Privacy Policy – Lumora
At Lumora, your privacy matters. This page explains what we collect, why we collect it, how we protect it, and the choices you control.
We prioritize minimal data collection and transparent control. If anything here is unclear, reach us — we’ll clarify in plain language.
1. What We Collect
We gather only the technical signals needed for reliability and accessibility:
- Session metrics — page loads, scroll depth, basic engagement and error events.
- Device details — browser type, screen resolution, OS family (no fingerprinting).
- Diagnostics — navigation paths, crash logs, latency/performance timings.
- Voluntary input — messages sent via forms (contact/support).
- Cookie IDs — theme, layout, motion and accessibility preferences.
2. Purpose of Collection
We process this data strictly to improve your journey:
- Ensure stable performance across devices and networks.
- Adapt interface elements (language, time) to your region.
- Detect bugs, optimize navigation flow and loading speed.
- Plan content using anonymous usage patterns.
4. External Tools
We may use privacy-respecting analytics that process anonymized technical data only. Providers must comply with global standards (e.g., GDPR/CCPA aligned).
5. Region Settings
We may adapt language or time format to your general region. We do not request or store precise geolocation.
7. Underage Users
Users under 13 should not submit personal information. If submitted, we’ll remove it in line with child data protection laws.
8. Data Duration
Technical logs are retained only as long as needed to maintain stability. Any user-submitted content is deletable upon request.
9. Your Rights
You can request access, correction, or deletion of data you’ve shared. We honor such requests promptly and respectfully.
10. Security Practices
We employ SSL/TLS, encryption where applicable, least-privilege access and periodic audits. No system is perfect, but we follow best practice.
11. Cross-Border Processing
Depending on locale, diagnostics may be processed in compliant regions under frameworks like GDPR/CCPA and similar laws.
12. Data Requests
Want to see or erase what’s stored? Contact us. We respond within 7 business days with clear next steps.
13. Partner Requirements
Any third-party vendor must meet international compliance and operate with minimal, purpose-bound access.
14. Policy Updates
We may update this policy as laws or the platform evolve. All revisions appear here with transparent summaries.
15. Interpretation
When in doubt, we choose privacy-first interpretation: minimal collection, clear consent, and user control.
16. Contact
Reach us at [email protected] — we’re happy to help.
Last updated: August 2025