Privacy Policy
Effective Date: November 24th, 2023
Lumi AI, Inc. (“Lumi”, “we” or “our”) is committed to protecting your privacy. This Privacy Policy applies to our services, including but not limited to the Lumi website at lumi-ai.com (the “Website”), and details how we access, collect and use personal data that you and your business shares with us.
BY USING THE SERVICE YOU ARE AGREEING TO THE TERMS OF THIS PRIVACY POLICY.
IF YOU ARE USING THE SERVICE ON BEHALF OF AN ORGANIZATION, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND THE ORGANIZATION TO THIS PRIVACY POLICY AND ARE AGREEING TO THIS PRIVACY POLICY FOR THAT ORGANIZATION. WHERE YOU ARE USING THE SERVICE ON BEHALF OF AN ORGANIZATION, “YOU” AND “YOUR” REFERS TO THE ORGANIZATION.
- DESCRIPTION OF THE SERVICE
Lumi operates a service, via the Website, that uses generative AI technology to provide businesses with the ability to query their database/ data warehouse using natural language (collectively, the “Service”). In order to provide the Service to Lumi’s clients (each a “Business”), Lumi often has to access personal data that may be sensitive or important to the clients of each Business (each a “Client”) in order to answer Business’s questions via the Service. This Privacy Policy describes how we access, collect and use personal data regarding Clients and Businesses.
- HOW WE OBTAIN PERSONAL DATA
The Service involves accessing, collecting and processing personal data, which is information about individuals that can be used to identify them. Subject to legal, contractual and technical requirements, you may choose not to provide Lumi with certain data or request the deletion of certain data, which may impact the essential operation of the Service and the Website. In most cases, Lumi is not the personal data controller and only acts as a data processor. In cases where Lumi is the data processor and not the controller, please contact your data controller prior to contacting Lumi, in order to exercise any of your personal data rights.
- PERSONAL DATA WE COLLECT
The following is a description of the personal data that we may access, collect, use and process in connection with the operation of the Service:
- full names, email addresses and other contact information;
- data regarding your use of the Service while using the Service;
- your communications with Lumi, query data and other business data that you provide Lumi access to via the Service which may contain personal data; and
- derivative data, including country location, browser type, operating system, access times, page history, mobile device data, (including the mobile device’s model, manufacturer, and location, if our Website is accessed from mobile devices) and website analytics.
- PROCESSING OF PERSONAL DATA
We process personal data for our legitimate business purposes. These uses include but are not limited to:
- providing the Service to Businesses, including tailoring the Services to Businesses needs based on the data provided;
- understanding needs and improving the quality of the Service and Website, including providing customer support and feedback, providing additional support, analyzing functionality and technical issues, tracking use of the Service and Website and generating internal reports and data models that we use to improve the Service and Website;
- using cookies and third-party data website analytics software to gain a better understanding of Website use and activity;
- contacting Businesses for various reasons and when providing support for the Service and Website; and
- for contractual, legal, regulatory or audit obligations, including responding to requests from law enforcement or a government agency asserting lawful authority to obtain the data or where Lumi has reasonable grounds to believe the data could be useful in the investigation of unlawful activity, complying with a subpoena or warrant or an order made by a court, person or body with jurisdiction to compel the production of data, complying with court rules regarding the production of records and data, defending Lumi in a legal, regulatory or administrative proceeding or in a contractual dispute or providing information to our legal counsel.
We may disclose personal data to our parent companies, affiliates, subsidiaries, employees and contractors for the same purposes described above.
- THIRD-PARTY SERVICES
This Privacy Policy only applies to personal that Lumi accesses, collects, processes and discloses and does not apply to the access, collection, processing and disclosure of data by third parties through third-party services, including OpenAI, Amazon, PostHog, Google, Vercel, Microsoft and Slack, which may be broader than set forth in this Privacy Policy, and that may be embedded into the Service. In many cases, third parties may collect personal data about online activities over time and across different websites and services. We strongly recommend that each Business reads each third-party privacy policy carefully before using the Service and has the legal right to process personal data from its Clients using Lumi and these third parties. Please contact us directly using the information found below to learn more about third-party data practices.
- COOKIES AND TRACKING TECHNOLOGIES
The Service uses tracking technologies, such as cookies, web beacons and Google Analytics, to collect personal data, such as IP addresses and device information. Based on this data, third-parties may be able to resolve identities across multiple devices. This data is collected, used and disclosed in accordance with the terms of this Privacy Policy and the applicable third-party privacy policies. Certain Service features may rely on tracking technologies and by declining to accept cookies or by changing certain settings on a device, these features may stop working.
