Luma Privacy Policy

Last updated: 2025-12-21

This privacy policy explains how the Luma browser extension and the LumaTruth service ("Luma", "we", "us") handle information when you use the extension and related services.

Information we collect

• Content you submit for analysis, such as post text, selected text, image URLs or screenshots, and video frames.
• A device identifier derived from browser and device attributes to enforce usage limits and plan entitlements.
• Usage data, including weekly counts for badges, selected text checks, image checks, and video checks.
• Plan and entitlement status for subscriptions.
• API keys you choose to save, stored on LumaTruth in encrypted form.
• Billing data processed by Stripe, with subscription status shared back to us.
• Operational logs and security events that may include timestamps, request metadata, and IP addresses.

How we use information

• Provide scoring, image checks, video checks, and related features.
• Enforce free tier limits and manage subscription entitlements.
• Store API keys securely so scoring can run on your behalf.
• Operate, secure, debug, and improve the service.

How we share information

• OpenAI: content submitted for analysis is sent to OpenAI using your API key to generate results.
• Stripe: billing and subscription payments are processed by Stripe.
• Service providers: we use infrastructure providers to host our servers and databases.
• We do not sell your personal information.

Data retention

We retain data only as long as needed to provide the service, comply with legal obligations, and enforce usage limits. You can request deletion of stored keys or usage records by contacting us.

Your choices

• You can disable badge scanning or avoid analysis features to stop content from being sent for analysis.
• You can remove the extension to stop collection and delete local settings.
• You can request removal of server-stored data by contacting us.

Security

We use reasonable safeguards to protect data. API keys saved to LumaTruth are encrypted at rest.

Children's privacy

Luma is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. The latest version will be posted at this URL with the updated date.

Contact

For privacy questions, contact us at chri.haines@gmail.com.