Privacy Notice
Launch review copy describing Lumera’s US service and current invited testing. Not yet adopted as the final launch notice.
1. Who is responsible
Lumera is operated by RW Soccer and Tech LLC, a Florida limited liability company. Business address: 10433 SW 26th St, Davie, FL 33324, USA. Contact: support@lumeramanager.com. Lumera’s fictitious-name registration is planned before public launch and has not yet been completed. We manage account administration, support, security and our own operations. For business workspace content, we also process information on the customer’s instructions. Contact us for any privacy request.
2. Information we process
Account information includes your name, email, sign-in identifiers, optional profile image, and any phone number or date of birth you add. We also store your account and communication preferences. Workspace information includes the business or project details and preferences you enter. We process uploaded media, filenames, tags, captions, drafts, campaign plans, schedules and approvals. Sign-in and connected providers may supply verified identity details, account or channel names, profile images, authorization scopes, encrypted access/refresh tokens, publishing receipts and permitted performance data. We never request your social-account password. AI support receives the messages you send and limited recent conversation context. With explicit permission, signed-in troubleshooting also sends saved platform names and aggregate post-status counts. It does not automatically send captions, media, raw errors or credentials. AI-only conversations are not persisted by Lumera. Some common questions receive reviewed preset answers without an AI request. We retain daily aggregate help topics, response sources, outcomes and timing counts for 90 days to improve support. These counts contain no messages, account identifiers, IP addresses or contact details. When you contact our team, we store your messages, contact email and sanitized screenshots for up to 90 days after the last message. Authorized support staff can read these conversations and use audited read-only account views to investigate issues. Guest support replies are delivered by email. For AI-only conversations, the AI provider may retain data under its applicable abuse-monitoring policies even when response storage is disabled.
3. How we use information
We use information to authenticate users, manage workspaces, store content, provide requested AI assistance, deliver posts you approve, display permitted analytics, respond to requests and protect the service. Infrastructure processes network and request information such as IP addresses, browser details, timestamps and error outcomes. We do not sell personal information, share it for cross-context behavioral advertising, or use YouTube API data to train AI models.
4. Providers and disclosures
Cloudflare hosts Lumera’s Workers, database and private media storage. OpenAI processes prompts and relevant content when you request AI assistance. Resend delivers transactional email. Google handles Google sign-in and optional Google Analytics. Connected social platforms receive the authorization and content needed to carry out your requests and follow their own privacy policies. Authorized workspace members can access workspace content. We may disclose limited information to comply with law, protect rights or complete a business transfer with appropriate safeguards. Processing may occur outside your state or the US; we do not promise a particular data residency.
5. Media and social posts
Your Album is private. Approved media may receive an unlisted HTTPS delivery URL so the selected social provider can retrieve it. Anyone who obtains that URL may access the delivery copy until revoked. Removing it from Lumera cannot remove a copy already downloaded or published by a social platform. The destination’s privacy settings control who can see your published post.
6. Cookies and browser storage
Essential storage keeps you signed in and secures sign-in transactions. The Secure, HttpOnly session cookie normally lasts seven days; sign-in/linking transactions normally expire after ten minutes. Browser storage remembers preferences, draft recovery and queued uploads. Clearing it may remove local unsaved work. Google Identity Services loads on supported sign-in screens and follows Google’s own practices. Use Sign out to revoke your current session; clearing a browser cookie alone is not server-side revocation.
7. Optional Google Analytics
Limited Google Analytics may run automatically for visitors located in a recognized US state or Washington, DC when our regional policy is current. Elsewhere, or when location or policy status is uncertain, it loads only after you choose Allow analytics. We use Cloudflare’s country and state classification to select the policy; we do not save that location with your account or send it as an analytics event. When your browser sends Global Privacy Control, we keep optional analytics off, including when you previously allowed it. A saved refusal overrides regional automatic collection. You can choose No analytics or withdraw through Analytics preferences without losing app access. Google receives network information, browser/device characteristics, a cookie identifier and predefined page or screen names. On public marketing pages, when analytics is enabled, we also measure traffic-source categories and approved campaign tags, section visibility, navigation and example interactions, active-time and scroll milestones, waitlist form outcomes, AI-help usage counts without messages, generic errors and site-performance metrics. We do not use session replay, record keystrokes or send form values to analytics. We do not send account names, emails, workspace identifiers, post content, media, social credentials or private authentication links. Advertising features and Google Signals are disabled. Your browser choice and Lumera analytics cookies last up to 180 days, with cookie renewal disabled. Withdrawal stops further collection and removes Lumera analytics cookies; it does not erase data already received by Google. Google’s retention and processing follow the property settings and https://policies.google.com/privacy.
8. Retention and security
We retain working content while needed to provide your service, until you remove it or complete account/workspace deletion. We use access controls, encrypted transport and server-side protection for social authorization secrets. No system eliminates all risk. Restricted media backups expire after seven days, with storage lifecycle deletion normally within an additional day. Database recovery history and limited operational logs follow the hosting provider’s configured retention windows and are isolated from ordinary app use. A restore must reapply deletions and revoked access before service resumes.
9. Google and YouTube data
Lumera uses YouTube API Services for connected YouTube features. Google’s Privacy Policy is at https://policies.google.com/privacy. Disconnecting YouTube removes its locally stored account metadata, performance observations, external publishing identifiers and upload state; it does not delete your own media or captions, or remove videos already on YouTube. We also revoke the stored authorization when its last connected destination is removed. You may revoke access at https://security.google.com/settings/security/permissions or ask us to delete YouTube API data. Deletion requests are handled as soon as possible and within seven calendar days. Active YouTube authorizations and account metadata are periodically checked; if authorization cannot be confirmed, retained API data is removed no later than 30 days after the last verification. Performance observations are retained for at most 30 days.
10. Your choices and US privacy rights
Edit available account/workspace settings, disconnect social accounts, use self-service export/closure, or email support@lumeramanager.com to request access, correction, export or deletion. We verify requests proportionately and never ask for a password or token. State-law rights, authorized agents, opt-outs and appeals apply where required; we will explain a lawful refusal or extension and will not discriminate for exercising protected rights. Our current practices do not involve selling personal information or targeted advertising. Privacy requests are separate from marketing-email and analytics choices.
11. API and billing at launch
When API and billing features are activated, we will also process key/project permissions, usage records, spending limits, subscription details and invoices needed to provide and bill the service. Card entry will use the selected payment provider; do not send card details in support messages or API requests. The payment provider and final processing details will be identified before checkout opens.
12. Age and changes
Lumera’s initial public launch is US-only and 18+. It is not directed to children. If you believe a child has provided account data, contact us so we can investigate and take appropriate action. Uploaders remain responsible for lawful permissions involving other people. This notice will be updated when practices change, with notice of material changes where required.