Privacy Policy

Effective: February 2026

Serbek Technologies, LLC ("we", "us") operates lightboxAIcloud (https://lightbox-ai.cloud). This policy describes how we collect, use, and protect your information.

1. Information We Collect

Account Information

Email address
Display name
Password (stored as Argon2 hash)

Cloud Storage Access

OAuth access tokens (AES-256-GCM encrypted at rest)
Cloud account email and ID

Photo Metadata

EXIF data (camera, lens, exposure, GPS coordinates)
File paths and filenames from cloud storage
Timestamps and file sizes

Generated Data

Thumbnail images
Search queries
Star ratings and favorites

2. How We Use Your Information

Account authentication and session management
Cloud storage synchronization and photo indexing
Photo browsing, search, and organization
Email communications (verification, password reset)

3. Third-Party Services

Dropbox — Cloud storage access for photo indexing (user-initiated OAuth connection) (Privacy Policy)
Google — Google Drive cloud storage access for photo indexing (user-initiated OAuth connection) (Privacy Policy)
Microsoft — OneDrive cloud storage access for photo indexing (user-initiated OAuth connection) (Privacy Policy)
Resend — Transactional email delivery (verification, password reset) (Privacy Policy)

4. Data Retention

Your data is retained for the lifetime of your account or until you request deletion. You may request deletion by contacting us via our contact page.

5. Your Rights

You may:

Access your account information
Update your information
Request deletion of your account and associated data

6. Cookies

We use a session cookie for authentication. This is a functional cookie required for the site to work. We do not use tracking cookies or third-party analytics.

7. Security

We use industry-standard security measures including encrypted passwords (Argon2), HTTPS, and secure session management. However, no method of electronic storage is 100% secure.

8. Jurisdictional Limitation

Our services are intended for use in jurisdictions where our data handling practices, as outlined in this Privacy Policy, are fully compliant with local laws. By accessing or using our services, you warrant that your use does not violate any local, state, or national privacy regulations. If this Privacy Policy is inconsistent with the privacy laws of your country of residence, you must immediately cease all use of our services. We reserve the right to restrict access to our services for users in certain jurisdictions to ensure compliance with applicable data protection laws.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

10. Contact

For privacy-related questions, visit our contact page.