Privacy Policy

Who we are and what this policy covers

Lumaril Corporation ("Lumaril," "we," "us," or "our") is a software company headquartered in New York that provides technology products and services to businesses. We do not offer our products or services to individuals for personal, family, or household use.

This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with:

• our websites, including lumaril.com and lumaril.ai (the "Sites");
• our mobile applications, including our iOS applications (the "Apps");
• our SMS text messaging program (the "SMS Program"); and
• the products and services we provide to our business customers (together with the Sites, Apps, and SMS Program, the "Services").

It applies to visitors to our Sites, to the representatives and employees of our business customers and prospective customers who use or interact with our Services, and to individuals who apply for a job with us. Information that our customers provide to us about other people is handled as described under Information we process for our customers. Information about our own employees and contractors is governed by our internal policies and the notices we provide to them.

"Personal information" means information that identifies, relates to, or could reasonably be linked with a particular individual, such as a name, email address, telephone number, postal address, or a device or online identifier.

Information we collect

We collect the following categories of personal information. This section does not describe Customer Data, which is covered under Information we process for our customers.

Contact and business information

Name, business email address, business telephone number, mobile telephone number, employer or organization, job title, and business postal address. We collect this when you contact us, request information, attend a meeting or event with us, sign up for the SMS Program, or when your organization provides it to us in connection with an account.

Account and communications information

Login credentials for the Services, account preferences and settings, records of your consent to receive SMS messages, and the content of your communications with us, including emails, support requests, and text messages.

Device and usage information

Through the Sites, our hosting provider collects IP address, browser and device type, pages viewed, referring page, and page performance timings, as described under Cookies, analytics, and tracking. Through the Apps, we collect device type, operating system and version, a device or installation identifier, access times, screens viewed and actions taken, and diagnostic and error logs.

Job applicant information

If you apply for a position with us, we collect the information you choose to provide, such as your name, contact details, resume, work history, education, and any other information included in your application or shared during the hiring process.

Sources of personal information

We collect personal information directly from you, from the organization you represent, automatically from your device when you use the Sites or Apps, and from our service providers in the course of delivering the Services. We do not currently purchase personal information from data brokers or list providers.

Information we process for our customers

Our business customers may upload or transmit information to the Services in the course of using them ("Customer Data"). Customer Data may include personal information about our customers' own employees, customers, and suppliers, such as name, business address, telephone number, and email address. It may also include operational data collected from sensors and control systems at customer facilities, including audio and video, which may incidentally capture the images, voices, or activity of individuals at those facilities.

We process Customer Data on behalf of and under the instructions of the customer that provided it. We use and disclose Customer Data only to provide the Services to that customer, to our service providers for that purpose, as our agreement with that customer permits, and as required by law. The purposes, recipients, and rights described elsewhere in this policy do not apply to Customer Data. If your information was provided to us by one of our customers, that customer is responsible for it, and you should direct any questions or requests to them. We assist our customers in responding to requests as our agreements with them require.

Cookies, analytics, and tracking

We do not use cookies or similar technologies for advertising, and we do not load advertising tags or marketing trackers on the Sites. Our hosting and content delivery provider, Cloudflare, processes IP addresses and request information in order to serve and secure the Sites, and provides two functions on every page of the Sites:

• Security. A script that distinguishes automated traffic from human visitors and sets a strictly necessary cookie named cf_clearance on our domain. This cookie is used only for security.
• Site analytics. A privacy-focused analytics script that reports information such as the page you viewed, the referring page, browser and device type, approximate location derived from IP address, and page performance measurements. According to Cloudflare, it does not log query strings, does not use cookies or local storage, and is not used to identify or fingerprint individual visitors.

Cloudflare processes this information as our service provider and, according to Cloudflare, does not use it to track visitors across other websites. The Apps may use device identifiers and diagnostic logging to operate, secure, and troubleshoot the Apps.

We do not track your activity over time and across third-party websites or online services. Other than Cloudflare's operation of the two functions described above, we do not permit third parties to collect information about your online activities over time and across different websites or online services through the Services. We do not respond to web browser "Do Not Track" signals. Because we do not sell or share personal information, an opt-out preference signal such as Global Privacy Control does not change how we process your information.

How we use personal information

We use personal information for the following purposes:

• Providing the Services. To create and administer accounts, deliver the products and services our customers have purchased, display data relevant to your account, and provide customer support.
• Communicating with you. To respond to your inquiries, send notices about your account and about updates or changes to the Services, and, with your consent, send text messages through the SMS Program.
• Improving the Services. To understand how the Services are used, diagnose technical problems, and improve their performance, reliability, and features.
• Security and fraud prevention. To protect the Services, our customers, and others, and to detect, prevent, and investigate security incidents and misuse.
• Recruiting. To evaluate job applications and communicate with applicants.
• Legal compliance and business operations. To comply with law, enforce our agreements, respond to legal process, and manage our business, including audits, financing, and corporate transactions.

