Privacy Policy

Lumify AI, Inc. ("Lumify", "we", "us") respects your privacy. This policy explains how we collect, use, and protect your information when you use lumify.ai and the Lumify API.

1. Information we collect

• Account data: name, email address, password (hashed), billing details.
• API usage data: request timestamps, endpoints called, response codes, credit consumption. No request payloads are stored.
• Log data: IP address, user agent, and other standard server logs retained for 90 days.

2. How we use your information

• To provide, operate, and improve the Service.
• To process billing and prevent fraud.
• To send transactional emails (account verification, password reset, billing receipts).
• To send product updates if you have opted in.

3. Data sharing

We do not sell your data. We share it only with:

• Stripe — payment processing.
• Google Cloud Platform — infrastructure and data storage.
• Law enforcement when required by law.

4. Data retention

Account data is retained while your account is active and for 30 days after deletion. API usage logs are retained for 12 months.

5. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting our team. Account deletion removes all personal data within 30 days.

6. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest) and strict access controls. However, no system is completely secure.

7. Changes to this policy

Material changes will be communicated by email at least 14 days in advance.

8. Contact

Privacy questions? Contact us or email [email protected].