Privacy Policy

1. About Lumora

Lumora is a software-as-a-service (SaaS) platform that provides an AI receptionist and appointment management functionality. Lumora helps businesses such as salons, clinics, and other small service providers handle inbound customer messages, answer questions about services and availability, and schedule, reschedule, or cancel appointments.

2. Information users may provide

To provide the service, Lumora may process the following categories of information, when users or businesses voluntarily provide them:

• Account and contact information — such as the business name, owner name, email address, and password used to create and access a Lumora account.
• Appointment and scheduling information — such as the customer's name, phone number, requested service, preferred date and time, and any details needed to book, change, or cancel an appointment.
• Messages and information processed through Lumora — including chat messages, booking requests, and other information exchanged through the channels connected to Lumora, which may be analyzed to generate responses and manage appointments.
• Technical and security information — such as basic device, browser, and access logs used to operate, secure, and troubleshoot the service.

3. Why we process information

Lumora processes information only to provide and improve the service. Specifically, we use information to:

• respond to customer inquiries and provide AI receptionist functionality;
• schedule, confirm, reschedule, and cancel appointments;
• send confirmations and reminders related to appointments;
• sync appointments with connected calendars where the user has enabled this;
• operate, monitor, secure, and maintain the service;
• comply with applicable legal obligations.

4. Service providers and processors

To operate the service, Lumora may use trusted third-party service providers and processors that perform necessary technical functions, such as hosting, database storage, email delivery, messaging channels, calendar providers, and AI services used to generate responses. These providers process information only on Lumora's behalf and under appropriate agreements to help operate and secure the service.

5. Security measures

Lumora applies reasonable technical and organizational measures to protect information against unauthorized access, loss, misuse, or disclosure. These include secure connections, access controls, and regular monitoring. However, no system can guarantee absolute security, and we cannot guarantee the security of information transmitted over the internet.

6. Data retention

We retain information only for as long as reasonably necessary to provide the service, meet legal obligations, resolve disputes, prevent abuse, and maintain security. After the retention period expires, information is deleted or anonymized where appropriate.

7. Google User Data

When a user voluntarily connects their Google account or Google Calendar to Lumora, Lumora may request access only to the Google Calendar permissions required for scheduling functionality. This access may be used to:

• identify calendars available to the connected user where required;
• check calendar availability and free/busy information;
• view appointment or event information where required for scheduling;
• create appointment events;
• update appointment events;
• delete or cancel appointment events when required by the user's scheduling actions.

Google Calendar data is used only to provide user-facing scheduling and calendar synchronization functionality. Lumora:

• does not sell Google user data;
• does not use Google user data for advertising;
• does not use Google user data to build advertising profiles;
• limits access to the functionality authorized by the user;
• allows users to disconnect Google Calendar or revoke Google access at any time;
• retains data only as necessary for the service, security, legal obligations, or legitimate operational requirements.

Lumora's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Lumora does not transfer, store, or use Google user data to any application or advertising system that is independent of the scheduling functionality authorized by the user.

8. Your rights (EU/EEA)

For users in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) gives you certain rights regarding your personal data, including:

• the right to access your personal data;
• the right to correct inaccurate personal data;
• the right to erase your personal data ("right to be forgotten");
• the right to restrict processing;
• the right to object to processing;
• the right to data portability, where applicable;
• the right to withdraw consent where processing is based on consent;
• the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, or for any privacy-related question, contact Lumora at the email below.

9. Contact

For any question regarding this Privacy Policy or the processing of your data, contact Lumora at: reception.lumora@gmail.com