Privacy Policy

Who we are

Hire Lucy (hirelucy.com) is operated by MRGN VENTURES LTD, trading as Hire Lucy, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

We are the data controller for the personal data described on this page. For anything privacy related, email hello@hirelucy.com and a human will reply.

What we collect

Account details: your name, email address and workspace settings.

Site data: the pages Lucy crawls on the websites you connect, plus keyword and performance data you import or authorise from Search Console.

Product usage: basic logs about actions taken in the dashboard and by the automation loop, used to debug and improve the service.

Why we use it, and our legal basis

To run the service you asked for — researching topics, drafting articles, publishing them and reporting on results. Legal basis: performance of a contract.

To keep the service secure and reliable — rate limiting, abuse prevention, logging and debugging. Legal basis: legitimate interests.

To contact you about your account, and to send occasional product news you can unsubscribe from. Service emails are contractual; marketing emails rely on consent or legitimate interests.

To meet legal obligations such as tax, accounting and lawful requests. Legal basis: legal obligation.

We do not sell your data, and we do not use your site content to train third-party models beyond generating your own output.

Who we share it with

Paddle.com Market Ltd is our reseller and Merchant of Record. When you buy a subscription, Paddle receives your name, email, billing address and payment details in order to process the payment, manage the subscription, handle sales tax and VAT, issue invoices, and process refunds and chargebacks. Paddle acts as a controller of that checkout data under its own privacy notice at paddle.com/legal/privacy. We never see or store your full card details.

Hosting and database infrastructure, AI model providers used to draft and review content, search-data providers used for keyword and ranking data, and transactional email delivery. Each processes data only to deliver the service, under contract and limited to what it needs.

Professional advisers (legal, accounting) and authorities where we are required by law.

Security

Data is encrypted in transit and at rest. Every record is tied to your account and protected by row-level access rules, so no other customer can read your sites, articles or metrics. Access by our team is limited to the people who need it to support you, and privileged database functions are restricted to server-side code.

No system is perfect — if we ever suffer a breach affecting your data, we will notify you and any relevant regulator without undue delay.

How long we keep it

Account and content data is retained while your workspace is active. When you delete a site, its crawl data, articles and metrics are removed with it.

Deleting your account removes your personal data within 30 days, except where we must keep records for legal or accounting reasons.

Your choices

You can export your data, disconnect any integration, or delete a site at any time from settings.

To request access, correction or deletion of your personal data, email hello@hirelucy.com and we will respond within 30 days.

Cookies

We use essential cookies to keep you signed in. We do not use advertising cookies.

Contact

Privacy questions go to hello@hirelucy.com.