Privacy Policy

Lumeo Digital LLC operates Lumeo Spotlight, an AI visibility monitoring platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services. By using Lumeo Spotlight you agree to the practices described in this policy.

Information you provide directly:

• Name, email address, and password when you create an account
• Professional information including job title, company name, website URL, LinkedIn URL, and professional summary
• Competitor names and roles you choose to monitor
• Payment information processed securely by Stripe — we never store your full card details
• Communications you send to us

Information we collect automatically:

• Log data including IP address, browser type, pages visited, and timestamps
• Device information including operating system and screen resolution
• Usage data including features used, runs executed, and scores generated

Information from third parties:

• If you sign in with Google or Apple we receive your name and email address from those providers subject to their privacy policies
• AI engine responses from ChatGPT, Gemini, Claude, and Perplexity that mention you or your competitors

We use your information to:

• Provide, operate, and improve the Lumeo Spotlight service
• Query AI engines on your behalf and generate your visibility score
• Send weekly email digests and service-related notifications
• Process payments and manage your subscription
• Respond to your questions and support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Analyze usage patterns to improve our service

We do not sell your personal information to third parties. We do not use your information to train AI models.

We share your information only with:

Service providers who help us operate the platform:

• Supabase (database and authentication)
• Vercel (hosting)
• Stripe (payment processing)
• Resend (email delivery)
• OpenAI, Google, Anthropic, and Perplexity (AI query engines)
• Sentry (error monitoring)
• Cloudflare (security and bot protection)

Each provider is contractually bound to protect your data and use it only to provide services to us.

Legal requirements: We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Lumeo Digital LLC, our users, or the public.

Business transfers: If Lumeo Digital LLC is acquired or merges with another company your information may be transferred as part of that transaction. We will notify you before that happens.

We do not share your personal information with any other third parties without your explicit consent.

We retain your account information for as long as your account is active. If you delete your account we will delete your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes. Raw AI response data is retained for 90 days then purged.

We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS) and at rest
• Row-level security on all database tables — your data is only accessible to you
• API keys stored as environment variables, never in source code
• Regular security reviews and dependency updates

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but we take every reasonable measure to protect your data.

Depending on your location you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Object to or restrict certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time

To exercise any of these rights email us at contact@lumeodigital.co. We will respond within 30 days.

California residents: Under the CCPA you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

EU and UK residents: We process your data under the lawful basis of contract performance and legitimate interests. You have rights under GDPR including the right to lodge a complaint with your local supervisory authority.

Canadian residents: We comply with PIPEDA and applicable provincial privacy laws.

We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings but this may affect your ability to use the service.

Lumeo Spotlight is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information please contact us and we will delete it immediately.

Our service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

Lumeo Spotlight queries third-party AI engines and displays their responses about you and your competitors. We do not control what AI engines say and make no representations about the accuracy of AI-generated content. AI responses are provided for informational purposes only.

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using Lumeo Spotlight you consent to these transfers. We ensure appropriate safeguards are in place in accordance with applicable law.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the app. Your continued use of the service after changes take effect constitutes your acceptance of the updated policy.

Lumeo Digital LLC
Florida, United States

contact@lumeodigital.co