Privacy Policy
This policy explains what personal and business data TudoIQ collects, how we use and protect it, who we share it with, and the choices you have. TudoIQ is operated by Lucro Financial Inc ("TudoIQ," "we," "us").
Our role: processor and controller
For the financial and operational data that a firm or its clients enter or connect into TudoIQ, we act as a data processor — we process it on our customer's instructions to provide the service. For account and billing information about the people who administer TudoIQ, and for our own website, we act as a data controller. Where we act as a processor, a Data Processing Agreement is available to customers on request.
What we collect
We do not ask for or store your passwords to third-party services. Connections are made through the provider's official authorization flow and can be revoked at any time.
How we use data
- To provide, maintain, and secure the service and your account.
- To keep an audit trail of sensitive actions for your internal controls.
- To communicate with you about the service (sign-in links, security and service notices).
- To detect, prevent, and respond to fraud, abuse, and security incidents.
- To meet legal, tax, and financial record-keeping obligations.
We do not sell your data, and we do not use your customer content to train external/third-party AI models.
How we share data
We share data only with the infrastructure subprocessors needed to run the service (hosting, encrypted file storage, transactional email, and identity/SSO providers), each bound by its own data-protection obligations. The current list is published on our Security page. We may also disclose data when required by law, or to protect the rights and safety of our users and the public. If we are ever involved in a merger or acquisition, we will notify affected customers.
Security
We protect data with encryption in transit and at rest, per-tenant isolation enforced at the database layer, single sign-on, mandatory two-factor authentication for non-federated sign-ins, role-based access with segregation of duties, and audit logging. Details are on our Trust & Security page.
Data retention
We retain customer content for the life of the account and for a limited period afterward to allow reactivation and to meet legal obligations, after which it is deleted from active systems and ages out of backups on the normal cycle. You can request export or deletion at any time.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email privacy@tudoiq.com. If TudoIQ processes data on behalf of your firm, we will direct your request to that firm as the controller where appropriate.
International transfers
TudoIQ is hosted in the United States. If you access the service from outside the U.S., your data will be transferred to and processed there under appropriate safeguards.
Children
TudoIQ is a business product and is not directed to children under 16. We do not knowingly collect data from children.
Changes to this policy
We will post material changes here and update the effective date. Continued use of the service after a change means you accept the updated policy.
Contact
Privacy questions and requests: privacy@tudoiq.com. Company: Lucro Financial Inc, 4808 S Forrestville Ave, Chicago, IL 60615.