Privacy Policy

This Privacy Policy describes how Create by Lumera ("we", "us", "our"), operating under the domain createbylumera.com, collects, uses, shares, and protects your personal information when you use Create by Lumera and related services (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored securely using industry-standard hashing)
• Profile picture (optional)

1.2 Payment Information

When you subscribe to our Pro plan, payment is processed by our third-party payment providers:

• Stripe — processes credit/debit card payments and manages recurring subscriptions. We store your Stripe customer ID and subscription ID, but never your full card number.
• PayPal — processes one-time payments. We store your PayPal order ID, but not your PayPal account credentials.

Payment providers handle card data directly under their own privacy policies and PCI-DSS compliance.

1.3 Generated Content

We store the digital products you generate (planners, journals, guides, etc.), including:

• Product titles, descriptions, and configuration settings
• Generated images and text content
• Collections and saved favorites

1.4 Third-Party Integration Data

When you connect external services, we store:

• Pinterest — access token, board data, publish history (via Pinterest API v5)
• Shopify — store domain, Admin API access token, export history

These tokens are stored securely and used solely to perform actions you explicitly request.

1.5 Automatically Collected Data

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, features used, and timestamps
• Cookies and similar technologies (see our Cookie Policy)

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process payments and manage subscriptions
• To generate and store digital products on your behalf
• To connect and interact with third-party services (Pinterest, Shopify) at your request
• To send transactional emails (account confirmation, payment receipts, Pro welcome emails)
• To detect and prevent fraud or abuse
• To comply with legal obligations

3. AI Content Generation

Our Service uses OpenAI's language models to generate content. Text prompts you provide may be sent to OpenAI's API for processing. We do not use your generated content to train AI models. Please review OpenAI's Privacy Policy for their data handling practices.

4. Data Sharing

We do not sell your personal data. We share information only in the following cases:

• Payment Processors — Stripe and PayPal receive necessary payment information to process transactions.
• Third-Party Integrations — Pinterest and Shopify receive data only when you explicitly connect and use these features.
• Email Service — We use Resend to deliver transactional emails. Only your email address is shared.
• AI Providers — OpenAI processes content generation requests. No personal account data is sent.
• Legal Requirements — We may disclose information if required by law or to protect our rights.

5. Data Retention

We retain your account data and generated content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance).

6. Data Security

We use industry-standard security measures including encrypted connections (TLS/SSL), hashed passwords (bcrypt), and secure token storage. However, no system is 100% secure. We recommend using a strong, unique password for your account.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for data processing
• Object to certain types of processing

To exercise these rights, contact us at support@createbylumera.com.

8. International Data Transfers

Our Service is hosted on cloud infrastructure that may process data in different jurisdictions. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

9. Children's Privacy

Our Service is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Service. Continued use of the Service after changes constitutes acceptance.

11. Contact

If you have questions about this Privacy Policy, contact us:

• Email: support@createbylumera.com
• Website: createbylumera.com