Privacy

Privacy Policy

Effective date: July 29, 2026

Lumora Lens provides personalized social-post planning, creation, approval, scheduling, publishing, and selected routine-engagement services. This policy explains the information we use to deliver those services and the choices available to you.

Information you provide

We may collect your name, email address, business name, website, location, services, audience, offers, brand direction, publishing preferences, project notes, support messages, and the photos, logos, testimonials, links, or other materials you submit.

Payment providers process billing details and may send Lumora Lens transaction identifiers, subscription status, fraud signals, and limited customer information. Lumora Lens does not need to receive or store your full payment-card number.

If you choose Growth Share, you can connect Stripe or Square through OAuth. The selected provider supplies connected-account identifiers and limited events for new subscriptions, paid invoices, refunds, disputes, and chargebacks. Square access tokens are encrypted at rest and refreshed only when required to verify invoice totals and adjustments. Lumora uses this billing activity to calculate the agreed variable fee and its caps. Lumora does not use the connection to change your products, prices, customers, subscriptions, or payouts.

Connected social profiles

If you connect a supported social profile, Lumora Lens or a scheduling provider may process authorization tokens, platform and profile identifiers, profile names, publishing permissions, post status, and available post-level or profile-level performance data. On a plan with reply automation, the selected scope may also process supported public comments, direct messages, reviews, thread identifiers, message metadata, reply status, qualification signals, possible-lead alerts, and owner-handoff status. We use these details to connect the profile, schedule posts within your content approval and automation settings, organize routine engagement, send eligible replies inside approved rules, confirm publishing status, troubleshoot failures, and improve future content direction.

Lumora Lens does not ask for your social-media password. Connection should happen through the platform or scheduling provider's authorization flow. You can revoke access through the relevant platform or provider, and you may contact us for help disconnecting a profile.

Routine engagement is limited to the authorized plan allowance and owner-approved rules. Starter and Growth may send eligible low-risk replies that match those rules. Autopilot may also use approved qualification and routing rules. Uncertain or sensitive conversations are held for the owner. We do not use connected access for disputes, refunds, crisis response, final sales decisions, paid advertising, or guaranteed-outcome activity.

How we use information

• To analyze the business information you submit and build a personalized content direction.
• To create graphics, captions, calls to action, calendars, drafts, and approved publishing schedules.
• To publish approved posts, monitor delivery status, and resolve failed or disconnected publishing attempts.
• For selected plans, to organize supported comments, messages, and reviews, send eligible routine replies inside owner-approved rules or prepare drafts when review mode is selected, surface possible leads, and hand off authorized opportunities.
• To process payments, administer subscriptions, provide support, and maintain business records.
• To measure website and service performance, prevent abuse, and improve conversion and retention.
• To send service messages and marketing messages when permitted. You can opt out of marketing messages.

Service providers

We may share the minimum necessary information with providers used for hosting, storage, AI-assisted content creation, social scheduling and publishing, analytics, payment processing, email delivery, security, and customer support. Those providers process information under their own terms and privacy policies. We do not sell customer personal information.

AI-assisted content

Business details and creative instructions may be sent to an AI provider to help draft content. Do not submit confidential information that is unnecessary for the requested work. Lumora Lens reviews its workflow to reduce invented claims, but you remain responsible for confirming the accuracy and rights to all content before approval or autopilot publishing.

Cookies, analytics, and logs

The website and service may use Cloudflare security tools, logs, and PostHog analytics, conversion tracking, and session replay. These tools may process IP address, browser and device details, approximate location, referring pages, pages viewed, clicks, form activity, console diagnostics, recordings of interactions with the website, and conversion events. Sensitive form inputs are configured to be masked in replay. We use this information for security, diagnostics, and service improvement.

Affiliate attribution

When someone follows an affiliate link, Lumora Lens may store the referral code, landing page, event timestamps, a pseudonymous browser or request identifier, and later payment or account identifiers needed to determine whether a subscription qualifies. The first qualified affiliate source remains assigned for the life of the program so later visits do not overwrite it. This permanent program attribution does not mean every visit is retained forever or that an affiliate earns commission beyond the stated earning window.

We limit direct identifying details in click analytics, use restricted program records to prevent self-referrals and abuse, and retain financial or attribution records as reasonably needed to calculate commissions, handle reversals, resolve disputes, and meet legal obligations.

Retention and security

We retain business profiles, content records, approvals, publishing history, payment records, and support messages for as long as reasonably needed to deliver the service, maintain accurate records, resolve disputes, prevent abuse, and meet legal obligations. We use reasonable safeguards, but no online service can guarantee perfect security.

Legacy order and delivery records may remain available so prior customers can receive support for purchases made before the personalized-service transition.

Your choices

You may ask to access, correct, or delete personal information we reasonably control. Some financial, security, approval, or publishing records may need to be retained for legitimate business or legal reasons. You may also request that a connected profile be disconnected or that scheduled posts be paused.

Follow our data deletion instructions to disconnect Instagram or Facebook and submit a deletion request.

Children

Lumora Lens is intended for businesses and adult operators. The service is not directed to children under 13.

Policy updates

We may update this policy as the service, providers, platform requirements, or legal obligations change. The effective date will be updated when material changes are made.

For privacy questions, contact contact@lumoralens.com.