Privacy Policy
1. Who we are
LUMI helps businesses manage operational work with AI and human oversight. Service operator and data controller for this service: Lumiios by Salestor LTD. This policy explains what information LUMI handles, why, who can see it, and the choices you have.
2. Information we handle
Account and workspace details (business name, user names, login identifiers). WhatsApp content you connect to LUMI: messages, attachments, contact names and phone numbers. Task instructions, drafts, approvals and activity records. If you connect a Google account: your Google account email and basic profile, and, only for the permissions you approve on Google's consent screen, email messages you ask LUMI to work with, sending of replies you approve, and calendar events. We do not collect passwords or payment card details in ordinary messages and ask you not to send them.
3. How we use it
We use the information only to do the work you ask for: read the relevant conversation, prepare a draft or action, show it for approval, and carry it out after the applicable approval. We also use it to keep the service secure, investigate misuse, support you, and meet legal duties. We do not sell personal information and do not use it for advertising.
4. Google user data
LUMI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features you request. It is not used or transferred for advertising, is not sold, and is not used to develop, improve or train generalized AI or machine-learning models. Humans do not read Google user data unless you give consent for specific items, it is needed for security or abuse investigation, or the law requires it.
5. AI processing and human oversight
LUMI uses AI models to read and draft. Content needed for a task is sent to AI service providers acting on our behalf to produce that result. A person from the LUMI operations team may review a task to supervise quality and approve actions, within the limits described in section 4 for Google data.
6. Sharing
We share information only with service providers that run LUMI for us (hosting, AI processing, messaging infrastructure such as WhatsApp and Meta), with recipients you approve for a message or action, when required by law, or to protect rights and safety. Providers may process it only on our instructions. Each business workspace is kept separate from other businesses.
7. Storage, security and retention
We protect information with access controls, per-business separation, protected storage of connection tokens, and activity logs. We keep information while your workspace is active and as needed for the work and legal obligations, then delete it as described on the User Data Deletion page. Backup copies and legally required records may remain for a limited time; we explain any retained information and its period when we answer a deletion request.
8. Your choices and rights
You can disconnect WhatsApp or a Google account at any time, and revoke LUMI's access in your Google Account permissions. Disconnecting alone does not delete records. You can ask to access, correct or delete your information by following the User Data Deletion page. Where local law gives you additional rights, contact us and we will handle the request.
9. Changes
If we change this policy in a material way, we will update this page and its date. Last updated: October 2026.
10. Contact
Questions or requests: [email protected].