Lurbee

Privacy Policy

Last updated: June 8, 2026

This Privacy Policy explains how Lurbee, operated by Lurbee, LLC (“Lurbee,” “we,” “us”), collects, uses, shares, and protects information when you use the Lurbee website, apps, and services (the “Service”). By using the Service you agree to this Policy.

1. Information we collect

We collect the following, depending on how you use Lurbee:

  • Account information — your email address (used for passwordless magic-link sign-in; we do not store passwords) and an optional display name.
  • Card content — what you put on your cards: name, title, company, links, taglines, and any profile photo, cover image, or logo you upload.
  • Contacts and leads — information you add or capture about other people, including names, emails, phone numbers, and messages, plus photos of business cards you scan and the details extracted from them.
  • Meeting content — transcripts or notes you paste in for AI meeting summaries.
  • Billing information — handled by our payment processor, Stripe. We store a Stripe customer identifier and your subscription status; we do not store full payment-card numbers.
  • Usage and device data — pages and features used, events, approximate location derived from IP address, browser and device type, and similar technical data. This includes anonymized session replays — recordings of mouse movement, clicks, scrolling, and page interactions — captured by our analytics tools to help us understand and improve the Service.

2. How we use information

  • to provide, maintain, and improve the Service;
  • to authenticate you and keep your account secure;
  • to process payments and manage subscriptions;
  • to power AI features such as the card scanner, contact enrichment, and meeting summaries;
  • to send transactional email — for example sign-in links, team invites, lead notifications, and welcome messages;
  • to understand usage through analytics and to develop new features;
  • to detect, prevent, and respond to abuse, spam, and security incidents;
  • to comply with legal obligations and enforce our Terms.

We do not sell your personal information.

3. AI processing

When you use an AI feature, the relevant content — a scanned card image, the contact you ask us to enrich, or a meeting transcript — is sent to our AI provider (Anthropic) to generate a result. We do not use your content to train AI models, and our providers act as our processors. AI output is generated automatically and may be inaccurate; review it before relying on it.

4. Service providers we rely on

We share information with vendors that process it on our behalf, under contracts that require them to protect it:

  • Supabase — database, authentication, and file storage;
  • Vercel — application hosting;
  • Stripe — payment processing and subscription billing;
  • Anthropic — AI model processing for scanning, enrichment, and summaries;
  • Google Workspace — sending transactional email;
  • PostHog — product and usage analytics;
  • Microsoft Clarity — usage analytics, session replay, and heatmaps;
  • Cloudflare — content delivery and bot protection (Turnstile);
  • Upstash — rate limiting (transient, IP-based request counters).

5. How information is shared

  • Public cards — a card you publish is publicly accessible to anyone with the link and may be indexed by search engines.
  • Teams — if you join a team workspace, your membership and any contacts you add to the shared team contact book are visible to other members of that team.
  • Service providers — as described above.
  • Legal and safety — when we believe disclosure is required by law, or necessary to protect the rights, safety, or property of Lurbee, our users, or the public.
  • Business transfers — if Lurbee is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction.

6. Contacts and leads you collect

When you capture leads or scan business cards, you decide what personal information about other people to collect and why. For that data, you act as the controller and Lurbee acts as your processor — we handle it to provide the Service to you. You are responsible for having a lawful basis to collect and use that information and for honoring the privacy rights of the people it describes.

7. Cookies

We use a small number of cookies and similar technologies: strictly necessary cookies that keep you signed in and route you correctly after sign-in, and analytics cookies set by PostHog and Microsoft Clarity to understand usage and record anonymized session replays. Bot-protection (Cloudflare Turnstile) may also set technical cookies. You can block cookies in your browser, but the Service may not work properly without the necessary ones.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account or specific content, we delete or de-identify the associated personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist briefly in backups.

9. Security

We protect information with measures including encryption in transit, row-level access controls in our database, and scoped access for our systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can edit or delete much of your data directly in the app. To make any other request, email us at privacy@lurbee.com — we will respond as required by applicable law. If a request concerns contact data that a Lurbee user collected about you, we will refer you to that user, who is the controller of that data.

11. International data transfers

Lurbee is operated from, and processes data in, the United States. If you access the Service from outside the United States, you understand your information will be transferred to and processed there, where data-protection laws may differ from those in your country.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice — for example by email or an in-app notice — and update the “Last updated” date above.

14. Contact

Questions or privacy requests? Email us at privacy@lurbee.com.