Legal
Privacy policy
Effective from 2 November 2026
This policy explains what personal data MB Pricelucid processes on pricelucid.lt and in the Pricelucid app (app.pricelucid.lt), why we do it, how long we keep it and what rights you have.
Competitor price monitoring itself does not use personal data: we only collect product prices, promotions and product descriptions that are publicly visible in online stores.
1. Who processes your data
The data controller is MB Pricelucid, Lithuania. For any data protection question, write to info@pricelucid.lt.
2. What data we process, why and for how long
Contact form and emails to us
- Data
- Name, email, company, online store address, phone and message (if you provide them), plus the time of the enquiry and IP address.
- Purpose
- To reply to your enquiry and, if you ask, prepare a sample with your products. The IP address is used only to protect the form from abuse.
- Legal basis
- Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)); protection from abuse – legitimate interest (GDPR Art. 6(1)(f)).
- Retention
- 12 months from the enquiry, then deleted automatically. If we sign a contract – for the duration of our cooperation.
Pricelucid app users (client employees)
- Data
- Email, name (if provided), company and role; password hash (we never know the password itself); last login time; who approved or rejected product matches and sent an updated report, and when.
- Purpose
- To give access to the app, provide the service to your employer under the contract, keep it secure and record who made product matching decisions.
- Legal basis
- Legitimate interest – performing the contract with your employer and keeping the service secure (GDPR Art. 6(1)(f)).
- Retention
- While the account exists. When the account is deleted, login data is deleted immediately; your email stays attached to matching decisions you made for as long as the contract with your employer is in force.
Report recipients
- Data
- Email addresses the client specifies for receiving reports.
- Purpose
- To send daily price reports.
- Legal basis
- Legitimate interest – performing the contract with the client (GDPR Art. 6(1)(f)).
- Retention
- Until the client removes the address or the contract ends.
Technical logs
- Data
- Server logs of requests and errors; the number of failed login attempts per email and IP address.
- Purpose
- Running the app, fixing errors and protecting against password guessing.
- Legal basis
- Legitimate interest – keeping the service secure (GDPR Art. 6(1)(f)).
- Retention
- Failed logins – 15 minutes (in server memory only). Server log size is limited; the oldest entries are overwritten automatically.
3. Cookies
The pricelucid.lt website does not use cookies – it has no analytics, advertising or social media plugins, and fonts are loaded from our own site.
The app.pricelucid.lt app uses only strictly necessary cookies, without which it would not work, so no consent is required:
pf_session– login session; valid for 14 days or until you log out.pf_flash– a one-time message to the administrator after an action; valid for up to 2 minutes.pf_lang– the selected app language (Lithuanian or English); valid for 1 year.
4. Who we share data with
We do not sell data or use it for advertising. It is processed only by the following service providers, who act on our instructions under data processing agreements:
- DigitalOcean, LLC – server for the app and the pricelucid.lt website. The server is located in Frankfurt (Germany, EU). The company is registered in the USA; any data transfer is covered by its EU-U.S. Data Privacy Framework certification or, failing that, the EU Standard Contractual Clauses.
- Brevo (Paris, France, EU) – sending emails: reports, login links and contact form enquiries.
We may also disclose data to public authorities where required by law.
5. How we protect data
- All connections are encrypted (HTTPS).
- Passwords are stored only as an irreversible hash (scrypt); session keys are also stored only as hashes.
- Each client's data is kept separate – other clients cannot see it.
- After several failed login attempts, access is temporarily locked.
- Only persons authorised by MB Pricelucid have access to the server.
6. Your rights
You have the right to:
- know whether we process your data and access it;
- have inaccurate data corrected;
- have your data erased or its processing restricted;
- object to processing based on legitimate interest;
- receive your data in a common machine-readable format (data portability).
Send your request to info@pricelucid.lt. We will reply within one month. If you are a client's employee, for some matters (e.g. deleting your account) you can also contact your employer.
If you believe your data is processed improperly, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt) or the data protection authority in your country. We do, however, suggest contacting us first – we will try to resolve the matter quickly.
7. Changes
If our data processing changes (e.g. we start using website traffic statistics), we will update this policy and the date at the top. We will notify app users of material changes by email.
This is a translation. In case of discrepancies, the Lithuanian version prevails.