Privacy Policy

Skuiddy is an Organizational Intelligence Platform developed and operated by LumaSeer LLC (“LumaSeer,” “Skuiddy,” “we,” “our,” or “us”).

Skuiddy helps organizations discover, map, understand, and monitor the systems, applications, infrastructure, data platforms, artificial intelligence technologies, identities, vendors, workflows, and relationships that make up their enterprise environment. Skuiddy uses Smart Sensors and other authorized integrations to build and maintain a living Organizational Twin.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you visit the Skuiddy website, use the Skuiddy platform, interact with our APIs, connect Smart Sensors, communicate with us, or otherwise use our products and services.

By accessing or using Skuiddy, you acknowledge the practices described in this Privacy Policy.

The information we collect depends on how you interact with Skuiddy and the services configured by your organization.

Account and Profile Information

We may collect information such as:

• Name
• Business email address
• Organization name
• Job title
• Department or team
• Account role and permissions
• Authentication identifiers
• Communication preferences

Organization Information

Organizations may provide information including:

• Organization name
• Industry
• Organizational structure
• Business units
• Teams and departments
• Workspace configurations
• Business capabilities
• Technology ownership information
• Governance and operational metadata

Smart Sensor and Integration Data

When an authorized user connects a Smart Sensor or third-party integration, Skuiddy may collect and process information made available through that connection.

Depending on the integration and permissions granted, this may include:

• Cloud accounts and resources
• Applications and services
• APIs and integrations
• Databases and data platforms
• Repositories and development resources
• AI models, AI agents, and AI platforms
• Identity and access metadata
• Infrastructure configurations
• Security and operational metadata
• Vendors and technology providers
• Tickets, incidents, workflows, and related metadata
• Resource ownership and organizational relationships
• Configuration, dependency, lifecycle, and usage metadata

Skuiddy is designed to use authorized, permission-scoped access. Customers control which Smart Sensors are connected and the permissions granted to those integrations.

Organizational Twin Data

Skuiddy may normalize, organize, enrich, and relate authorized source information to create an Organizational Twin. Organizational Twin data may include:

• Discovered entities
• Entity attributes and metadata
• Relationships and dependencies
• Ownership information
• Intelligence Domains
• Discovery history
• Knowledge Coverage
• Twin Confidence
• Insights, Findings, and Recommendations
• Policies
• Change history
• Provenance and confidence information

Usage and Technical Information

We may automatically collect:

• Browser type and device type
• Operating system
• IP address
• Session information
• Authentication activity
• Application interactions
• API requests
• Feature usage
• Error and diagnostic information
• Performance information
• Audit events

Communications

If you contact us, request information, participate in a demonstration, submit feedback, or request support, we may collect the information included in those communications.

We may use information to:

• Provide and operate the Skuiddy platform
• Authenticate users and manage access
• Build and maintain Organizational Twins
• Operate Smart Sensors and authorized integrations
• Discover and normalize organizational entities
• Identify relationships and dependencies
• Detect changes in connected environments
• Generate insights, findings, and recommendations
• Calculate or improve Knowledge Coverage and Twin Confidence
• Support Organizational Twin search and exploration
• Provide dashboards, Workspaces, and department or executive Lenses
• Maintain platform security and reliability
• Monitor platform performance
• Troubleshoot errors and provide customer support
• Improve Skuiddy products and services
• Develop new platform capabilities
• Communicate service, security, and product updates
• Meet contractual, legal, and regulatory obligations

As between LumaSeer and the customer, customers retain ownership of the organizational information and customer data submitted to or collected through their authorized use of Skuiddy.

LumaSeer does not claim ownership of customer Organizational Twin data.

We process customer data to provide, secure, support, maintain, and improve the services in accordance with applicable agreements and customer instructions.

Skuiddy may use artificial intelligence, machine learning, rules-based analysis, graph analysis, or other computational methods to:

• Classify discovered entities
• Normalize organizational information
• Infer potential relationships
• Detect patterns or changes
• Generate insights
• Identify potential risks or opportunities
• Produce recommendations
• Support natural-language interaction with Organizational Twin data

AI-generated results may be incomplete, inaccurate, or require additional context. Skuiddy is intended to support human analysis and decision-making and should not be treated as the sole authority for legal, security, financial, compliance, employment, operational, or other high-impact decisions.

Where supported, Skuiddy may provide source, provenance, confidence, or discovery information to help users evaluate generated results.

We may share information with:

Service Providers

We may use service providers that support cloud infrastructure, hosting, authentication, data storage, monitoring, security, communications, analytics, customer support, and AI and machine-learning capabilities. Service providers may process information only as necessary to perform services on our behalf and subject to applicable contractual obligations.

Customer-Authorized Integrations

We may exchange information with third-party services when directed or authorized by the customer.

Legal and Safety Requirements

We may disclose information when reasonably necessary to:

• Comply with applicable law or legal process
• Respond to lawful government requests
• Protect the rights, property, or safety of LumaSeer, our customers, users, or others
• Investigate fraud, abuse, or security incidents
• Enforce applicable agreements

Business Transactions

Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable legal requirements.

We use administrative, technical, and organizational safeguards designed to protect information. Depending on the service configuration, these safeguards may include:

• Encryption in transit
• Encryption at rest
• Role-based access controls
• Tenant isolation
• Least-privilege access
• Authentication and authorization controls
• Secrets-management practices
• Audit logging
• Security monitoring
• Environment separation
• Backup and recovery controls
• Secure software-development practices

No system can guarantee absolute security. Customers are responsible for appropriately configuring their accounts, users, integrations, Smart Sensor permissions, and connected systems.

Skuiddy is designed to avoid storing integration secrets directly in ordinary application records.

Credentials may be stored through approved secrets-management services or represented through secure secret references, depending on the deployment and integration configuration.

Customers should grant Smart Sensors only the permissions necessary for their intended discovery scope. Read-only and least-privilege access should be used whenever supported.

We retain information for as long as reasonably necessary to:

• Provide the services
• Maintain Organizational Twin history
• Meet contractual obligations
• Support audit and security requirements
• Resolve disputes
• Enforce agreements
• Comply with applicable law

Retention periods may vary based on customer configuration, subscription terms, data type, and legal requirements.

Information may be processed in the United States or other locations where LumaSeer or its service providers operate.

Where required, we use appropriate safeguards for international data transfers.

Depending on your location and applicable law, you may have rights regarding personal information, including rights to:

• Request access
• Request correction
• Request deletion
• Request a copy
• Restrict certain processing
• Object to certain processing
• Withdraw consent where processing is based on consent

If your Skuiddy account is managed by an organization, requests involving organizational account data should generally be directed to that organization.

Skuiddy may use cookies, local storage, and similar technologies to:

• Maintain authenticated sessions
• Remember preferences
• Improve security
• Understand platform usage
• Improve performance

Additional information may be provided through a future Cookie Notice or consent-management interface.

Skuiddy is designed for organizations and professional users. It is not intended for children under 13, and we do not knowingly collect personal information directly from children.

We may update this Privacy Policy as Skuiddy evolves or as legal, regulatory, operational, or technical requirements change.

We will update the “Last Updated” date when revisions are published. Material changes may also be communicated through the platform or other appropriate channels.

For privacy questions or requests, contact: