Privacy Policy

1. Who we are

LumeFlux ("we", "our", "us") is an AI-powered content production platform for content creators. Our registered address is available on request. Questions? Email info@lumeflux.io.

2. What data we collect

We collect the following data when you use LumeFlux:

• Account data:email address, name, and profile picture provided at sign-up.
• Content data:niches, scripts, voiceovers, and exported files you generate.
• Usage data:which tools you use, credit consumption, and timestamps.
• Billing data:payment method details processed and stored by Stripe. We never store raw card numbers.
• YouTube data:channel metadata and OAuth tokens if you connect a YouTube account.
• Technical data:IP address, browser type, and error logs collected automatically.

3. How we use your data

We use your data to:

• Provide and improve the LumeFlux service.
• Process payments and manage subscriptions via Stripe.
• Send transactional emails (receipts, credit alerts, weekly digests).
• Detect and prevent fraud or abuse.
• Comply with legal obligations.

We do not sell your data to third parties, use it to train third-party AI models, or share it with advertisers.

4. Third-party services

LumeFlux uses the following third-party processors:

• Supabase:database, authentication, and file storage.
• Vercel:application hosting and traffic analytics.
• Railway:the render worker that assembles your finished video.
• Shotstack:fallback video rendering when the render worker is unavailable.
• Stripe:payment processing.
• Anthropic (Claude API):AI text generation.
• OpenAI:AI image generation, including any reference image you upload.
• ElevenLabs:text-to-speech generation, voice cloning, and the background-music library.
• AssemblyAI:transcription of audio and video you upload.
• Tavily:web research for scripts that ask for current facts.
• Storyblocks, Pexels, and Pixabay:stock footage and photo search.
• Google (YouTube Data API):reading your channel statistics and uploading videos, only after you connect your account. By connecting a channel you also accept the YouTube Terms of Service, and Google's use of your data is covered by the Google Privacy Policy. You can revoke our access to your channel at any time at Google security settings.
• Resend:transactional email delivery.
• Sentry:error tracking and diagnostics.
• PostHog:product analytics — which pages are opened and when a page is left. Individual profiles are only created for signed-in users.

Each processor has their own privacy policy and GDPR/CCPA compliance documentation.

5. Data retention

We retain your account data for as long as your account exists. Generated content is kept on a shorter clock:

• Finished videos from the video tool stay in your library for 30 days.
• Output from the other tools (scripts, research, thumbnails) stays for 7 days.
• Anything you pin is kept until you delete it yourself.
• Billing records are kept for as long as tax law requires us to keep them.

You can ask us to delete your account and everything in it at any time by emailing info@lumeflux.io.

6. Why we are allowed to process your data

Under the GDPR every use of your data needs a legal basis. Ours are:

• Performance of a contract:running your account, generating what you ask for, and taking payment.
• Legal obligation:keeping invoices and other records the tax authorities require.
• Legitimate interests:keeping the service secure, preventing fraud and abuse, fixing errors, and understanding which parts of the product are used. You can object to processing based on legitimate interests — see section 8.
• Consent:for anything you opt into, such as the weekly digest. You can withdraw it at any time, and every digest carries a one-click unsubscribe link.

7. Data outside the EEA

Several of the processors in section 4 are established outside the European Economic Area, mainly in the United States. When you use LumeFlux, the data described above is therefore transferred outside the EEA. Our error tracking is hosted in the EU.

8. Your rights

Under the GDPR you have the right to access your data, correct it, have it deleted, export it, restrict how we use it, and object to processing we base on legitimate interests. Where we rely on your consent, you can withdraw it at any time without affecting what we did before you withdrew it.

To exercise any of these rights, email info@lumeflux.io. We will respond within one month.

If you think we are handling your data wrongly, you can complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens; you can also go to the authority in the EU country where you live.

9. Cookies

We use essential session cookies for authentication and preference cookies to remember your settings. See our Cookie Policy for details.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app banner at least 14 days before the changes take effect.