1. Who We Are
LuMay Inc. ("LuMay", "we", "our") is the controller for the personal information described in this policy unless otherwise stated. Our registered office is 8 The Green #20160, Dover, DE 19901, United States.
2. What We Collect
We collect the minimum personal information necessary to operate our services, respond to inquiries, and comply with our legal obligations. The categories are:
- Account & contact data - name, business email, role, company.
- Usage data - interactions with the LuMay platform, surfaced in your dashboard.
- Content you provide - uploads, prompts, agent configurations.
- Billing data - payment method on file via our processor (we never see card numbers).
- Cookies & similar tech - strictly necessary cookies plus opt-in analytics.
3. How We Use Data
We use personal data to deliver the LuMay services you've engaged us for, to respond to inquiries, to provide support, to comply with legal obligations, and to improve our services with your consent.
4. Legal Bases (EEA/UK)
We process personal data in one of the following bases under GDPR and UK GDPR: performance of a contract, legitimate interests (security, fraud prevention), consent (where required), and legal obligation.
5. Sharing
We share personal data only with carefully vetted processors who operate under DPA with us, and only as needed to deliver the LuMay services. We never sell personal data.
6. International Transfers
Where data crosses borders, we apply Standard Contractual Clauses or equivalent safeguards. Customers on the on-prem deployment option can keep all data in their own region.
7. Retention
We retain personal data only as long as necessary for the purposes described in this policy and our agreements. CPP data processed via the platform is never stored beyond the active session.
8. Security
We implement administrative, technical, and physical safeguards proportionate to the sensitivity of the data. Our security posture, certifications, and incident-response playbooks are documented in our Trust framework.
9. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to portability. To exercise rights, contact legal-compliance@lumay.ai.
10. Contact
For privacy questions or rights requests, please contact legal-compliance@lumay.ai or write to the address above.
This preview demonstrates the ContentTemplate prose layout with sticky TOC, header meta block, and bottom CTA strip. Real legal/policy content is sourced from the captured seo/*.json baseline in Phase 5.