Privacy Policy
Last updated September 15, 2026
This policy explains what Ondara, LLC (doing business as Lightdrift, “we”) collects when you use lightdrift.ai and the Lightdrift API, why, and how long we keep it.
What we collect
- Account data: your email address and sign-in identity, handled by our authentication provider, Clerk.
- Payment data: handled by Stripe. We receive a customer id, the card brand and last four digits, and payment status. We never see or store full card numbers.
- API usage: for every request we log the timestamp, your account and key id, the query text and parameters, which results were returned, which results were later fetched or downloaded, response times, and the client IP address.
- Dashboard usage: standard web server logs (IP address, browser, pages visited).
Why we collect it
- to operate the Service, meter usage and charge credit;
- to secure the Service, enforce limits and detect abuse;
- to improve search quality: which results get fetched after a query is used to train and evaluate our ranking models;
- to answer support requests and to tell you about changes to the Service.
We do not sell personal data and we do not use it for advertising. Query logs are not shared with other customers.
Who processes it for us
Clerk (authentication), Stripe (payments), Railway (application hosting and database), Modal (GPU computation), Turbopuffer (search index), and Cloudflare (networking, storage and DNS). Each processes data only to provide its service to us. Our infrastructure is located in the United States.
Retention
- Account and billing records: for as long as your account exists, then as required for tax and accounting.
- API request logs: up to 24 months, after which they are deleted or anonymised.
- Web server logs: 30 days.
Your choices
You can revoke API keys and update account details in the dashboard. To delete your account or to request a copy or deletion of the data we hold about you, email hello@lightdrift.ai from your account address. Where the law gives you additional rights (for example under GDPR or the CCPA), you can exercise them the same way.
Cookies
The dashboard uses cookies only to keep you signed in and to remember interface preferences. The marketing site does not use tracking cookies.
Changes
We will post updates here and, for material changes, notify account holders by email or in the dashboard.
