Privacy Policy.

This policy explains what [Your Company, Inc.] ("Lumen", "we") collects when you use Lumen, why, and the choices you have. It works alongside our Terms of Service.

1. What we collect

• Account data — a user ID, and the email and name from your sign-in, via our identity provider (Clerk).
• Conversations — the prompts you send, the model's responses, and related metadata (timestamps, thread titles, token usage), stored so you can return to your chats.
• Usage & operational data — request logs, IP address, approximate rate/usage counters, and error diagnostics used to run and secure the Service.
• Local device storage — preferences such as theme, text size, and language are stored in your browser, not on our servers.

We do not intentionally collect special-category data. Please don't submit sensitive personal data you don't want processed by an AI model.

2. How we use it

• to provide the Service — generate responses, persist your threads, and sync your history;
• to secure the Service — authentication, rate limiting, abuse prevention, and a spend safeguard;
• to operate and improve the Service using aggregated, de-identified metrics;
• to handle billing for paid plans;
• to comply with legal obligations.

3. Model training

We do not use the content of your conversations to train or fine-tune AI models unless you explicitly opt in. If we introduce an opt-in, it will be off by default and reversible. We may use aggregated, de-identified usage statistics (counts, latency, error rates) to improve the Service.

4. Who we share it with

We do not sell your personal data. We share data with the service providers ("subprocessors") that make Lumen work:

• Identity — Clerk (authentication and account management).
• Model provider — our gateway (OpenRouter) and the underlying model (DeepSeek). Your prompts and conversation context are sent to generate replies.
• Hosting — our application and database host (e.g. Railway) and the frontend host (e.g. Vercel).
• Payments — Stripe for paid subscriptions (we do not store full card details).

We may also disclose data if required by law or to protect our rights and users' safety.

5. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we process data to perform our contract with you (providing the Service and billing), for our legitimate interests (security, abuse prevention, improvement), to comply with legal obligations, and — for any optional processing such as model training — on the basis of your consent.

6. Retention

We keep your account and conversations while your account is active. You can delete individual threads in the app, or delete your account to remove your conversations (subject to backups that expire on a rolling basis and any records we must keep by law). Operational logs are kept for a limited period for security and debugging.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object to certain processing or withdraw consent. To exercise these, contact tatandat110105@gmail.com. You may also complain to your local data-protection authority.

8. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

9. Security

We use industry-standard measures — encryption in transit, authentication on every request, scoped access to your own data, and rate/abuse controls. No system is perfectly secure; report concerns to tatandat110105@gmail.com.

10. Children

Lumen is not directed to children under 13 (or the applicable minimum age), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes

We may update this policy. If changes are material, we will give reasonable notice. Continued use after the effective date means you accept the update.

12. Contact

Privacy questions: tatandat110105@gmail.com — [Your Company, Inc.], [Company address].