Lumoar Privacy Policy

1. Introduction

Welcome to Lumoar ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website (https://www.lumoar.com) and related services (collectively, the "Services").

Please read this policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy. The canonical version of this policy can be found at: https://www.lumoar.com/privacy-policy.html.

2. Information We Collect

We collect information about you in the following ways:

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, such as when you create an account, use our services, contact support, or otherwise communicate with us. This may include:

• Account Information: Name, email address, password, phone number, and managed companies' data.
• Communications: Information you provide when you contact support, participate in surveys, or communicate with us.
• User Content: Data you post, upload, or otherwise submit to our services (e.g., evidence, control notes).

2.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device and usage, including:

• Log Data: IP address, browser type, operating system, referring URLs, pages visited, time spent, device identifiers.
• Usage Data: Features used, actions taken, performance metrics, error logs.
• Location Data: General location derived from IP address, or precise location if permission is granted (e.g., for mobile apps).
• Cookies: We use cookies to authenticate your identity and maintain your signed-in status across our platform. These essential cookies enable core functionality such as security, network management, and account access. Without these cookies, you would need to log in each time you visit a new page.

2.3 Information from Third Parties

We may receive information about you from other sources, including:

• Marketing Partners: We may receive information from partners to supplement our data or for joint marketing activities.
• Public Sources: We may collect information from publicly available sources.

3. How We Use Your Information (Legal Basis)

We use the information we collect for various purposes, relying on specific legal bases for processing (as required by laws like GDPR). These include:

• To provide and maintain our services: Based on Performance of Contract, Legitimate Interest (service operation).
• To process payments and prevent fraud: Based on Performance of Contract, Legal Obligation, Legitimate Interest (security).
• To improve and personalize our services: Based on Legitimate Interest (product improvement), Consent (for non-essential personalization).
• To communicate with you (support, updates, marketing): Based on Performance of Contract (support), Legitimate Interest (service updates), Consent (marketing).
• To ensure security and prevent abuse: Based on Legitimate Interest (security), Legal Obligation.
• To comply with legal obligations: Based on Legal Obligation.
• For analytics and research: Based on Legitimate Interest (understanding usage), Consent (if extensive tracking).

4. How We Share Your Information

We do not sell your personal information in the traditional sense. However, we may share your information with the following categories of third parties for the purposes described:

• Service Providers:Cloud hosting (Digital Ocean and Cloudflare) and analytics tools (Google Analytics)Purpose: To help us operate, provide, and improve our services.
• Business Partners:Integration partners, co-marketing partnersPurpose: To offer complementary services or joint promotions.
• Legal Requirements:Law enforcement, courts, government agenciesPurpose: To comply with legal obligations, subpoenas, or court orders.
• Business Transfers:Acquiring company in case of merger or acquisitionPurpose: As part of a corporate transaction, subject to confidentiality agreements.
• Affiliates:Our parent company or subsidiariesPurpose: For internal administrative purposes and service provision.

5. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to operate and improve our Services, analyze usage, and personalize content and advertising.

The types of cookies we may use include:

• Essential
• Performance & Analytics
• Functionality
• Targeting & Advertising

We use analytics providers like Google Analytics and may work with advertising partners such as Google ads, Meta (Facebook), LinkedIn Ads.

6. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect your personal information. In Lumoar, security is one of the top priorities for us. The evidence files or texts uploaded by you are not publicly accessible. We are using presigned URLs and role-based access checks to make sure your data stays safe. Meanwhile, the policies created and saved by you are publicly accessible via the link.

7. Data Retention

We retain personal information for as long as necessary.

Examples of our retention periods include:

• Account Information: For the duration of the account.
• Log Data: Typically 12-30 days, aggregated/anonymized data retained longer for analytics.

8. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your own, including European Economic Area (EEA) and United States. These countries may have data protection laws that are different from those in your country.

When we transfer personal information internationally, we rely on appropriate safeguards, such as:

• Adequacy Decisions (where applicable)
• Standard Contractual Clauses (SCCs) approved by the European Commission or the UK ICO

9. Your Privacy Rights

Depending on your location and applicable law (such as GDPR in the EEA/UK or CCPA/CPRA in California), you may have the following rights regarding your personal information:

• Right to Rectification: Request correction of inaccurate information.

Exercising Your Rights

You can exercise your rights by contacting us at support@lumoar.com.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you believe we have inadvertently collected information from a child under 18, please contact us immediately at support@lumoar.com so we can take appropriate action.

11. Privacy Choices and Controls

Manage essential cookie preferences through their browser settings Opt out of marketing communications by using the “unsubscribe” link provided in our emails Request access to, correction of, or deletion of their personal information by contacting us at support@lumoar.com Withdraw previously granted permissions (such as location access) via their browser or device settings

You can opt-out of marketing emails by clicking the "unsubscribe" link...

Our services do not currently respond to Do-Not-Track signals.

12. Artificial Intelligence (AI) and Automated Decision-Making

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website. We encourage you to review this policy periodically. The "Effective Date" at the top indicates when this policy was last revised.