Privacy Policy

1. Introduction

Luminary Labs ("we", "us", "our") operates the website at luminary-labs.madethis.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service.

For questions or requests regarding this policy, contact us at: team@luminary-labs.madethis.app

2. Data We Collect

We collect the following categories of personal data:

• Identity & Contact Data: Name, email address, business name, and other information you provide when creating an account or completing the onboarding form.
• Payment Information: Billing details processed and stored by Stripe, Inc. We do not store your full card number or CVV on our servers.
• Usage Analytics: Pages visited, time on site, clicks, referral sources, device and browser type, and other behavioral data collected via PostHog.
• Communications Data: Messages sent through our contact form, chat widget, or email correspondence.
• Technical Data: IP address, browser type and version, timezone, operating system, and platform.
• Cookie Data: See our Cookie Policy for full details.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide, operate, and maintain our Service
• To process payments and manage your subscription
• To send transactional communications (receipts, onboarding, account updates)
• To send marketing communications about our products and services (you may opt out at any time)
• To analyze how our Service is used and improve it
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract: Processing necessary to fulfill our subscription agreement with you (e.g., delivering the Service, processing payments).
• Legitimate Interests: Processing for analytics, fraud prevention, and service improvement, where our interests do not override your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have explicitly consented.
• Legal Obligation: Processing required to comply with applicable laws.

5. Third-Party Service Providers

We share your data with the following trusted third-party providers who process data on our behalf:

• Stripe, Inc. — Payment processing. Stripe is PCI-DSS compliant and processes card data on our behalf. Privacy Policy: stripe.com/privacy
• PostHog, Inc. — Usage analytics and product insights. Privacy Policy: posthog.com/privacy
• Vercel, Inc. — Website hosting and infrastructure. Privacy Policy: vercel.com/legal/privacy-policy
• Convex, Inc. — Cloud database and backend infrastructure. Privacy Policy: convex.dev/privacy

We do not sell your personal data to third parties. We do not share your data with third parties for their own marketing purposes without your explicit consent.

6. Data Retention

We retain your personal data for as long as your account is active and for a period of three (3) years after account closure, unless a longer retention period is required by law. Payment records may be retained for up to seven (7) years for tax and accounting purposes. After the retention period, we securely delete or anonymize your data.

7. Your Rights

GDPR Rights (EEA Users)

If you are located in the European Economic Area, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Restriction: Restrict processing of your data in certain circumstances
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

CCPA Rights (California Residents)

If you are a California resident, you have the following rights:

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information we have collected from you
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights
• Right to data portability

To exercise any of these rights, contact us at team@luminary-labs.madethis.app. We will respond within 30 days.

8. Cookie Policy

We use cookies and similar tracking technologies. See our full Cookie Policy for details. In summary:

• Strictly Necessary Cookies: Required for the Service to function (authentication, session management). Always active.
• Analytics Cookies: Used by PostHog to understand how users interact with our Service. Require consent in the EEA.
• Marketing Cookies: Used to serve relevant advertisements. Require consent.

9. International Data Transfers

Our Service is operated from Sweden. Data may be transferred to and processed in the United States and other countries by our service providers (Stripe, PostHog, Vercel, Convex). We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. All data transmissions use TLS encryption. However, no method of transmission over the Internet is 100% secure.

11. Children's Privacy

Our Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email (to the address associated with your account) at least 30 days before the change takes effect. The updated policy will be posted on this page with a revised "last updated" date.

13. Contact Us

For questions, concerns, or to exercise your rights, contact us: