Privacy Policy

Lumina ("we," "us," or "our"), operated at getlumina.in, provides an AI-powered audience simulation platform accessible at console.getlumina.in. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By accessing or using Lumina, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

1. Information We Collect

Personal Information You Provide

When you create an account, subscribe to a plan, or contact us, we may collect the following:

• Full name and display name
• Email address
• Google account information (when signing in via Google OAuth), including your name, email, and profile picture
• Payment and billing information processed through Razorpay (we do not store your full card details on our servers)
• Company or organization name (if provided)
• Any other information you voluntarily provide through support requests or feedback

Information Collected Automatically

When you access our platform, we automatically collect certain technical and usage information:

• Device type, browser type, and operating system
• IP address and approximate geographic location
• Pages visited, features used, and actions taken within the platform
• Timestamps and session duration
• Referral URLs and landing pages

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery — To create and manage your account, process subscriptions, and provide access to our simulation platform
• Platform Improvement — To analyze usage patterns, identify bugs, and improve features and performance
• Communication — To send you account-related notifications, billing confirmations, security alerts, and product updates
• Analytics — To understand aggregate trends in how our platform is used, helping us make data-driven product decisions
• Customer Support — To respond to your inquiries and resolve issues
• Legal Compliance — To comply with applicable laws, regulations, and legal processes

3. Third-Party Services and Data Sharing

We do not sell your personal data. We share information only with the following categories of third-party service providers, strictly as needed to operate our platform:

4. Data Storage and Security

Your data is stored on Amazon Web Services (AWS) infrastructure located in secure data centers. We implement the following security measures:

• All data is encrypted at rest using AES-256 encryption
• All data in transit is protected with TLS 1.2 or higher (HTTPS)
• Access to production systems is restricted to authorized personnel with multi-factor authentication
• Regular security audits and vulnerability assessments
• Database backups are encrypted and stored securely

While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Cookies

Lumina uses only essential cookies required for the functioning of our platform:

• Authentication cookies (JWT tokens) — to keep you logged in and maintain your session securely
• Security cookies — to prevent cross-site request forgery and other security threats

We do not use advertising cookies, tracking cookies, or any third-party cookies for behavioral profiling or retargeting purposes.

6. Your Rights

You have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of any inaccurate or incomplete personal data
• Deletion — Request deletion of your personal data and account (subject to legal retention obligations)
• Data Portability — Request an export of your simulation data in a machine-readable format
• Withdraw Consent — Withdraw consent for optional data processing at any time

To exercise any of these rights, please contact us at support@getlumina.in. We will respond to your request within 30 days.

7. Data Retention

We retain your account data and simulation history for as long as your account remains active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax compliance).

Anonymized, aggregated usage data that cannot identify you may be retained indefinitely for analytics and platform improvement purposes.

8. Children's Privacy

Lumina is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a user under 18, we will take immediate steps to delete such information. If you believe a minor has provided us with personal data, please contact us at support@getlumina.in.

9. Legal Compliance

This Privacy Policy is drafted in accordance with:

• The Information Technology Act, 2000 (India)
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
• Other applicable Indian data protection regulations as amended from time to time

We are committed to handling your sensitive personal data or information ("SPDI") as defined under the SPDI Rules with reasonable security practices and procedures.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email (sent to the email address associated with your account) and by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.