Privacy Policy

This Privacy Policy explains how Lumina CRM (“Lumina”, “we”, “us”), operated by Luminatech, collects, uses, and protects information when you use our website and customer relationship management application (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

Information you provide

• Account details — your name, username, email address, and password when you create an account or are invited to a workspace.
• Workspace content — leads, clients, deals, notes, files, and other data you or your team add to the Service.
• Communications — messages you send us for support or feedback.

Information from Google Sign-In

If you choose to sign in with Google, Google shares a limited set of profile information with us based on the permissions you grant — specifically your name, email address, and profile picture. We use this only to create and secure your account and to identify you within your workspace. We request the minimum scopes needed to sign you in and do not access your Gmail, Google Drive, contacts, or other Google services.

Information we collect automatically

• Usage and device data — such as IP address, browser type, pages viewed, and timestamps, used to operate and improve the Service.
• Cookies — we use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. See “Cookies” below.

2. How we use information

• To provide, maintain, and secure the Service and your workspace.
• To authenticate you and manage roles and permissions within your team.
• To send transactional emails (for example, invitations, email verification, and password resets).
• To respond to your requests and provide customer support.
• To detect, prevent, and address abuse, fraud, or security issues.
• To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share it only as needed to run the Service:

• Within your workspace — your account information is visible to other members and administrators of the workspace you belong to.
• Service providers — vetted vendors who process data on our behalf (for example, cloud hosting, file storage, and email delivery), bound by confidentiality and data-protection obligations.
• Legal and safety — when required by law or to protect the rights, safety, and security of users and the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Information obtained through Google Sign-In is used and shared in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

4. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated personal data by contacting us; we will delete or anonymize it unless we are required to retain it for legal, security, or legitimate business purposes.

5. Security

We protect your data with encryption in transit (HTTPS), encryption of sensitive stored values, role-based access controls, and tenant isolation so each workspace’s data is kept separate. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

6. Cookies

We use only strictly necessary cookies: a session cookie to keep you signed in and a CSRF token cookie to protect form submissions. We do not use advertising or third-party tracking cookies.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. If you signed in with Google, you can also review and revoke Lumina’s access at any time in your Google Account permissions.

8. Children’s privacy

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

9. International users

Your information may be processed and stored in countries other than your own. Where required, we use appropriate safeguards for such transfers.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at info@luminatech.org.