- OBTAINING, RECTIFYING AND CONTROLLING PERSONAL DATA
You may contact Lumi to obtain a copy of any personal data we collect, the production of which may be subject to a fee as permitted by applicable law. In addition, you may contact Lumi to correct inaccurate personal data or to complete incomplete personal data.
You may be able to opt-out of some or all of the ways in which personal data is processed, or request the deletion of certain personal data, except where the personal data is necessary or vital for:
- the performance of contractual obligations, such as the Terms of Use/Service or certain legal obligations;
- protecting Client or Business interests or those of another person; and
- our legitimate interests or the legitimate interests of a third-party,
and may do so by requesting deletion by contacting us using the contact information found below.
- DATA STORAGE AND RETENTION
While Lumi is a US based company, the data provided through the Service may be stored and processed by third parties in countries around the world. You authorize Lumi and third parties acting on our behalf to process personal data in any country of their choosing, which may cause the data that we access, including personal data, to be subject to privacy protections and legal rights that may not be equivalent to those in your country.
Personal data that is retained by Lumi is only retained until you request its deletion, until Lumi no longer requires such data for the purpose for which it was collected, or as long as is legally necessary.
- DO NOT TRACK DISCLOSURE
Do Not Track (“DNT”) is a web or device setting that allows you to request that receivers of personal data stop their tracking activities. When you choose to turn on the DNT setting in your browser or device or use alternative consumer choice mechanisms, your browser or device sends a special signal to websites, analytics companies, advertising networks, plug-in providers and other web services you encounter to stop tracking your activity. Currently, there are no DNT technology standards and, as a result, we do not respond to DNT requests.
- CALIFORNIA “SHINE THE LIGHT” RIGHT
If you are a California resident, California Civil Code 1798.83 grants you the right to request disclosure of the categories of personal data we control and provide to third parties, and the names and addresses of these third parties, for direct marketing purposes during the preceding calendar year. If you are a California resident and would like to make this request, please contact us using the contact information set forth below.
Please note that you may only make this request once per year.
- YOUR CALIFORNIA PRIVACY RIGHTS
If you are a California resident, California Civil Code Section 1798.120 permits you to opt-out of the sale and sharing of your personal information to third parties. Currently, Lumi does not sell or share your personal information to third parties except as directly requested by Businesses via consent and as such no opt-out of the sale or sharing of such personal information is necessary. Although Lumi does not sell or share your personal information to third parties without consent, Lumi does provide a general opt-out right to all of our users. If you have any other questions about our privacy practices, please email us at privacy@lumi-ai.com.
- CHANGE OF OWNERSHIP OR BUSINESS TRANSITION
In the event of, or in preparation for, a change of ownership or control of Lumi or a business transition such as the sale of some or all Lumi’s assets, we may disclose and/or transfer your personal data to third-parties who will have the right to continue to collect and use such data in the manner set forth in this Privacy Policy.
- SECURITY
We are committed to ensuring that your data is secure. To prevent unauthorized access, disclosure, or breach, we have put in place suitable physical, electronic, and administrative procedures to safeguard and secure the data we collect and process, including appropriate protections for any sensitive personal data we access, process or collect.
- CONTACT PREFERENCES
We will communicate with you through the Website, your email address and/or phone, to respond to support requests or comments. If you have provided us with your email address and would like to change the email preferences we associate with you (for example, unsubscribing from receiving certain types of email) you may do so by clicking a link within certain types of emails that we send to you or, if no link is available, by replying with “unsubscribe” in the email title or body. On rare occasions, some types of email are necessary for the Service and cannot be unsubscribed from if you continue to use the Service.
- UPDATES
Lumi reserves the right, in its sole discretion, to modify this Privacy Policy at any time (each an “Update”) and shall make each Update available on the Website. You are deemed to accept an Update by continuing to use the Service. Unless Lumi states otherwise, an Update is automatically effective 30 days after posting on the Website, except in such case where an Update is immaterial to any of your legal rights or legal obligations of Lumi and such Update is made only to correct a typographical, formatting or grammar inaccuracy, and in such case, an Update is effective immediately after posting on the Website.
- CONTACT US
If you have requests, questions or comments about the Privacy Policy or our data collection in general, please contact our Data Privacy Officer or our Privacy Team at privacy@lumi-ai.com
or:
Privacy Support Team
