Lumora

Privacy Policy

Last updated: 16 July 2026

This policy explains what Lumora collects, why, and what we never touch. Short version: an email to sign you in, your decks so they sync, a usage counter for billing — and your payment details never reach our servers at all.

1. What we collect

Account: your email address and a hashed password (or your Google account id if you sign in with Google), managed by Supabase, our authentication and database provider.

Content: the decks you create and any documents you upload for deck generation. Uploaded documents are processed to text in memory to build your deck and are not stored on our servers.

Usage: a per-account metering record (deck credits, plan, generations used) needed to run the free tier and paid plans.

2. Payments

Purchases are handled entirely by Dodo Payments, our merchant of record. Your card, UPI, or wallet details go directly to them and never reach our servers. We receive only the confirmation needed to credit your account (which product was bought and for which account).

3. AI processing

When you generate or edit a deck with AI, the topic, brief, and any uploaded document text are sent to our AI providers (Anthropic for text, Cloudflare for images) to produce the result. These providers process the data to serve the request and do not use it to train models under our agreements with them.

4. What we don't do

We do not sell or rent your data, we do not run third-party advertising or tracking, and we do not read your decks except when required to operate the service or investigate abuse.

5. Cookies

Lumora uses only the storage needed to keep you signed in (your Supabase session). No advertising or cross-site tracking cookies.

6. Sharing links

A deck is private unless you create a share link for it. Anyone with a share link can view that deck; you can unpublish a link at any time from the studio.

7. Retention and deletion

Decks and account data are kept while your account exists. Email infolumora2389@gmail.com from your account address to delete your account and all associated decks; deletion is completed within 30 days.

8. Contact

Data controller: Ayush Yadav (sole proprietor, India) — infolumora2389@gmail.com. We may update this policy; material changes will be announced on the site.

Terms of ServicePrivacy PolicyRefund Policy· Questions: infolumora2389@gmail.com