Privacy Policy

Lumiel builds software that helps solo founders validate markets, grow traction, and ship content. This Privacy Policy describes how we process personal data when you visit our marketing site, participate in customer research, join waitlists, purchase our services, or otherwise interact with Lumiel. If you disagree with this policy, please refrain from using our services.

Information We Collect

Information you provide to us

• Account and waitlist details: Name, email address, company, role, and the ideas or products you are exploring when you request access or sign up for updates.
• Purchase information: Billing details, payment confirmations, and the context you provide for commissioned market reports or other services.
• Customer research inputs: Survey responses, feedback, interviews, support requests, and any content you choose to share while collaborating with our autonomous agents.

Information we collect automatically

• Usage data: Device information, log files, pages visited, time spent, navigation paths, referring URLs, and actions you take within Lumiel experiences.
• Cookies and similar technologies: We use analytics and preference cookies to understand engagement, improve performance, and remember your settings. You can manage cookies through your browser controls.

Information from third parties

• Payment providers: Limited payment status confirmations to verify and fulfill your orders.
• Public sources: Signals from social media, forums, or public databases you reference for validation research, collected only with your authorization and strictly for the requested deliverable.

Information from accounts you connect

When you connect Gmail, Instagram or X to a Lumiel workspace, we receive the information described in Connected accounts below, only after you sign in to that service and approve the permissions it shows you.

How We Use Your Information

• Deliver the services you request, including AI-generated validation reports, insights, and recommendations tailored to your prompts.
• Operate, maintain, and improve Lumiel’s products. We never use information from accounts you connect (Gmail, Instagram, X) to train, develop or improve AI or machine-learning models, ours or anyone else’s.
• Communicate with you about product updates, onboarding, billing, and security notices.
• Conduct research and analytics to better understand founder workflows, prioritize roadmap investments, and measure the effectiveness of our marketing campaigns.
• Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• Comply with legal obligations and enforce our agreements, including our Terms and Conditions.

Connected accounts: Gmail, Instagram and X

Lumiel’s email and social features work on accounts you choose to connect. You decide what Lumiel can read, and nothing is sent, posted or changed in your account unless you approve it, or you turn on a rule that allows a specific kind of change.

Gmail

• What we access: your email address, the Gmail labels you choose (normally your Inbox), and the email threads in them, including senders, recipients, subjects, message text and Gmail’s own labels.
• What we do with it: show which emails need a reply and set aside newsletters and automatic email; draft replies when you ask; send a reply only after you confirm it; and, if you turn them on, add Lumiel’s labels to your email and archive email Lumiel set aside, with a way to undo.
• What we don’t do: we don’t read labels you didn’t choose, sell or share your email for advertising, use it to train AI models, or let people read it except as described below.

Instagram

• What we access: your professional account’s profile, the posts you publish and their results, comments on your posts, and direct messages sent to your account, as the permissions you approve allow.
• What we do with it: show comments and messages that need an answer, draft replies and posts when you ask, publish or reply only after you approve it, and report how your posts perform.

X

• What we access: your account profile, your posts and their results, posts that mention you, public conversations matching searches you set up and, only if you choose it, your direct messages.
• What we do with it: find conversations worth joining, draft replies and posts when you ask, post only after you approve it or under a rule you turned on, and report how your posts perform.

Who can see it, and AI processing

• Information from a connected account is visible only to people in your workspace that the workspace owner allows to use that account.
• To draft a reply or a post, Lumiel sends the relevant messages or posts to the AI model provider that writes the draft (currently Anthropic, OpenAI and, through OpenRouter, the model selected for the task). They process it only to return the draft and may not use it to train their models.
• Credentials for connected accounts are encrypted and are never given to AI models.

How long we keep it

We keep email from Gmail for up to 90 days, and Instagram and X content for up to 365 days, after which it is deleted automatically. Records of what Lumiel sent or changed on your behalf are kept while your workspace exists, so you can see what was done.

Disconnecting and deleting

• In Lumiel, open the account’s settings (Email, Instagram or X) and choose Disconnect to stop Lumiel reading and sending, or Delete saved data to delete everything Lumiel saved from that account.
• You can also remove Lumiel’s access from the service itself: your Google Account’s third-party access page, Instagram’s Apps and Websites settings, or X’s Connected apps. When you remove Lumiel on Instagram, we stop using that connection. When you ask Instagram to have Lumiel delete your data, we delete what we saved from your account and give you a confirmation code and a page to check progress.
• Or write to support@lumiel.ai and we will delete it for you.

Google user data

Lumiel’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide and improve the user-facing features described above, we don’t transfer it to others except as needed to provide those features, for security, or to comply with law, we don’t use it for advertising, and no one at Lumiel reads it unless you ask us to, it is needed for security, or the law requires it.

Legal Bases for Processing

If you are located in the European Economic Area or the United Kingdom, we process your personal data only when one of the following applies:

• The processing is necessary to perform a contract with you.
• We have a legitimate interest that is not overridden by your rights, such as improving product experiences for founders.
• You have given us consent, which you may revoke at any time by contacting support@lumiel.ai.
• We need to comply with a legal obligation or protect vital interests.

How We Share Information

• Vetted service providers: Infrastructure, analytics, and payment partners that help us deliver our products, and the AI model providers named under Connected accounts. These partners are bound by confidentiality and data protection obligations.
• Professional advisors: Lawyers, auditors, and other consultants who require access to provide their services to us.
• Business transfers: In connection with a merger, sale, financing, or acquisition of all or part of Lumiel, your information may be transferred under appropriate safeguards.
• Legal compliance: We may disclose information if we believe it is necessary to comply with applicable law, regulation, or legal process, or to protect the rights, property, or safety of Lumiel and our users.

We do not sell personal information, and we do not share your data with advertisers or other third parties for their own marketing purposes.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we will securely delete or anonymize it.

Your Choices and Rights

Depending on your location, you may have the right to access, correct, update, or delete personal data we hold about you. You can submit a request by emailing support@lumiel.ai. We may need to verify your identity before fulfilling the request.

• Marketing communications: You can opt out of promotional emails at any time by using the unsubscribe link provided in the message.
• Cookies: You can adjust your browser settings to refuse cookies or notify you when cookies are being used.
• Automated decision-making: Lumiel does not rely on automated decision-making that produces legal or similarly significant effects without human review.

Data Security

We implement technical and organizational safeguards designed to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. No system is completely secure, and we cannot guarantee absolute protection. We will notify you of any data breach that is likely to result in a high risk to your rights and freedoms, as required by law.

International Data Transfers

Lumiel operates in the United States and may process information in other countries. When transferring personal data internationally, we use recognized safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms to ensure your information receives an adequate level of protection.

Children's Privacy

Lumiel is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us at support@lumiel.ai and we will delete the information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material updates, we will revise the “Last updated” date at the top of the page and provide additional notice where appropriate.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to support@lumiel.ai or write to: