Privacy Policy

Introduction

Lumio ("we", "our", "us") operates the heylumio.ai platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account information

When you create an account, we collect your name, email address, and password (stored securely using industry-standard hashing). If you sign up via a social provider, we receive your name and email from that provider.

Organization and workspace data

We store organization names, workspace names, store URLs, brand profile information (product vertical, brand adjectives, customer persona descriptions), and team member information you provide.

Product catalog data

When you import a catalog, Lumio scans your publicly accessible sitemap and product pages. We collect and store product titles, descriptions, pricing, JSON-LD structured data, and other publicly available product information. We do not access any private or authenticated areas of your store.

Usage data

We collect information about how you interact with our service, including pages visited, features used, credit consumption, and scoring/enrichment activity.

Payment information

Payment processing is handled by Stripe. We do not store credit card numbers or sensitive payment details on our servers. Stripe's privacy policy governs their handling of your payment information.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Lumio platform
• Score your product data for AI readiness
• Generate enriched product content using AI models
• Process transactions and manage your subscription
• Send service-related communications (account verification, billing, feature updates)
• Respond to support requests
• Monitor and analyze usage patterns to improve our service

AI Processing

Lumio uses third-party AI models to score and enrich your product data, generate embeddings for your brand context, and benchmark how your products surface in AI shopping tools. Depending on the feature, we send product titles, descriptions, structured data, and brand-context content to Anthropic (Claude), OpenAI, Google, and Perplexity. This data is used solely to provide these features. Anthropic does not use data submitted through its API to train its models.

When you upload brand documents, the original files are stored in object storage provided by Cloudflare and their text is processed to build your workspace's brand context. See Subprocessors for the full list of providers.

AI Chat Assistant

Our website features an AI-powered chat assistant ("Lucy") that can answer questions about Lumio's products and services. When you use the chat assistant:

• Messages you send are transmitted to Anthropic's Claude API for processing. Anthropic does not use this data to train AI models.
• Chat transcripts (your messages and the assistant's responses) are stored for service improvement and support purposes.
• Contact information — if you choose to submit your email or other details through the chat lead form, this information is sent to our CRM system for follow-up.
• Session data — we use a session cookie to maintain your conversation context. Sessions expire automatically and are not used for tracking.

Chat transcripts are retained for up to 90 days and then deleted. You may request deletion of your chat data at any time by contacting privacy@heylumio.ai.

Data Sharing

We do not sell your personal information. We share data only with:

• Service providers (subprocessors) — third-party providers who process data on our behalf to operate the service. See the Subprocessors section below for the full list.
• Your team members — Other members of your organization can see shared workspace data
• Legal requirements — When required by law, subpoena, or to protect our rights

Subprocessors

We engage the following third-party service providers ("subprocessors") to process data on our behalf. Each is bound by contractual obligations to protect your data and to use it only to provide their service to us.

• Railway — application hosting and database infrastructure
• Cloudflare — object storage for uploaded brand documents, DNS, and content delivery
• Anthropic — AI scoring, enrichment, and the website chat assistant
• OpenAI — AI embeddings and benchmarking
• Google — AI benchmarking, Google Analytics integration, and sign-in with Google
• Perplexity — AI benchmarking
• Stripe — payment processing and subscription billing
• Resend — transactional and service email delivery
• Customer.io — product and marketing communications and related analytics
• Sentry — application error monitoring
• Pydantic Logfire — application performance and reliability monitoring

We update this list as our providers change and reflect material changes by updating the "Last updated" date above. For questions about our subprocessors, contact privacy@heylumio.ai.

Data Retention

We retain your account and catalog data for as long as your account is active. If you delete your account, we will delete your personal information and catalog data within 30 days, except where we are required to retain it for legal or billing purposes.

Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and secure infrastructure hosting. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your catalog and enrichment data
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@heylumio.ai.

Cookies

We use essential cookies to maintain your session and remember your workspace preference. We do not use third-party tracking cookies or advertising cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, contact us at privacy@heylumio.ai.