Privacy Policy

Who we are

Lantern is a software product operated by Citivision Pty Ltd (ABN 27 668 249 563). Lantern helps care providers build stronger organisations with confidence. This Privacy Policy explains how we handle information when you visit our website or use Lantern.

For privacy and general support questions, contact support@lanternlite.com.au. For billing enquiries, contact accounts@lanternlite.com.au.

Information we collect

Account information. When you create an account we may collect your name, email address, and sign-in details.

Organisation information. You may provide details about your organisation, such as its name, contact details, and settings you choose in Lantern.

Participant and workforce information. Customers may upload or enter information about participants, team members, and related documents or evidence so they can run their organisation in Lantern. That information belongs to the customer organisation that uploads it. We process it to provide the service those organisations have asked us to provide.

Usage and technical information. Like most online services, we may collect limited technical data such as browser or device class, pages visited, active engagement time, referral or campaign tags, and approximate location derived from the connection. First-party marketing analytics use a pseudonymous browser identifier. We do not retain the raw IP address in the marketing-journey tables.

Billing information. When paid subscriptions are activated, payment processing may be handled by third-party payment providers such as Stripe. Lantern does not store full payment-card details itself.

How we use information

We use information to:

• provide, maintain and improve Lantern;
• create and manage accounts;
• communicate with you about the service;
• keep the platform safe and secure; and
• meet legal obligations where they apply.

We do not sell your personal information.

Cookies

We may use cookies and similar technologies that are needed for the website and service to work (for example, to keep you signed in).

On our public and trial-entry pages we use first-party analytics to understand page journeys, active engagement, plan-calculator use, campaign attribution and whether a free trial or paid subscription follows. We may also use Google Analytics 4 and Microsoft Clarity on the public marketing pages. These tools may set cookies or similar identifiers.

We configure analytics so it does not intentionally collect participant names, worker names, emails, organisation names, uploaded document names, form contents, keystrokes or care records. Clarity is set up with input masking. Session replay and third-party analytics are limited to public marketing pages and are not used across authenticated product workspaces. First-party journey events extend only to safe entry pages such as Sign in and Plan selection; they record the action, not what a person types. We honour supported browser Do Not Track and Global Privacy Control signals for the first-party journey tracker.

How we keep information secure

We take practical steps to protect information, including secure hosting, access controls, and encrypted connections where appropriate. No online service can guarantee complete security, but we work to reduce risk and respond carefully if something goes wrong.

Third-party services

We use trusted providers to run Lantern. Depending on how you use the service, that may include:

• Supabase — for authentication, database and storage;
• Hosting — to make the website and application available online;
• Email — to send service-related messages when needed;
• Payment providers — such as Stripe, once billing is activated, to process subscription payments (Lantern does not store full payment-card details itself);
• Google Analytics 4 — for aggregated public-website usage and high-level conversion events; and
• Microsoft Clarity — for masked session insights on public marketing pages to help us improve clarity and usability; and
• Australian Business Register ABN Lookup — when an organisation owner deliberately asks Lantern to check the public status and registered details of an ABN.

Those providers only receive what is needed to perform their role for us, and they are expected to protect information appropriately.

Customer responsibility

If you use Lantern for your organisation, you are responsible for making sure you have a lawful basis to collect and upload participant, workforce and other information into the platform, and for how your team uses that information inside Lantern.

Your rights

Depending on Australian privacy law and your situation, you may be able to ask us to access or correct personal information we hold about you, or to raise a privacy complaint. To request access or correction, or to raise a privacy concern, email support@lanternlite.com.au.

If you are a participant or worker whose information was uploaded by a care organisation, please contact that organisation first. They control the records they keep in Lantern.

How long we keep information

We keep information for as long as needed to provide the service, meet legal requirements, and resolve disputes. When an account is closed, we will delete or de-identify information within a reasonable time, unless we need to keep it for legal reasons. Records are not automatically deleted merely because a trial or subscription ends. First-party marketing analytics are designed for a maximum 13-month retention period and are then removed through the restricted operator maintenance process.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date on this page. If a change is significant, we will take reasonable steps to let account holders know.

Contact

Privacy and support: support@lanternlite.com.au

Billing enquiries: accounts@lanternlite.com.au