Privacy Policy

What we collect, why, and what we never do. Last updated 4 August 2026.

What we collect

Account data (name, email, organization), the operational data you send (automation definitions, run events and their metadata, cost and rate assumptions), and product telemetry about feature usage (signups, plan changes, ingestion volume). For AI workloads we receive token counts, model identifiers, and costs; the ingestion paths do not accept prompt or completion content. Billing card details go directly to Stripe; we never see or store them.

What we use it for

Running the service, computing your value ledger, sending the emails you configure (value packs, alerts, invitations), and improving the product. We do not sell your data, we do not advertise, and we never use one customer's data to benefit another.

Cookies

Essential cookies keep you signed in and protect forms from cross-site request forgery. Two further cookies record which campaign brought you to the site; those are set only if you accept them, a Global Privacy Control signal counts as a refusal, and you can change your answer at any time. There are no third-party scripts, analytics vendors, or advertising pixels on this site. The cookie page lists every cookie, what it holds, and how long it lasts.

We do not sell your personal information

We do not sell or share personal information, and we never have. Under the California Consumer Privacy Act, "share" has a specific meaning: disclosing personal information for cross-context behavioral advertising. We do not do that either, which is why there is no "Do Not Sell or Share My Personal Information" link on this site. California residents have rights to know, delete, correct, and to be free from retaliation for exercising them. The law allows 45 days to answer; we work to the 30 days we promise everyone else. Email support@lumatrack.io.

Our role, and yours

For your account data, our marketing list, and our own product telemetry we are the controller: we decide why that data is processed. For the operational data you send us, automation definitions, run events, rates and baselines, you are the controller and we are your processor, acting on your instructions. When an MSP administers a managed organization, the MSP is the controller for that organization's data.

Where your data lives

LumaTrack runs in the United States on Render, and our database and backups are held there. If you are in the United Kingdom or the European Economic Area, your data is transferred to the United States to deliver the service. We are completing the data-processing agreement and standard contractual clauses that cover those transfers; email support@lumatrack.io if you need them in place before you buy.

Sharing

Report links and shared analytics views are visible to anyone who has the URL until you revoke them; that is their purpose, and you control creation and revocation.

Service providers and customer-directed connections

We run on Render (hosting) and Stripe (payments), and send email through our email delivery provider. If you enable AI spend import, we use the provider admin keys you supply to fetch billing totals from OpenAI or Anthropic on your behalf (keys encrypted at rest; remove them any time). Webhook deliveries and report links go to destinations you configure; those are your connections, under your control. We disclose data only when legally compelled, and we will tell you unless prohibited.

Managed service providers

When an MSP creates a managed organization for a client, the MSP is our customer and administers that organization; the client's users see only their own organization's data. Questions about a managed organization's data go first to the MSP that manages it.

Retention and deletion

Run history is retained per your plan's retention window. On account deletion we remove your organization's data, including feedback text and marketing-list entries, within 30 days; backups age out within 90.

Your rights

Export is self-serve and needs no request: the ledger, run events, automations, and value figures download as CSV from inside the app on every plan, and the same records read over the API. See the export guide. For a single bundle of everything your organization holds, or for correction or deletion, email support@lumatrack.io. We answer within 30 days.