Privacy Policy

1) Who we are

LuMay AI • Website: https://www.lumay.ai • Contact: legal-compliance@lumay.ai

2) What we collect

• Account & Contact Data: your name, business email, role, and company — used to set up and manage your account.
• Usage Data: logs, event telemetry, performance metrics, and device/browser information — collected to monitor performance, improve reliability, and ensure security.
• Content You Provide: prompts, files, and other business data you choose to process via the assistant. For clarity: CRM data is processed transiently to deliver results but is not stored or retained by LuMay AI.
• Billing Data: business billing contact details and transaction information — processed securely through our payment processor to complete transactions.
• Cookies & Similar Technologies: strictly necessary cookies for core functionality, plus optional analytics cookies (see Section 9). You may control cookie preferences via your browser settings.

3) How we use data

• Provide, secure, and improve the assistant and related services.
• Configure enterprise features and fulfill contracts with your organization.
• Respond to inquiries, provide support, and communicate updates.
• Comply with legal obligations and enforce terms.

4) Legal bases (EEA/UK)

We process data under one or more of: contract performance, legitimate interests (e.g., security, service improvement), consent (where required), and legal obligations.

5) Sharing

• Processors/Sub-processors: hosting, analytics, logging, support tools operating under data processing agreements.
• Enterprise Admins: for managed accounts, certain usage and configuration data may be visible to your organization.
• Legal & Safety: to comply with law or protect rights, safety, and integrity of services.

6) International transfers

Where data is transferred across borders, we use appropriate safeguards (e.g., SCCs or equivalent mechanisms).

7) Retention

We retain personal data only as long as necessary for the purposes above, then delete or anonymize it per our retention schedules and client agreements. CRM data processed via the assistant is never stored or retained beyond the active session.

8) Security

We implement administrative, technical, and physical safeguards proportionate to the sensitivity of the data. No method is 100% secure, but we continuously improve our controls.

9) Cookies

We use essential cookies to operate the site and may use optional analytics with your consent (where required). You can control cookies via your browser settings. Your enterprise deployment may enforce separate cookie settings.

10) Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, and to portability. To exercise rights, contact legal-compliance@lumay.ai. If we process data on behalf of your employer, please contact your administrator first.

11) Children

Our services are intended for business use and not for children under 16.

12) Third-party links

Our site may link to third-party sites. Their privacy practices are governed by their own policies.

13) Changes

We may update this Policy periodically. Material changes will be indicated by updating the “Last updated” date and, where appropriate, additional notice.

14) Third Parties We Use

To deliver our services, LuMay AI relies on trusted third-party providers that operate under strict contractual and security obligations. These providers process data only as needed to deliver their services and may vary by region or deployment.

• Cloud Hosting & Infrastructure: Microsoft Azure (compute, storage, security).
• Payments: Stripe (payment processing, billing).
• Analytics (optional): Google Analytics or equivalent (site traffic and usage metrics).
• Support & Operations: Customer support and logging tools (used only for troubleshooting and service improvement).

An up-to-date list of subprocessors may be provided upon request. Please contact legal-compliance@lumay.ai for details.