Privacy Policy

This policy explains how the Lumora team ("Lumora," "we," "us") handles information in the Lumora app, the Lumora Studio app, the Lumora Planner website, and this website (together, the "Services"). It is part of our Terms of Use.

1. What we collect

Your account

• Email address and password. Used to sign in. Your password is handled by our account provider, Supabase, which stores only a secure hash of it; we never see your password.
• Your name (display name), which you can change. People on the plans and projects you share with see it.
• Account status: whether the Lumora team has approved or blocked the account, which apps (Lumora, Lumora Studio) it may use, and when it was created.
• Two-step sign-in (optional). If you turn it on, we store the information needed to check the codes from your authenticator app.
• Sign-in records kept by Supabase to run and protect the sign-in service, such as session tokens and when you last signed in. Supabase may also log technical details like IP addresses for security.

Lumora Planner

• Your plans: names, event dates, venues, the cues in the run of show, notes, comments and schedules (times, locations, who, and notes).
• Chat messages you send in a plan's chat, with your name and the time.
• Who is on each plan and their role (owner, editor, viewer).
• Invitations: when you invite someone, we store their email address and role so the plan appears for them when they sign in with that email. We do not send them email for you; you tell them yourself.

Lumora Studio shared projects

Only if you share a project with your team: the edit itself (the timeline, titles and settings, but not your video or audio files, which stay on each computer), saved versions, comments, who is a member, and a short-lived "who is editing" lock with the editor's name.

Problem reports and error reports

• Error and crash reports are sent only if you agree when Lumora or Lumora Studio asks. You can change your answer any time (Lumora: Settings; Lumora Studio: Help).
• "Report a problem" sends what you write and, if you choose, a picture of the app's window and its recent activity log.
• Reports include the app and version, the general type of computer system (for example, "Windows 10, 64-bit"), the error message and technical details, and are linked to your account so we can follow up.
• Before a report leaves your computer, Lumora removes things that could identify you or unlock your accounts: folder paths (which can contain your user name), email addresses, stream keys, passwords, tokens and network addresses.

The feedback form on this website

What you type: your message, the topic, and, if you choose to give them, your name and email address. The form is delivered to us by Web3Forms, an email-forwarding service.

Rate-limit records

To protect the service from abuse, we briefly record when an account does certain things (like sending invitations or messages). These records are deleted automatically after about two days.

What we don't collect

We don't use advertising, analytics or tracking tools in the apps, the Planner or this website, and we don't set tracking cookies. We don't receive your stream keys, your recordings, your camera or microphone feeds, or your media files.

2. What stays on your computer

These are stored only on your own computer (or, for the Planner, in your own browser) and are never sent to us:

• Your events, run of show, settings, titles, slides, media library, recordings and ISO recordings.
• Stream keys and the addresses of the platforms you stream to.
• Cameras, phones used as cameras, and the phone remote: these connect directly over your local network.
• Live captions and Lumora Studio's speech features run on your computer. The speech models are downloaded once (from our website, or Hugging Face as a backup), and no sound is sent to us.
• Lumora Studio projects and edits, unless you share a project.
• A copy of your account's access (your name, email and which apps you can use), so the apps keep working without internet during an event for up to 7 days.
• The Planner's small preferences in your browser, such as light or dark theme, calendar view, and which chat messages you've seen.

The audience page. If you choose to put Lumora's audience page on the internet, guests' phones connect through a free Cloudflare tunnel to your computer. What guests send (votes, questions, raffle entries, pledges, messages) goes to your computer, not to us. You decide what to collect from guests and are responsible for it.

Streaming and captions to other platforms. When you go live, your video goes straight from your computer to the platforms you choose (such as YouTube or Facebook), and their privacy policies apply.

3. How we use it

• To create and secure your account, approve it, and let you sign in to the apps you're allowed to use.
• To save your plans, schedules, chats and shared projects and show them to the people you invite.
• To send account emails, such as confirming your email address or resetting your password.
• To find and fix problems, using problem and error reports.
• To answer your feedback and questions.
• To prevent abuse, enforce our Terms of Use, and follow the law.

We don't sell or rent your personal information, and we don't use it for advertising.

4. Where it's stored

Account, Planner, shared-project and report data is stored in our database on Supabase's cloud servers. Supabase is a U.S.-based provider. Our services are run from and intended for people in the United States.

5. Who we share it with

We share information only with the people you choose and with the service providers that run the Services for us:

We may also share information if the law requires it, to protect people's safety, or to protect our rights or the Services from fraud or abuse.

The people you share with. Everyone on a plan or shared project sees its contents and the names of the other people on it. The plan's owner sees the emails of pending invitations. The Lumora team can see account names, emails and status (to approve accounts) and problem reports.

If Lumora is ever transferred to a new owner, your information may move with it, and this policy will continue to apply to it.

6. How long we keep it

• Account information: while your account exists.
• Plans, schedules, chats and shared projects: until you or the owner deletes them, or the account that owns them is deleted. Chat authors can delete their own messages, and owners can delete any message in their plan.
• Problem and error reports: as long as needed to fix the problem, then deleted. Deleting your account removes your name from them.
• Rate-limit records: about two days.
• Feedback messages: in our email for as long as useful to answer and follow up.
• Backups: we keep encrypted backups of our database for up to about 90 days, so deleted data can remain in a backup until it expires.

7. Deleting your data and your choices

• Delete your account: contact us and include the email address on your account. We'll confirm it's you, then delete your account, your profile, and the plans and shared projects you own. Messages and comments you left on other people's plans or projects are removed with your account or kept without your name.
• Change your name in your account settings in Lumora or Lumora Studio.
• Delete plans, messages and projects you own yourself, in the Planner and Lumora Studio.
• Error reports: turn them off any time (Lumora: Settings; Lumora Studio: Help).
• Local data on your computer is yours to delete: uninstall the apps or remove their files.

8. Security

• All connections to our servers are encrypted (HTTPS).
• Our database uses row-level security: each request is checked so that people can only see the plans and projects they are on, and only the Lumora team can see reports.
• New accounts must be approved before they can be used, and we limit how often actions can be repeated to prevent abuse.
• Two-step sign-in with an authenticator app is available for every account. We recommend turning it on.
• Error reports are cleaned of personal details before they leave your computer.

No system is perfectly secure. Please use a strong password that you don't use anywhere else.

9. Children

The Services are not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

10. State privacy rights

Depending on where you live (for example, California, Colorado, Connecticut, Virginia and other states), you may have the right to know what personal information we have about you, to get a copy, to correct it, and to have it deleted. We honor these requests for everyone, wherever you live. We don't sell or "share" personal information for targeted advertising, and we don't use sensitive information to infer things about you.

To make a request, contact us. We'll need to confirm the request comes from you, usually by replying to the email on your account. You can use an authorized agent, and we won't treat you differently for using your rights.

11. Changes to this policy

If we change this policy, we'll update the effective date at the top. If a change is significant, we'll make a reasonable effort to let you know, for example on this website or in the apps.

12. Contact us

Questions or requests about your privacy? Send us a message through the feedback form on our website, and include your email address so we can reply.