Pellucid Privacy Policy

Effective date: August 12, 2026 Version: privacy-2026-08

This Privacy Policy explains how Pellucid Software LLC, doing business as Pellucid ("Pellucid," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit https://pellucid.io, create or use a Pellucid account, interact with a Pellucid-powered quote, contract, invoice, payment page, or payment reminder, or otherwise communicate with us (collectively, the "Services").

Pellucid provides software that helps businesses manage quotes, electronic signatures, invoices, payment plans, payment reminders, and cash-flow workflows. In many cases, a business using Pellucid decides what information to upload, whose information to use, and what communications to send. In those situations, that business is responsible for its customer data and Pellucid processes the information on its behalf. This Privacy Policy also describes information that Pellucid handles for its own business purposes, such as account, website, support, security, and billing information.

1. Scope

This Privacy Policy applies to the Services and to personal information that Pellucid handles for its own purposes. It also explains, at a high level, how Pellucid processes personal information for business customers.

When we process personal information contained in a business customer's quotes, contracts, invoices, customer records, payment status, or communications, the business customer generally determines the purposes and means of that processing. If you are a customer or payor of a business that uses Pellucid and you have a question about that business's practices, contact the business directly. We will assist the business with requests as required by law and our agreement with the business.

This Privacy Policy does not govern the independent privacy practices of third parties, including Stripe, DocuSign, Intuit, or websites and services linked from the Services.

2. Information We Collect

The information we collect depends on how you interact with the Services.

A. Information you provide to us

We may collect:

• Account and profile information, such as your name, business name, job title, email address, telephone number, account credentials, time zone, and preferences.
• Business and billing information, such as business address, tax-related business information, subscription plan, invoices from Pellucid, and transaction records relating to your Pellucid subscription.
• Customer and receivables information, such as customer names and contact details, quotes, contracts, signatures, invoices, line items, payment terms, payment plans, deposits, milestones, due dates, outstanding balances, payment status, notes, and reminder history.
• Communications, including support requests, survey responses, beta feedback, emails, chat messages, attachments, and other communications with us.
• Integration information, including account identifiers, authorization tokens, connection status, and information imported from or sent to services you connect, such as QuickBooks Online, Stripe, and DocuSign.
• Other information you choose to provide, including content entered into free-form fields or submitted to AI-powered features.

Please do not provide payment-card numbers, bank-account credentials, government identification numbers, health information, or other sensitive personal information in free-form fields unless the Services specifically request the information through a secure workflow designed for that purpose.

B. Information collected automatically

When you use the Services, we may automatically collect:

• IP address and approximate location derived from it;
• browser type, device type, operating system, language, and device identifiers;
• pages and features viewed, links clicked, referring URLs, access times, session duration, and other usage information;
• authentication, audit, diagnostic, crash, and security logs; and
• cookie, local-storage, and similar technology identifiers.

LogRocket is disabled at initial beta publication. If enabled later, Pellucid will limit it to authenticated application diagnostics and will not deploy it on Pellucid marketing pages, public payment or payor flows, or embedded-signature pages. Pellucid will apply masking and collection controls designed to exclude sensitive content and credentials and will update applicable disclosures before activation.

For more information, see our Cookie Policy.

C. Information from other sources

We may receive information from:

• your employer or another organization that invites you to a Pellucid account;
• a Pellucid business customer that creates a quote, contract, invoice, payment request, or reminder involving you;
• connected services, including Stripe, DocuSign, and QuickBooks Online, when an authorized user enables an integration;
• payment processors and financial-service providers, including transaction status, payment method type, fraud or risk indicators, refunds, disputes, and payout status, but not full payment-card or bank-login credentials;
• service providers that help us prevent fraud, secure accounts, operate the Services, or provide support; and
• publicly available sources when reasonably necessary to verify a business or protect the Services.

