PRIVACY POLICY

1. Who We Are

LumaText is operated by Lekhansh Ojha, an individual sole proprietor based in India, who is the data controller for the personal data described in this policy. You can reach us about anything in this document at [email protected]. In this policy, "we", "us" and "LumaText" all mean that operator.

2. Information We Collect

When you create an account, we collect your email address and basic profile information provided through Google Sign-In. We also collect usage metadata such as word counts, timestamps, and feature usage, and — so we can show you your work history in the Library — the text you submit and the results we generate for you.

When you sign up, we look up the approximate country of your IP address. We store only the country, not the IP address.

If you paste text into a tool page before signing in, we hold that text in your browser session on our server so it is still there after you create your account and can run immediately. It is discarded when your session ends and is not attached to any account until you have one.

When you visit our website, Google Analytics collects standard analytics data about your visit, such as pages viewed, approximate location, device and browser type, and how you arrived at the site (see section 9).

If you subscribe to Pro, your payment is handled entirely by Polar (see section 6). We never receive or store your full card number. From Polar we receive only what we need to run your subscription: your Polar customer and subscription IDs, the subscription status, your billing period dates, whether you have cancelled, and the amount, currency and date of each payment.

3. How We Use Your Information, and Our Legal Bases

We use your information to:

• Provide and maintain the LumaText service
• Manage your account and your Pro subscription, including granting or removing Pro access based on your payment status
• Enforce usage limits and prevent abuse
• Improve our service
• Communicate with you about your account

If you are in the UK, EU or another region with similar law, we rely on these legal bases:

• Performance of a contract — running your account, processing the text you submit, saving your Library documents, and managing your Pro subscription and billing. Without this data we cannot provide the service you asked for.
• Legitimate interests — enforcing usage limits, preventing abuse, keeping the service secure, our internal operational notifications, and understanding how the site is used so we can improve it. We balance these against your rights, which is why our internal notifications carry counts and never the text you submit, and why we store your country instead of your IP address.
• Legal obligation — keeping the records that tax and accounting law requires.

We do not sell your personal data, and we do not use the text you submit to train any model of our own.

4. Text Processing

Text you submit is sent to a specialist third-party provider for processing: one provider rewrites text for the AI Humanizer, and another scores text for the AI Detector and scans it for the Plagiarism Checker. We send only the text itself, never your name or email address, so the provider receives the text without anything identifying you. We save your submitted text and its result to your account so you can find it again in your Library. You can delete any saved document, or all of them, at any time from your Library or Account Settings — deleting a document does not affect your usage history or daily limits. Our API providers may have their own data retention policies.

5. Third-Party Services

We use the following third-party services:

• Google Sign-In — for authentication
• Google Analytics — for website analytics (see section 9)
• AI text-processing providers — one rewrites text submitted to the AI Humanizer; another scores text for the AI Detector and scans it for the Plagiarism Checker. They receive the text alone, with nothing that identifies you.
• An IP geolocation provider — looks up the approximate country of your IP address at signup
• An internal team-notification service — alerts our team about signups, tool usage and payments. These alerts include your email address, country, plan, word counts and payment amounts, but never the text you submit.
• Polar (polar.sh) — merchant of record for Pro subscriptions: checkout, payment processing, tax, invoices and the billing portal

We name Google and Polar because you deal with them directly — you sign in through Google and you buy your subscription from Polar. For the others we describe what they do and exactly what they receive, rather than naming the company, because which providers we use is commercially sensitive and we change them from time to time. This does not change what happens to your data, and it does not limit your rights. If you want to know which specific companies process your personal data, email us at [email protected] and we will tell you.

6. Payments and Billing

Pro subscriptions are sold and billed by Polar Software, Inc. ("Polar"), which acts as our merchant of record and authorized reseller. When you upgrade, you are sent to Polar's secure checkout, and you buy the subscription from Polar.

