Privacy Policy

**Last Updated:** August 11, 2025

This Privacy Policy describes how [LumenCanvas] ("we," "us," or "our") collects, uses, and discloses your information when you use our [website/service/application] (the "Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

We are committed to protecting your privacy and handling your data in a transparent and secure manner. We adhere to the principles of the General Data Protection Regulation (GDPR) for users in the European Union and the United Kingdom, and relevant privacy laws in the United States. Vercel, our hosting provider, is certified under the EU-U.S. Data Privacy Framework, ensuring adequate data protection for transfers of personal data outside of the EU, UK, and Switzerland [^2]. Vercel also supports GDPR compliance and is ISO 27001:2022 certified [^1].

1. Information We Collect

We collect several types of information for various purposes to provide and improve our Service to you.

A. Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personal Data may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Usage Data (as described below)

B. Usage Data

We may also collect information about how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

C. Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• **Session Cookies:** We use Session Cookies to operate our Service.
• **Preference Cookies:** We use Preference Cookies to remember your preferences and various settings.
• **Security Cookies:** We use Security Cookies for security purposes.

2. How We Use Your Information

[LumenCanvas] uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.

Legal Basis for Processing Personal Data Under GDPR

If you are from the European Economic Area (EEA) or the UK, our legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

We may process your Personal Data because:

• We need to perform a contract with you
• You have given us permission to do so
• The processing is in our legitimate interests and it's not overridden by your rights
• For payment processing purposes
• To comply with the law

3. How We Share Your Information

We may share your information in the following situations:

• **With Service Providers:** We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• **For Business Transfers:** We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• **With Affiliates:** We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any other subsidiaries, joint venture partners or other companies that we control or that are under common control with us.
• **With Business Partners:** We may share your information with our business partners to offer you certain products, services or promotions.
• **With Other Users:** When you share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
• **With Your Consent:** We may disclose your personal information for any other purpose with your consent.

4. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your Personal Data.

A. For European Economic Area (EEA) and UK Users (GDPR)

If you are a resident of the EEA or the UK, you have the following data protection rights:

• **The right to access:** You have the right to request copies of your Personal Data.
• **The right to rectification:** You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• **The right to erasure:** You have the right to request that we erase your Personal Data, under certain conditions.
• **The right to restrict processing:** You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
• **The right to object to processing:** You have the right to object to our processing of your Personal Data, under certain conditions.
• **The right to data portability:** You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• **The right to withdraw consent:** You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. You also have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EEA or the UK.

B. For California Residents (CCPA)

If you are a California resident, you have specific rights regarding your Personal Data under the California Consumer Privacy Act (CCPA):

• **Right to Know:** You have the right to request that we disclose what personal information we collect, use, disclose, and sell.
• **Right to Delete:** You have the right to request the deletion of your personal information collected or maintained by us.
• **Right to Opt-Out:** You have the right to opt-out of the sale of your personal information. We do not sell your personal information.
• **Right to Non-Discrimination:** You have the right not to receive discriminatory treatment for exercising your CCPA rights.

To exercise these rights, please contact us using the details provided in the "Contact Us" section below. We will verify your request using the information associated with your account, including your email address.

5. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

6. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. Vercel, our infrastructure provider, encrypts data at rest with AES-256 and data in transit with HTTPS/TLS 1.3 [^1].

7. Children's Privacy

Our Service does not address anyone under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

8. Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.