3. How We Use Information

We may use personal information to:

• provide, maintain, secure, and improve the Services;
• create and administer accounts and workspaces;
• generate and manage quotes, contracts, invoices, deposits, milestones, payment plans, payment links, and reminders;
• connect and synchronize authorized third-party services;
• process Pellucid subscription payments and support transactions facilitated through Stripe;
• generate drafts, summaries, classifications, recommendations, forecasts, and workflow actions using AI;
• authenticate users, detect abuse, investigate security events, prevent fraud, and enforce our agreements;
• provide customer support and respond to requests;
• communicate about the Services, including administrative messages, security notices, product updates, and, where permitted, marketing;
• analyze performance, troubleshoot errors, and understand how the Services are used;
• comply with law, respond to lawful requests, and protect the rights, safety, and property of Pellucid, our customers, payors, and others; and
• complete a corporate transaction, such as a financing, merger, acquisition, reorganization, or sale of assets.

We may create aggregated or de-identified information that cannot reasonably be used to identify a person. We may use and disclose that information for lawful business purposes and will not attempt to re-identify it except to test our de-identification processes or as permitted by law.

4. AI-Powered Features

Pellucid uses third-party artificial-intelligence providers, including Anthropic, to power certain agent and automation features. Depending on the feature used, we may send limited account information, invoice and contract content, customer communications, payment status, and related business records to an AI provider to generate drafts, summaries, recommendations, classifications, forecasts, or workflow actions.

We limit the information sent to what is reasonably necessary for the requested feature. We do not permit our AI providers to use Customer Data to train general-purpose models unless the applicable business customer expressly authorizes that use.

Under Anthropic's standard commercial API terms, API inputs and outputs may be retained for up to 30 days, subject to limited exceptions and any shorter retention arrangement that applies to Pellucid. Certain optional API features may have different retention behavior. Pellucid does not intentionally send full payment-card numbers, bank credentials, passwords, or authentication secrets to Anthropic.

AI output can be inaccurate or incomplete. Business customers are responsible for reviewing outputs and communications when appropriate and for deciding whether and how to use them.

5. How We Disclose Information

We may disclose personal information as follows:

A. To service providers

We use service providers to host, secure, operate, support, and analyze the Services. These providers may include:

• cloud hosting, storage, database, queueing, and infrastructure providers, including Amazon Web Services, Vercel, and Neon;
• identity and access-management providers, including Auth0;
• payment and connected-account providers, including Stripe;
• electronic-signature providers, including DocuSign;
• accounting integrations, including Intuit QuickBooks Online;
• AI model and agent-processing providers, including Anthropic;
• email delivery and customer-support providers, including Resend and Formspree;
• website analytics providers, including Google Analytics on the Pellucid website, used only where a visitor has accepted analytics cookies;
• product diagnostics, logging, error-monitoring, and security providers, including LogRocket if enabled for authenticated application users; and
• professional advisers, auditors, insurers, and contractors.

These providers may process information only to perform services for Pellucid or as otherwise permitted by their agreements and applicable law.

B. At the direction of a business customer

We disclose information when a business customer instructs us to do so, including to the customer's personnel, customers, payors, professional advisers, connected applications, and service providers. A business customer controls its workspace permissions, recipient information, reminder settings, and connected accounts.

C. To connected third parties

If you connect or use a third-party service, we exchange information with that service as needed to provide the integration. For example:

• Stripe may receive business onboarding details, transaction information, and payor payment information and may return account, transaction, dispute, and payout status.
• DocuSign may receive document, signer, and transaction information needed to complete an electronic-signature workflow.
• QuickBooks Online may provide accounting, customer, invoice, payment, and related records authorized by the connected account.

The third party's own terms and privacy policy govern its independent processing.

D. For legal, safety, and compliance purposes

We may disclose information if we reasonably believe disclosure is necessary to comply with law or legal process; enforce our agreements; investigate fraud, abuse, or security incidents; protect rights, property, or safety; or establish, exercise, or defend legal claims.

E. In a corporate transaction

We may disclose or transfer information in connection with a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality protections where required.

F. With consent

We may disclose information for another purpose disclosed to you at the time, with your direction or consent.

6. Payments

Pellucid uses Stripe to facilitate payments and connected-account services. Stripe, rather than Pellucid, collects and processes full payment-card or bank-account credentials submitted through Stripe-hosted or Stripe-enabled payment interfaces. Pellucid may receive transaction metadata, such as the payor's name and email address, payment amount, payment method type, transaction status, refunds, disputes, and payout status.

