Privacy Policy

Lighthaus Labs
Effective Date: April 21, 2026
Contact:security@lighthauslabs.com

1. Introduction

Lighthaus Labs (“Lighthaus,” “we,” “our,” or “us”) is committed to protecting the privacy and security of personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you interact with our website, services, and systems.

This policy applies to information collected from clients, website visitors, and business partners.

2. Information We Collect

We may collect the following types of information:

a. Personal Information

  • Name, email address, phone number

  • Company name and job title

  • Billing and payment information

b. Technical and Usage Information

  • IP address and device information

  • Browser type and access times

  • Website usage data (e.g., pages viewed, interactions)

c. Client Data

In the course of providing services, Lighthaus Labs may have access to data stored within client environments. This may include personal or sensitive information; however, such data is processed only on behalf of the client and in accordance with contractual obligations.

3. How We Use Information

We use information to:

  • Provide, operate, and support our services

  • Communicate with clients and respond to inquiries

  • Manage billing and business operations

  • Improve website functionality and user experience

  • Maintain security, detect threats, and prevent fraud

  • Comply with legal and contractual obligations

4. Data Sharing and Disclosure

We do not sell personal information. We may share information in the following circumstances:

a. Service Providers (Subprocessors)

We use trusted third-party providers to operate our business, including:

  • Google (Workspace and cloud services)

  • Kaseya (IT management and security tools)

  • OpenAI (ChatGPT) and Anthropic (Claude) for limited AI-assisted workflows

  • Twilio (SMS / messaging delivery)

  • Apple (device ecosystem)

  • Intuit (QuickBooks for billing and accounting)

These providers process data on our behalf and are contractually obligated to protect it.

b. Legal and Regulatory Requirements

We may disclose information if required to do so by law, regulation, or valid legal request.

c. Business Transfers

Information may be transferred in connection with a merger, acquisition, or sale of assets.

5. SMS and Mobile Communications

Lighthaus Labs may send SMS text messages to employees, contractors, and authorized personnel for operational purposes, including automated notifications regarding assigned service tickets, scheduled service calls, and related work activity. We collect mobile phone numbers directly from these individuals when they enter them into our internal systems.

How we use mobile numbers: We use mobile numbers solely to deliver SMS notifications related to work assignments and scheduling. We do not use mobile numbers for marketing or promotional messaging.

Message frequency: Message frequency varies based on work activity. Recipients may receive between zero and several messages per day depending on their assignments.

Message and data rates: Standard message and data rates from your wireless carrier may apply to messages you receive.

How to opt out: You may opt out of receiving SMS messages at any time by replying STOP to any message received from us. You may also reply HELP for assistance. Once you opt out, we will not send further SMS messages to your number unless you opt back in.

No sharing of opt-in data: Mobile information, including phone numbers and SMS opt-in or consent data, is not shared with or sold to third parties or affiliates for marketing or promotional purposes. Information sharing to subprocessors who support our messaging operations (such as our SMS delivery provider) is permitted only as necessary to deliver the service.

Verbal Opt-In Consent Script: Lighthaus Labs SMS Notification Consent Spoken to new technicians during onboarding by their manager: "As part of your role at Lighthaus Labs, our Autotask system sends automated SMS notifications when service tickets and scheduled service calls are assigned to you. These messages include the ticket title, due date, client company, and a link to view the full ticket in Autotask. You'll also receive a reminder text 15 minutes before any scheduled service call. Standard message and data rates from your wireless carrier may apply, though most plans include unlimited texting. You can opt out at any time by replying STOP to any message, or by removing your mobile number from your Autotask profile. Do you consent to receiving these work-related SMS notifications at the mobile number you've provided in Autotask?" [Wait for verbal yes/no] [If yes] "Thank you. I'm noting your consent in your Autotask profile."

Subprocessor: SMS messages are delivered via Twilio, Inc. Twilio's privacy policy is available at https://www.twilio.com/legal/privacy.

6. Data Security

Lighthaus Labs implements administrative, technical, and organizational safeguards to protect information, including:

  • Multi-Factor Authentication (MFA) and access controls

  • Encryption of data in transit and at rest

  • Endpoint protection (Datto AV and Datto EDR)

  • Continuous monitoring via RocketCyber SIEM/SOC and SaaS Alerts

While we take reasonable measures to protect information, no system can be guaranteed 100% secure.

7. Data Retention

We retain personal information only as long as necessary to:

  • Fulfill business and contractual obligations

  • Comply with legal and regulatory requirements

  • Resolve disputes and enforce agreements

Data is securely deleted or anonymized when no longer required.

8. Your Privacy Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including:

  • Access to the data we hold about you

  • Correction of inaccurate information

  • Deletion of your personal data

  • Objection to or restriction of processing

Requests can be submitted to: security@lighthauslabs.com

9. Third-Party Services and Links

Our website or services may reference third-party platforms. We are not responsible for the privacy practices of those providers. Users are encouraged to review their respective privacy policies.

10. Children’s Privacy

Lighthaus Labs does not knowingly collect personal information directly from children. Any student or minor data encountered is processed solely on behalf of our clients and under their direction.

11. International Data Transfers

Our services are primarily operated in the United States. If data is transferred internationally, we rely on appropriate safeguards provided by our subprocessors and service providers.

12. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date.

13. Contact Us

For questions about this Privacy Policy or our data practices, please contact:

Lighthaus Labs
Email:security@lighthauslabs.com