is necessary to provide the Service.
• Non-Discrimination: we will not discriminate against you for exercising these rights.

To exercise these rights, contact support@prioritas.ai with "California Privacy Request" in the subject line. We will verify your identity before responding.

10.1 Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information from California residents:

• Identifiers (email, IP address, account ID)
• Commercial information (subscription and payment records)
• Internet activity (usage data, device and connection data)
• User Content (content you create in the Service)

We have disclosed the above categories to the service providers listed in Section 4 for business purposes.

We have not sold personal information in the past 12 months.

11. International Users

Prioritas is operated from the United States. By using the Service from outside the US, you consent to the transfer, storage, and processing of your information in the United States and other jurisdictions where our service providers operate.

Data protection laws in the US may differ from those in your jurisdiction. We take reasonable steps to protect information transferred internationally.

Users in the European Economic Area (EEA), United Kingdom, or Switzerland: our legal bases for processing your information are:

• Contract: processing necessary to provide the Service you requested.
• Legitimate Interests: improving and securing the Service, preventing fraud.
• Consent: for marketing communications and optional features where required.
• Legal Obligation: compliance with applicable laws.

You have rights of access, rectification, erasure, restriction, portability, and objection under GDPR. To exercise these rights, contact support@prioritas.ai. You may also lodge a complaint with your local data protection authority.

12. Children's Privacy

The Service is not intended for use by anyone under 18 years of age. We do not knowingly collect information from children under 18. If you believe a child has provided us with information, contact us at support@prioritas.ai and we will delete it.

13. Third-Party Links

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. Review their privacy policies before providing information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. The "Last updated" date at the top of this policy indicates when it was last revised.

Continued use of the Service after changes take effect constitutes acceptance of the updated policy. If you do not agree, stop using the Service and delete your account.

This website (prioritas.ai)

This section last updated: October 25, 2026

This section covers this website, including the free impact-effort matrix tool.

• Analytics: we measure page visits with Vercel Web Analytics, which does not use cookies. If you accept analytics cookies, we also use Google Analytics 4 to see how people use this website, such as which pages they visit and how they arrived. Google provides Google Analytics (Google Ireland Limited in the EEA, the UK and Switzerland, and Google LLC elsewhere) and processes this data on our behalf as our processor. Google may process this data in the United States; where it does, the transfer relies on the EU–US Data Privacy Framework (and its UK and Swiss counterparts) and Google's standard contractual clauses. We don't use it for advertising, and its advertising storage stays off.
• Google Analytics cookies: Google Analytics sets the _ga cookie and a _ga_ cookie named after our measurement ID, which tell browsers and visits apart. They are set only after you click Accept in the cookie banner, and they last up to 2 years from your last visit. Google Analytics keeps user-level and event-level data for 14 months, then deletes it.
• HeyCatch: if you accept analytics cookies, we also use HeyCatch to see how people use this website, such as which pages they visit and what they click. HeyCatch, Inc. (USA) provides HeyCatch and processes this data on our behalf under its Data Processing Addendum. It uses PostHog, Inc. (US) as a sub-processor for the events, with no advertising use and session replay disabled. The data is processed in the United States; the transfer relies on the EU Standard Contractual Clauses in that addendum, and HeyCatch is not certified under the EU–US Data Privacy Framework. HeyCatch keeps the events while our subscription is active, and deletes or irreversibly anonymizes them within 2 months after it ends. HeyCatch stores an identifier in a cookie and in your browser's local and session storage, set only after you click Accept, and the cookie lasts up to 1 year. See HeyCatch's privacy policy.
• Your choice: until you choose, Google Analytics doesn't load and HeyCatch collects nothing. Your choice is kept in your browser's local storage for 12 months, then we ask again. You can change it at any time with Cookie settings at the bottom of every page. If you reject, or withdraw your consent later, Google Analytics and HeyCatch stop collecting data from your browser and we delete their cookies for this website.
• Cookies: apart from the Google Analytics and HeyCatch cookies above, which are set only if you accept, this website does not set cookies.
• Free matrix tool: the tool runs in your browser. The ideas you add are kept in your browser's local storage on your device, and the PNG you download is created in your browser. Your ideas are not sent to us or to anyone else. Clear board removes them, as does clearing this site's data in your browser.
• Hosting: this website is hosted by Vercel, which receives your IP address and device and connection data when it delivers pages (see Section 4).

15. Contact Us

Questions, concerns, or requests about this Privacy Policy or your personal information:

Lakehouse Digital LLC
Email: support@prioritas.ai
Service: prioritas.ai

For California privacy requests, use "California Privacy Request" in the subject line. For EEA/UK/Swiss GDPR requests, use "GDPR Request." We will respond within the timeframes required by applicable law.

This Privacy Policy is effective as of October 21, 2026.

For accounts created before this date, these changes take effect 14 days after it.