We do not use personal information for targeted advertising, and we do not make decisions about you using automated processing that produces legal or similarly significant effects.

How we disclose personal information

We may disclose each category of personal information described under Information we collect to the following categories of recipients:

• Service providers. Companies that provide services to us under contract, including cloud hosting and infrastructure, content delivery, email and SMS delivery, application development and monitoring, customer support tools, and professional advisors such as lawyers and accountants. Service providers may use personal information only to perform services for us.
• Our customers. If you use the Services as a representative or employee of one of our customers, we may disclose information about your use of the Services to that customer.
• Legal and safety recipients. Courts, regulators, law enforcement, and other parties when we believe disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of Lumaril, our customers, or others.
• Business transfer recipients. Counterparties and their advisors in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets, provided that the recipient agrees to handle personal information consistently with this policy or gives you notice and any choice required by law.
• Recipients you direct. Other parties when you ask us to or consent to the disclosure.

We do not sell personal information and have not done so in the preceding 12 months, and we do not share personal information with third parties for cross-context behavioral or targeted advertising. Mobile telephone numbers and SMS opt-in consent are not shared with third parties or affiliates for marketing or promotional purposes.

SMS Program

With your consent, we send text messages about account notifications, service updates, and customer support. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP (or END, CANCEL, UNSUBSCRIBE, or QUIT) to any message, or by contacting us at support@lumaril.com. We honor opt-out requests within 10 business days. You can get help by replying HELP or emailing support@lumaril.com. We keep a record of your consent and opt-out requests.

The full terms of the SMS Program are on the SMS Terms & Conditions page, and you can enroll on the SMS Notifications page.

How long we keep personal information

We keep personal information for as long as needed for the purposes described in this policy. In deciding how long to keep information, we consider the nature of the information, the purposes for which we collected it, whether it is needed to provide the Services or maintain an account, our legal, accounting, and reporting obligations, and whether it is needed to resolve disputes or enforce our agreements. We retain Customer Data for as long as our agreement with the customer requires, and then delete or return it in accordance with that agreement. We retain SMS consent records for as long as required by applicable law and industry rules.

How we protect personal information

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices and rights

If your information was provided to us by one of our customers as Customer Data, please direct your request to that customer, as described under Information we process for our customers.

For other personal information, you may ask us to provide you with the personal information we hold about you, or to correct, update, or delete it, and you may withdraw any consent you have given us, by emailing privacy@lumaril.com. We verify requests by matching the information you provide against the information we hold and may ask you for additional information. We will acknowledge your request promptly and respond within 45 days, and may extend that period once by a further 45 days with notice to you. You may designate an authorized agent to make a request on your behalf, and we may require proof of the agent's authority. We may decline requests where we are permitted or required to keep information by law or by our agreements, and we will tell you if that is the case.

If your account was created by your employer or another Lumaril customer, changes to or deletion of the account are handled through that customer. Otherwise, you may request deletion of your account by contacting us.

You may stop receiving text messages at any time as described under SMS Program. You may opt out of other non-essential communications by following the instructions in the message or by contacting us. We may still send you messages that are necessary to provide the Services or administer your account.

If a state privacy law applies to you and to us, you may have additional rights, such as the right to obtain a copy of your personal information in a portable format or to appeal our decision on a request. Contact us as described below and we will tell you which rights apply and how to exercise them.

Children

The Services are intended for business use by adults. We do not knowingly collect personal information from children under 13. If you believe we have collected personal information from a child, please contact us so we can delete it.

Third-party websites and services

The Services may contain links to, or display content from, third-party websites and services. This policy does not apply to those third parties, and we encourage you to review their privacy policies.

Where we process information

We are located in the United States and process personal information in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those of your jurisdiction.

Changes to this policy

We may update this policy from time to time. When we do, we will post the revised policy on this page and update the effective date at the top. If we make a material change to how we collect, use, or disclose personal information, we will post the revised policy here with a new effective date before the change takes effect and, where we have an email address for you in connection with an account or the SMS Program, notify you by email. We will not apply a material change to personal information collected before the change in a way that is materially less protective without obtaining your consent where the law requires it.

How to contact us

If you have questions about this policy or about our handling of personal information, or if you want to exercise your choices or rights, contact us at:

Lumaril Corporation
Attn: Privacy
228 Park Ave S PMB 381600
New York, New York 10003-1502
privacy@lumaril.com
+1 (929) 322-3486