Privacy Policy — Lumify AI Inc.

Last updated: [DATE]

Lumify AI Inc. ("Lumify," "we," "us," or "our") operates the Lumify AI platform at lumifyai.com and app.lumifyai.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, how we store and share it, and the choices you have. By using the Service you agree to the practices described here.

1. Information we collect

Account information via Google Sign-In. When you sign in with Google, Google shares a limited set of profile information with us based on the permissions you grant:

  • Your name
  • Your email address
  • Your Google profile picture
  • A unique Google account identifier

We request only these basic profile and email scopes. We do not request access to your Gmail, Google Drive, Google Calendar, contacts, or any other Google Workspace data.

Information you provide. Account details, prompts and inputs you submit to generate content, and any support communications you send us.

Usage and technical data. Log data such as IP address, browser type, device information, timestamps, feature usage, and credit-transaction records generated as you use the Service.

Payment information. Payments are processed by Stripe. We do not collect or store your full payment card details; Stripe handles that directly under its own privacy terms.

2. How we use Google user data

We use the Google user data described above solely to provide and improve user-facing features of the Service, specifically to:

  • Create and authenticate your Lumify account
  • Display your name, email, and profile picture in your account and workspace
  • Associate your generations, credit balance, and history with your account
  • Communicate with you about your account and the Service

Our use of Google user data is limited to the practices disclosed in this Privacy Policy. We do not use Google user data for any purpose other than providing or improving these user-facing features.

AI/ML affirmation. Lumify AI does not use Google Workspace APIs or any Google user data to develop, improve, or train generalized or non-personalized artificial intelligence and/or machine learning models. Google user data is never used as training data for any model.

3. How we share information

We do not sell your personal information. We share information only as follows:

  • Service providers who process data on our behalf under contract — for example, Supabase (authentication and database), our cloud GPU providers (compute for generation), and Stripe (payments). These providers may only use the data to perform services for us.
  • AI generation providers. When you request a generation, the prompt and inputs you submit may be sent to the third-party model provider that fulfills that request in order to return your result. We do not send your Google profile data to these providers.
  • Legal reasons — if required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Lumify, our users, or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, for security purposes, to comply with applicable law, or as part of a merger or acquisition as described above.

4. Data retention and deletion

We retain your account information and Google profile data for as long as your account is active, and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

You can request deletion of your account and associated personal data at any time by contacting us at [PRIVACY EMAIL] or through your account settings. When you delete your account, we delete or de-identify your personal information, including the Google profile data associated with your account, within [NUMBER] days, except where we are required to retain certain records (for example, transaction records for tax, accounting, or legal compliance) for a longer period.

You may also revoke Lumify's access to your Google account at any time through your Google Account permissions page at https://myaccount.google.com/permissions.

5. Data security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS), access controls, and authenticated APIs. No method of transmission or storage is completely secure, but we work to protect your data against unauthorized access, alteration, and disclosure.

6. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at [PRIVACY EMAIL]. You can also update your basic profile information through your account settings.

7. Children's privacy

The Service is not directed to children under [13/16], and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

8. International users

Lumify is operated from the United States. If you access the Service from outside the U.S., you understand your information will be processed in the U.S. and other countries where we or our service providers operate.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL and update the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact us

Lumify AI Inc.
[MAILING ADDRESS]
Email: [PRIVACY EMAIL]

This document does not constitute legal advice. Consult a qualified attorney before relying on it, particularly regarding payment data, enterprise customer data, and jurisdiction-specific requirements (GDPR, CCPA, etc.).