Lumo (“we”, “us”, “our”) operates the AI platform available at ai.lumowp.com. This Privacy Policy explains what personal data we collect, why we use it, how long we keep it, and your choices.
By creating an account, signing in, purchasing credit, or using our dashboard or API, you acknowledge this policy.
1. Scope
This policy applies to the Lumo website, user dashboard, API, and related communications. It does not replace separate agreements where explicitly stated.
Lumo uses email-based authentication and international payment methods only. We do not send SMS for authentication or account alerts on Lumo.
2. Data we collect
2.1 Account information
- Email address (sign-in, verification, and account recovery)
- Display name and internal user identifiers
- Subscription status, roles, and security events (e.g. token revocation)
2.2 Billing and payments
- Order history, amounts, currency, payment status, and reference IDs
- Payment method selected (e.g. PayPal or other international rails enabled for your account)
- Lumo does not store full card numbers; payments are processed by licensed payment providers.
2.3 AI service usage
- Prompts, files, and content you submit
- Model outputs and session metadata
- Credit/token consumption and usage logs for billing and rate limits
2.4 API keys
- Key labels, scopes, usage metrics, IP addresses, and request metadata for security
2.5 Support
- Messages you send through support tickets or email
2.6 Technical data
- Cookies and session identifiers
- Error, performance, and access logs
- Anti-abuse and rate-limiting signals
3. How we use data
- Provide, maintain, and improve the service
- Authenticate users and protect accounts
- Bill for credit, manage subscriptions, and prevent fraud
- Respond to support requests
- Comply with law and resolve disputes
- Aggregate analytics to improve reliability (we do not sell personal data for third-party advertising)
4. Legal bases (where applicable)
Depending on your region, we process data based on contract performance, legitimate interests (security, fraud prevention), consent where required, and legal obligations.
5. Sharing with processors
We use infrastructure, AI model, payment, email, and hosting providers. They access data only as needed to deliver the service under appropriate safeguards.
We do not sell personal information.
We may disclose information if required by law or to protect rights, safety, and integrity of the platform.
6. International transfers
Data may be processed in countries other than your own. Where required, we use reasonable contractual and technical safeguards.
7. Retention
Retention depends on data type:
- Active accounts: until deletion or a valid erasure request
- Billing records: as required for tax, accounting, and legal compliance
- Security/API logs: for a reasonable period
- AI inputs/outputs: while needed to provide history, support, or legal compliance
After retention periods, data is deleted or anonymized unless law requires otherwise.
8. Cookies and similar technologies
We use cookies and similar technologies in these categories:
- Necessary — authentication, security, locale, and core site operation (always on)
- Analytics — optional error/reliability diagnostics (for example Sentry session replay). These load only after you opt in
- Marketing — not used on Lumo today; the preference exists so you can keep them off
On first visit we show a cookie banner so you can Accept all, Reject non-essential, or save preferences. You can reopen choices anytime from Cookie settings in the footer.
You can also limit cookies in your browser; necessary cookies may still be required for sign-in.
9. Security
We apply reasonable technical and organizational measures. No system is perfectly secure.
10. Your rights
Depending on applicable law (including GDPR where it applies), you may have rights to access, correct, delete, restrict, or object to processing, to data portability where feasible, and to withdraw consent for optional cookies/analytics at any time via Cookie settings without affecting the lawfulness of prior processing.
Contact us using the details below. We may need to verify your identity. You may also lodge a complaint with your local supervisory authority.
11. Children
Lumo is not directed to children below the age required for independent consent in their jurisdiction. If you believe we collected a child’s data improperly, contact us for deletion.
12. Changes
We may update this policy. The latest version and date appear on this page. Continued use after changes constitutes notice, unless law requires additional consent.
13. Contact
Brand: Lumo
Email: hello@ai.lumowp.com
Website: ai.lumowp.com
Support: https://ai.lumowp.com/dashboard/support
For privacy requests, include “Privacy” in the subject line.