Privacy Policy
Lucyn AI Advisory · Last updated: October 2026
Lucyn AI Advisory ("Lucyn," "we," "us," or "our") provides AI governance and HIPAA AI readiness advisory services. This policy explains what information we collect through lucynai.com and our related forms and scheduling tools, how we use it, and the choices you have.
Information We Collect
When you fill out a readiness check (HIPAA AI Awareness Check or AI Governance Awareness Check) or book a call, we collect the information you provide directly, which may include:
- Name
- Work email address
- Organization name
- Role or title
- Your answers to readiness-check questions
- Meeting details if you schedule a call (date, time, and any notes you provide)
We do not use tracking pixels, ad networks, or sell personal information to third parties.
Information We Do Not Collect
Our readiness checks and website are not designed or intended to collect protected health information (PHI), patient data, or other sensitive personal data. Please do not submit PHI, patient records, or other sensitive information through our forms. Our engagements are designed so that we do not need to receive PHI. If PHI is shared with us by mistake, please tell us so we can return or securely delete it.
How We Use Your Information
We use the information you provide to:
- Prepare and follow up on your readiness check result
- Respond to inquiries and schedule calls
- Understand which services may be a good fit for your organization
- Maintain records of our engagements
Third-Party Services
We use the following third-party services to operate our forms and scheduling:
- Microsoft 365 (Power Automate, Excel and Outlook). Receives and stores what you submit through the forms on lucynai.com, including the HIPAA AI Awareness Check, and sends your results by email.
- Microsoft Forms (forms.cloud.microsoft). Collects and stores your AI Governance Awareness Check responses.
- Microsoft Bookings (bookings.cloud.microsoft). Manages call scheduling.
These services are operated by Microsoft and are subject to Microsoft's own privacy and security practices. We recommend reviewing Microsoft's Privacy Statement for details on how Microsoft processes data on our behalf.
Data Retention
We retain readiness check responses and scheduling information for as long as reasonably necessary to respond to your inquiry, deliver services, and maintain business records, or as required by law. You may request deletion of your information at any time (see Your Choices below).
Data Sharing
We do not sell or rent your personal information. We may share information with service providers (such as Microsoft, for form and scheduling functionality) solely to operate our business, and as required by law.
Your Choices
You may:
- Decline to provide optional information
- Request access to, correction of, or deletion of the information you've submitted
- Unsubscribe from any follow-up communications
To exercise any of these choices, contact us at contact@lucynai.com.
Security
We take reasonable measures to protect the information you provide, including relying on Microsoft's enterprise-grade security for form and scheduling data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children's Privacy
Our services are intended for business use by adults and are not directed to children. We do not knowingly collect information from children.
Changes to This Policy
We may update this policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be reflected on this page.
Contact Us
Questions about this policy or your information can be directed to:
Lucyn AI Advisory
contact@lucynai.com
Lucyn AI Advisory provides AI governance readiness assessments built on the NIST AI Risk Management Framework and the OECD AI Principles. We do not provide legal advice or determine legal obligations.