Pellucid does not hold customer funds. Stripe's processing is governed by its own agreements and privacy policy.

7. Cookies and Similar Technologies

We use cookies, local storage, pixels, SDKs, and similar technologies to authenticate users, maintain sessions, remember preferences, prevent fraud, secure the Services, understand performance, and, if enabled, measure product usage.

We do not currently use personal information for cross-context behavioral advertising, and we do not knowingly sell personal information. You can learn more about current technologies and browser controls through our Cookie Policy at https://pellucid.io/legal/cookies.

Browser "Do Not Track" signals and opt-out preference signals are not interpreted consistently across the industry. Because Pellucid does not currently sell personal information or use it for cross-context behavioral advertising, responding to such a signal does not change our current practices. We will update this Policy and implement legally required controls before engaging in activities that require such an opt-out mechanism.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain business and security records, comply with law, resolve disputes, and enforce agreements. Retention depends on the type of information, the customer's instructions, the sensitivity of the information, legal requirements, and operational needs.

Our current retention targets include:

• account and profile information for the life of the account plus 60 days;
• a 30-day export window after termination and primary application-data deletion within 60 days after termination;
• expiration of associated backups within 90 days after primary deletion;
• email and webhook delivery records and security and access logs for 12 months;
• Formspree lead submissions for 12 months;
• billing, transaction, dispute, tax, and audit records for up to seven years;
• fraud, litigation, legal-hold, and related records for as long as reasonably necessary for the matter; and
• third-party providers may retain information according to their applicable agreements and retention schedules.

We may retain de-identified information that cannot reasonably identify an individual.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit, logging, monitoring, and vendor-management practices appropriate to the nature of the Services.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials, using appropriate account permissions, and promptly notifying us of suspected unauthorized access.

10. Your Choices

Account information

You may update certain account information through the Services. Business account administrators may also manage workspace users and permissions.

Communications

You can opt out of marketing emails by using the unsubscribe link in the message or contacting us. You may continue to receive transactional or administrative messages, including account, security, billing, and service notices.

If you receive a payment reminder from a business using Pellucid, contact that business regarding the invoice, dispute, or communication preference. Pellucid may also process suppression requests as directed by the business customer.

Connected services

You may disconnect certain integrations through the Services or the third party's account settings. Disconnecting an integration may not delete information previously imported into Pellucid or information retained by the third party.

Cookies

You may use your browser settings to control cookies and similar technologies. Pellucid does not currently offer a separate cookie-settings center. Blocking essential technologies may prevent the Services from functioning correctly.

11. U.S. Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to request access to, correction of, deletion of, or a copy of certain personal information. You may also have the right to opt out of certain targeted advertising, sale, sharing, or profiling activities, and to appeal a denied request.

Pellucid does not knowingly sell personal information for money and does not currently share personal information for cross-context behavioral advertising. We do not discriminate against you for exercising applicable privacy rights.

To submit a request, email privacy@pellucid.io. Describe your request and your relationship with Pellucid. We may need to verify your identity and authority before completing the request. You may use an authorized agent where permitted by law, but we may require proof of authorization and identity.

If Pellucid holds the information only on behalf of a business customer, we may direct your request to that business or ask the business for instructions.

Nevada residents may submit a verified request regarding a covered sale of covered information using the contact methods above. Pellucid does not currently engage in covered sales as defined by Nevada law.

12. Children's Privacy

The Services and private beta are intended for businesses and adults aged 18 or older and are not directed to children. Pellucid does not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to Pellucid, contact us at privacy@pellucid.io.

Business customers must not use the Services to collect information from children in violation of law.

13. International Use

The private beta is intended for users in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where Pellucid or its providers operate. Those countries may have data-protection laws different from those in your jurisdiction.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the effective date. If a change is material, we will provide additional notice as required by law, such as by email or through the Services.

15. Contact Us

For questions or privacy requests, contact:

Pellucid Software LLC, doing business as Pellucid 732 S 6th St, Las Vegas, NV 89101 Email: privacy@pellucid.io