This Privacy Notice for Lume (“we,” “us,” or “our”) describes how and why we may access, collect, store, use and share (“process”) your personal information when you use our services.

Summary of key points

We process information based on how you interact with Lume, the choices you make and the features you use. We do not process sensitive personal information or sell personal information. Depending on where you live, you may have rights to access, correct, copy or delete your information.

1. What information do we collect?

Personal information you disclose to us

We collect personal information you voluntarily provide when you register for the Services, express an interest in our products, participate in activities through the Services or contact us. This may include:

  • Your name.
  • Your email address.
  • Contact and authentication information.
  • Support requests and other information you choose to provide.

We do not intentionally process sensitive personal information. Information you provide must be true, complete and accurate, and you should notify us when it changes.

Payment information

When you purchase a subscription, payment information is handled and stored by Stripe. Lume does not store complete payment-card numbers. Stripe’s privacy notice is available at stripe.com/privacy.

Google API data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

2. How do we process your information?

We may process information to:

  • Create, authenticate and manage user accounts.
  • Provide, improve and administer the Services.
  • Respond to inquiries and provide support.
  • Send administrative and service-related information.
  • Fulfill and manage subscriptions, payments, returns and exchanges.
  • Protect the Services, prevent fraud and comply with legal obligations.

We process information only when we have a valid legal reason, including performing our agreement with you, pursuing legitimate business interests, complying with law or acting with your consent.

3. When and with whom do we share personal information?

We may share information with contracted service providers that help us deliver authentication, hosting, payment, AI and support functions. We may also share or transfer information during negotiations for, or completion of, a merger, financing, sale of company assets or acquisition.

We have not sold personal information or shared it for cross-context behavioral advertising in the preceding 12 months, and we do not intend to do so.

4. Do we offer artificial intelligence-based products?

Yes. Lume offers development features powered by artificial intelligence, machine learning and related technologies. Information submitted to an AI feature may be processed to provide the requested functionality.

Personal information used by our AI products is handled according to this Notice and our agreements with relevant providers. Avoid including unnecessary personal, confidential or sensitive information in prompts or project context.

5. How do we handle social logins?

You may register or sign in using supported third-party accounts such as Google or GitHub. When you do, we receive profile information authorized by that provider, which commonly includes your name, email address, provider identifier and profile picture.

We use this information only as described in this Notice or as otherwise disclosed through the Services. Third-party providers control their own processing, so you should review their privacy notices and account settings.

6. How long do we keep your information?

We retain personal information only for as long as necessary for the purposes described in this Notice, unless a longer period is required or permitted by law. When there is no ongoing business need, we will delete or anonymize the information. If immediate deletion is not possible, such as within backups, we will securely isolate the information until deletion is possible.

7. Do we collect information from minors?

We do not knowingly collect, solicit or market personal information to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that information from someone under 18 was collected, we will deactivate the account and take reasonable measures to delete it. Contact support@lumeide.com if you believe this has occurred.

8. What are your privacy rights?

Depending on your country, province or state, you may have rights to know whether we process your information, access it, correct inaccuracies, obtain a portable copy, request deletion, restrict or object to processing, or withdraw consent.

Withdrawing consent does not affect processing that occurred before withdrawal or processing based on another lawful ground. We may need to verify your identity before acting on a request.

9. Controls for Do-Not-Track features

Some browsers and devices provide a Do-Not-Track (“DNT”) setting. Because no uniform standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to them. If a standard we must follow is adopted, we will describe our response in an updated Notice.

10. Do United States residents have specific privacy rights?

Residents of certain US states may have additional rights under applicable state privacy laws. These may include rights to access, correct, delete or obtain a copy of personal data; opt out of its sale, targeted advertising or qualifying profiling; obtain information about disclosures; and appeal a decision regarding a request.

  • We will not discriminate against you for exercising a privacy right.
  • An authorized agent may submit a request where permitted by law.
  • We may request information needed to verify identity or authority.
  • If an appeal is available, instructions will be included with our decision.

California residents may also request information permitted by the “Shine the Light” law regarding disclosures for direct-marketing purposes.

11. Do we make updates to this Notice?

Yes. We may update this Notice as necessary to reflect changes to our Services or applicable law. The revised version will display a new “Last updated” date. If changes are material, we may provide a prominent notice or direct notification.

12. How can you contact us about this Notice?

Questions or comments about this Notice may be sent to support@lumeide.com.

13. How can you review, update or delete your data?

To request access, correction, deletion or a copy of personal information, submit a data subject access request or email support@lumeide.com. We will consider and act on requests according to applicable data-protection law.

Privacy Policy — Lume

This Privacy Policy explains how Lume collects, uses, shares and protects personal information when you use our websites, applications, AI features and related services (the “Service”).

1. Information we collect

Information you provide

  • Account information, such as your email address and authentication details.
  • Profile, support, survey and communication information.
  • Prompts, files, code and other content you choose to submit to the Service.
  • Billing details processed by Stripe. Lume does not store complete payment-card numbers.

Information collected automatically

  • Device, browser, operating-system, language and approximate location information.
  • Log data, IP address, timestamps, referring pages and diagnostic information.
  • Usage information, including features used, model requests, token usage and performance.
  • Cookies and local-storage data used for sessions, preferences and security.

2. How we use information

We use information to:

  • Provide, operate, maintain and personalize the Service.
  • Authenticate accounts and protect users, systems and data.
  • Process subscriptions, payments and account changes.
  • Respond to support requests and communicate service updates.
  • Monitor reliability, debug errors and improve product performance.
  • Prevent fraud, abuse, security incidents and violations of our Terms.
  • Comply with legal obligations and enforce agreements.

3. AI processing and project content

When you use AI features, selected prompts, code, files and contextual information may be transmitted to the model provider you select. The information sent depends on your request, configuration and connected provider.

Do not submit personal information or confidential material that is unnecessary for your request. If you connect your own model-provider account, that provider’s terms and privacy policy also apply.

4. Authentication and payments

We use Supabase to manage authentication and account sessions. If you sign in with Google or GitHub, we receive basic account information authorized by that provider, such as your email address and provider identifier.

Stripe processes subscription and payment information. Stripe may collect payment details, billing addresses, device information and transaction data under its own privacy policy.

5. How we share information

We may share information with:

  • Infrastructure, authentication, payment, analytics and support providers.
  • AI model providers selected or configured through the Service.
  • Professional advisers and authorities when legally required.
  • A successor in connection with a merger, financing, acquisition or sale of assets.

We do not sell personal information for money.

6. Legal bases

Where applicable law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests in operating and securing the Service, comply with legal obligations, and rely on consent where required.

7. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary by data type, account status and legal requirements. We may retain de-identified information that cannot reasonably identify you.

8. Security

We use administrative, technical and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials and local development environment.

9. International data transfers

Lume and its providers may process information in countries other than yours. Where required, we use recognized safeguards for international transfers, such as contractual protections.

10. Your privacy rights

Depending on your location, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, or withdraw consent. You may also have the right to complain to a data-protection authority.

To submit a request, contact support@lumeide.com. We may need to verify your identity before fulfilling a request.

11. Children’s privacy

The Service is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children below that age.

12. Changes to this Policy

We may update this Policy to reflect changes to the Service or law. We will update the effective date and provide additional notice when required.

13. Contact

Questions or requests concerning privacy may be sent to support@lumeide.com.