• What Polar collects: Polar collects the details needed to take payment and calculate tax, such as your name, email address, billing address and country, and (if you provide them) a business name and tax ID. Your card details go to Polar's payment processor, Stripe, and are never sent to or stored by LumaText.
• What we share with Polar: When you start a checkout, we send Polar your LumaText account ID and email address so that your payment can be linked to your LumaText account.
• What Polar sends back to us: Polar notifies our servers when your subscription starts, renews, fails to renew, is cancelled or ends. These notifications are cryptographically signed and verified before we act on them, and we use them only to turn Pro access on or off and to show your billing status.
• Billing portal: The "Manage subscription" button in your Billing page opens Polar's customer portal, where you can update your card, download invoices and cancel or resume your subscription.

Polar handles the data it collects under its own Privacy Policy. For questions about a charge, invoice or refund, you can also contact Polar directly at [email protected].

7. Where Your Data Is Processed

LumaText is operated from India, and the third-party services listed in section 5 are based in various countries, including the United States. Using LumaText therefore means your personal data is transferred outside your own country, including outside the UK and the European Economic Area, to places whose data protection laws may differ from your own.

Where we transfer personal data out of the UK or EEA, we rely on the transfer mechanisms our providers offer, such as the European Commission's Standard Contractual Clauses. If you would like more detail about a particular transfer, email us and we will tell you what applies.

8. Data Security

We implement industry-standard security measures to protect your information. All data transmission is encrypted via HTTPS, access to the production database is restricted, and credentials for third-party services are held outside our source code.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data and is likely to present a risk to you, we will notify you by email without undue delay, and we will notify the relevant regulator where the law requires it.

9. Cookies

We use essential cookies for session management and authentication. Polar's checkout and customer portal pages are hosted by Polar and may set their own cookies, as described in Polar's Privacy Policy.

We also use Google Analytics, which sets cookies (such as _ga) to recognise returning visitors and measure how the site is used. Google processes this data under its own Privacy Policy. You can block these cookies in your browser settings or opt out with Google's Analytics opt-out add-on. The site keeps working if you do.

10. Data Retention

Account data and usage metadata (word counts, timestamps and which tool you used) are kept while your account exists and are deleted when your account is deleted. We may keep anonymous totals, such as the overall number of words processed, that cannot identify you. Saved Library documents are capped at your plan's history limit (the newest documents on the free plan); older documents are removed automatically as new ones are saved. You can delete any saved document at any time. To delete your account and all associated data, email [email protected] from the email address on your account, and we will delete it and confirm once it is done. Subscription records (the Polar IDs, status and dates described above) are kept while your account exists. Polar keeps its own payment and invoice records for as long as tax and accounting law requires, even after your LumaText account is deleted.

11. Your Rights

Wherever you live, you can ask us to give you a copy of your personal data, correct it if it is wrong, or delete it and your account. Depending on your country, you may also have the right to:

• receive the data you gave us in a portable, machine-readable format, or have us send it to another provider
• object to, or ask us to restrict, processing we base on our legitimate interests
• withdraw consent you have given, without affecting anything we did before you withdrew it
• not be discriminated against for exercising any of these rights — your plan and limits do not change because you made a request

To exercise any of these, email [email protected] from the address on your account. We will respond within 30 days. We do not charge for this, and we will not ask you for more identifying information than we need to confirm the request is yours.

If you are in the UK or EEA and you think we have handled your data wrongly, you have the right to complain to your national data protection authority. We would appreciate the chance to put it right first. For payment data held by Polar, you can also contact Polar directly under its Privacy Policy.

12. Children

LumaText is not for children. You must be at least 16 years old to create an account, or at least 13 if the law where you live allows you to consent to online services at that age with a parent or guardian's permission. We do not knowingly collect personal data from anyone below that age. If you believe a child has created an account, email us and we will delete the account and its data.

13. Changes

We may update this policy from time to time. We will notify you of significant changes via email or through the service.

14. Contact

For privacy-related questions, contact us at [email protected].