Privacy Policy

1. Introduction

lumaa ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (lumaa.ai) and use our AI-powered fashion photography services. By using lumaa, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password.

• Payment Information: When you subscribe to a paid plan, we collect billing details such as your payment method and billing address. Payment processing is handled by third-party providers; we do not store full credit card numbers on our servers.

• Uploaded Content: Product images and other files you upload to generate AI photography.

• Communications: Any messages, feedback, or support requests you send to us at help@lumaa.ai.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration, and interaction patterns within the platform.

• Device & Browser Information: IP address, browser type and version, operating system, device type, and screen resolution.

• Cookies & Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyse usage. See Section 8 for details.

2.3 Information from Third Parties

We may receive information from authentication providers (such as Google or Apple) if you choose to sign in using a third-party account, limited to your name, email address, and profile picture.

3. How We Use Your Information

We use the information we collect for the following purposes:

(a) To provide, operate, and maintain our services, including generating AI photography from your uploaded content.

(b) To process transactions and manage your subscription.

(c) To communicate with you, including sending service updates, security alerts, and responding to support requests.

(d) To improve and develop our platform, including training and refining our AI models (see Section 4).

(e) To detect, prevent, and address fraud, abuse, and technical issues.

(f) To comply with legal obligations and enforce our Terms and Conditions.

4. AI Model Training & Your Content

We take your content rights seriously. By default, your uploaded product images and generated outputs are not used to train lumaa's AI models. If we offer an opt-in programme for contributing anonymised data to model improvement, we will clearly present this choice to you and obtain your explicit consent before any such use.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who help us operate our platform (e.g., cloud hosting, payment processing, analytics). These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

• Legal Requirements: When required by law, regulation, legal process, or governmental request.

• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

• With Your Consent: In any other situation where we have your explicit permission.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Uploaded content and generated images are retained in accordance with your subscription plan. When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).

7. Data Security

We implement industry-standard technical and organisational measures to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the platform to function (e.g., session management, authentication). These cannot be disabled.

• Analytics Cookies: Help us understand how visitors use our site so we can improve the experience. These are only set with your consent.

• Preference Cookies: Remember your settings and choices (e.g., language, theme).

You can manage your cookie preferences through the cookie banner displayed on your first visit, or through your browser settings. Disabling certain cookies may affect the functionality of the platform.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.

• Rectification: Request correction of inaccurate or incomplete data.

• Erasure: Request deletion of your personal data ("right to be forgotten").

• Restriction: Request that we limit the processing of your data.

• Portability: Request your data in a structured, machine-readable format.

• Objection: Object to the processing of your data for certain purposes, including direct marketing.

• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at help@lumaa.ai. We will respond to your request within 30 days.

10. International Data Transfers

lumaa is based in the Netherlands. If you access our services from outside the European Economic Area (EEA), your information may be transferred to and processed in countries within the EEA. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

lumaa is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information promptly.

12. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by lumaa. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any external sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, where appropriate, notify you by email or through a notice on the platform. Your continued use of lumaa after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

Email: help@lumaa.ai

Website: https://lumaa.ai

If you are located in the EU and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.