1. Who we are

Lumosor ("Lumosor," "we," "us," or "our") is an SEO and App Store Optimization (ASO) platform available at lumosor.com.

This policy applies to lumosor.com, the Lumosor dashboard, and any related services (collectively, the "Service").

2. Information we collect

2.1 Information you give us

• Account information: name, email address, password (stored hashed), company name, and billing address.
• Payment information: processed by our payment provider (e.g. Stripe). We do not store full card numbers on our servers.
• Project information: website URLs, app store listing URLs, target keywords, competitor domains, and roadmap preferences you enter into the dashboard.
• Support communications: messages you send via chat, email, or the help ticket form.

2.2 Information from connected third-party accounts

To provide the Service, Lumosor allows you to connect the following third-party accounts via OAuth or API key. We only request the scopes needed to deliver the features below, and you can disconnect these accounts at any time from your dashboard settings.

2.3 Information collected automatically

• Log data (IP address, browser type, device information, pages visited, timestamps).
• Usage data within the dashboard (features used, AI Assistant credit consumption, report generation).
• Cookies and similar technologies (see Section 9).

2.4 Third-party keyword and SEO data

Lumosor uses third-party SEO/ASO data providers to generate keyword volume, backlink, and competitor data. This data relates to public search and app store information and is not linked to your personal identity beyond your project settings.

3. How we use your information

• To provide, operate, and maintain the Service, including audits, rank tracking, and the 90-day roadmap.
• To generate white-label client reports on your behalf.
• To process subscription payments and manage your account and billing tier (Starter, Growth, or Agency).
• To power the AI Assistant, including generating briefs, fixes, and roadmap coaching using your project data and monthly credit allowance.
• To send transactional emails (billing, security, account notices) and, where you've opted in, product updates.
• To monitor, secure, and improve the Service, including fraud and abuse prevention.
• To respond to support requests submitted via chat, ticket, or email.
• To comply with legal obligations.

4. Legal basis for processing (EEA/UK users)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases: performance of a contract (providing the Service you signed up for), legitimate interests (improving and securing the Service, preventing fraud), consent (marketing communications and optional cookies), and legal obligation (tax and accounting records).

5. How we share information

We do not sell your personal information. We share information with:

• Service providers: hosting infrastructure, payment processing (e.g. Stripe), email delivery, and SEO/ASO data providers, under contracts that limit their use of your data to providing services to us.
• Google and Bing: only to the extent necessary to retrieve data from accounts you've explicitly connected, in accordance with Google API Services User Data Policy.
• Your team members and clients: if you invite collaborators to your workspace or generate white-label reports for your clients, information you choose to include is shared as directed by you.
• Legal and safety: where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of Lumosor, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

6. Google API Limited Use disclosure

Lumosor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data accessed through Search Console or Analytics is used only to provide and improve the SEO features you've enabled, is not used for advertising, and is not shared except as necessary to provide the Service or as permitted by that policy.

7. Data retention

We retain account and project data for as long as your account is active. If you cancel your subscription, we retain your data for a limited period (up to 90 days) in case you wish to reactivate, after which it is deleted or anonymized, except where we are required to retain it for legal, tax, or accounting purposes.

8. Your rights

Depending on your location, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion; object to or restrict certain processing; request a portable copy of your data; and withdraw consent where processing is based on consent. To exercise these rights, contact us using the details in Section 13. We may need to verify your identity before fulfilling a request.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

9. International data transfers

Lumosor serves customers in both the UK/Europe and Pakistan, and our infrastructure and service providers may process data outside your home country. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognized under applicable law.

10. Cookies and similar technologies

We use cookies and similar technologies for: authentication and session management (essential), remembering preferences, and analytics to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

11. Security

We use industry-standard technical and organizational measures, including encryption in transit, access controls, and hashed password storage, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's privacy

Lumosor is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the dashboard before the changes take effect. The "Last updated" date at the top reflects the most recent revision.

14. Contact us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: Submit a support ticket or via the contact details on lumosor.com/contact