Lubeth stores conversations so that users can access their chat history and continue their work. We may retain limited information to secure the platform, investigate misuse and meet legal obligations. We do not use customer content to train general-purpose or foundation AI systems unless we first obtain express permission.
1. Who we are and the scope of this policy
Lubeth is an artificial intelligence platform owned and operated by Transhuman Technologies ("Transhuman", "Lubeth", "we", "us" or "our"). This Policy applies to Lubeth websites, applications, APIs, business workspaces and related support services (collectively, the "Services").
For personal accounts and our own website operations, Transhuman generally determines why and how personal information is processed and acts as the responsible party or controller. Where an organisation provides Lubeth to its personnel or customers and determines the purposes of processing, that organisation is generally the responsible party or controller and Transhuman acts as its operator or processor. The organisation's own privacy notice may also apply.
2. Information we collect
Depending on how you use the Services, we may collect:
- Account information: name, email address, authentication details, workspace membership, role, preferences and account status.
- Customer content: prompts, conversations, responses, files, images, recordings, transcripts, knowledge documents, websites, instructions, feedback and generated artifacts.
- Business workspace information: organisation details, administrators, permissions, assistants, approved knowledge, audit history and API-client configuration.
- Usage and technical information: feature use, token and credit consumption, timestamps, device and browser information, IP address, request identifiers, diagnostics and security events.
- Transaction information: plan, billing status, transaction references and payment status. Payment-card or bank credentials are handled by the applicable payment provider and are not intended to be stored by Lubeth.
- Communications: support requests, complaints, survey responses and other messages you send to us.
Please do not submit information that you are not authorised to use or that is unnecessary for your task. Business customers must give their users and data subjects all notices and obtain all permissions required by applicable law.
3. How and why we use information
We process information to provide and personalise the Services; preserve chat history and task continuity; operate workspaces, tools and integrations; generate requested outputs; retrieve approved knowledge; process subscriptions and credits; provide support; protect users and the platform; detect fraud, abuse and policy violations; monitor reliability; keep audit records; comply with law; and establish, exercise or defend legal claims.
Where applicable, our legal bases include performing a contract, taking steps requested before entering a contract, complying with legal obligations, protecting legitimate interests in operating and securing the Services, protecting vital or public interests where applicable, and consent where the law requires it. You may withdraw consent, but withdrawal does not affect processing already lawfully performed.
We may create aggregated or de-identified statistics that do not reasonably identify a person and use them to understand and improve platform performance, security and capacity.
4. AI processing, search and automated features
Lubeth uses a combination of infrastructure operated by Transhuman and contracted service providers to interpret requests and produce results. We send only the content reasonably required to perform the requested function, apply the customer's processing settings and enforce applicable permissions.
When web research is enabled, a search query and limited task context may be sent to search providers, and requested public webpages may be retrieved. When a tool, connector or integration is enabled, information necessary to perform that action may be sent to the selected third party. Those third parties process information under their own terms as well as our contractual controls where applicable.
We do not use customer content to train general-purpose or foundation AI systems unless the affected customer has expressly opted in. Service providers may perform limited safety, security and abuse monitoring as permitted by their contracts and applicable law.
AI-generated results can be incomplete, inaccurate or non-unique. Quality scores, recommendations and other automated outputs are decision-support tools. They must not be used as the sole basis for decisions that have legal or similarly significant effects on a person without appropriate human review and a lawful basis.
5. Business and enterprise workspaces
A workspace administrator may invite or remove members, configure assistants and tools, assign knowledge, review usage and audit information, and control workspace content according to the organisation's agreement and settings. Your organisation may be able to access, export, retain or delete information associated with your business account. Direct privacy requests concerning organisation-controlled data should normally be made to that organisation first.
We keep tenant data logically separated and apply membership, role and assistant-level authorisation. API clients and connected applications may access only the scopes and resources authorised by the workspace.
7. International processing
Lubeth is operated from South Africa, but authorised providers and users may process information in other countries. Those countries may have different privacy laws. Where required, we use contracts, adequacy mechanisms, customer instructions and other safeguards for cross-border transfers. Business customers may impose additional processing-location restrictions through their agreement and available workspace controls.
8. Retention and deletion
We retain account information and customer content for as long as reasonably necessary to provide the Services, preserve requested chat history, comply with workspace instructions and meet the purposes described in this Policy. A user or workspace administrator may request deletion by contacting us. Knowledge and business records remain available until removed by an authorised workspace administrator or deleted under the applicable agreement.
After deletion or account closure, limited records may be retained where reasonably necessary for security and abuse prevention, billing and tax records, dispute resolution, legal compliance and the establishment or defence of claims. Residual copies may remain temporarily in protected backups until overwritten under normal backup cycles. We will not retain identifiable personal information for longer than permitted by applicable law.
9. Security
We use administrative, technical and organisational safeguards designed to protect information, including access controls, tenant isolation, secure transport, protected credentials, audit records and operational monitoring. No internet service is completely secure. You are responsible for safeguarding your account, verification codes, API credentials and authorised devices, and for notifying us promptly of suspected unauthorised access.
10. Your privacy rights
Subject to applicable law and appropriate identity verification, you may have rights to request access to personal information, correction, deletion, restriction, objection, portability, withdrawal of consent, information about recipients, and review of certain automated decisions. You may also complain to the regulator in your country.
South African data subjects may complain to the Information Regulator of South Africa. Exercising a privacy right will not result in unlawful discrimination, although deleting information needed to provide the Services may require us to close or limit the relevant account.
12. Children
The Services are not directed to children under 18 and they may not create an account without involvement and valid consent from a parent, guardian, school or other authorised organisation where permitted by law. Contact us if you believe a child provided personal information without proper authorisation.
13. Changes to this Policy
We may update this Policy as the Services or law changes. We will publish the revised version and effective date and provide additional notice where a change materially affects your rights or where applicable law requires it.
14. Contact us
For privacy questions, access or deletion requests, objections or complaints, contact Transhuman Technologies at info@transhumantec.co.za or telephone +27 87 265 3685.