At LumoAuth, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services (the "Service").
1. Introduction
This Privacy Policy applies to information we collect when you use the LumoAuth platform, visit our website, or interact with us. By using the Service, you agree to the collection and use of information as described in this policy.
LumoAuth acts as a data processor on behalf of our customers. When you access applications that use LumoAuth for authentication, the privacy practices of that application's operator (our customer) govern how your information is handled within their application.
2. Information We Collect
Information You Provide
We collect information you provide directly to us, including:
- Account Information: Name, email address, password, and organization details when you create an account
- Profile Information: Information you add to your profile, such as job title or phone number
- Payment Information: Billing address and payment details for paid subscriptions (processed by our payment provider)
- Communications: Information you provide when contacting support or communicating with us
Information We Collect Automatically
When you use our Service, we automatically collect:
- Usage Data: Information about how you use the Service, including authentication events, API calls, and feature usage
- Device Information: Browser type, operating system, device identifiers, and IP address
- Log Data: Server logs including access times, pages viewed, and referring URLs
- Cookies: We use cookies and similar technologies to maintain sessions and remember preferences
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send technical notices, updates, and security alerts
- Respond to your comments, questions, and support requests
- Monitor and analyze usage patterns and trends
- Detect, prevent, and address fraud and security issues
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With vendors who assist in providing the Service (hosting, payment processing, analytics)
- Legal Requirements: When required by law or to respond to legal process
- Protection: To protect the rights, property, and safety of LumoAuth, our users, or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Consent: When you have given us permission to share your information
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes or enforcing our agreements.
You can request deletion of your account and associated data by contacting us. Some information may be retained in backups for a limited period.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and monitoring
- Access controls and authentication requirements
- Employee security training
While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
7. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request that we delete your personal information
- Portability: Request a copy of your data in a portable format
- Objection: Object to certain processing of your personal information
- Restriction: Request that we limit how we use your information
To exercise these rights, please contact us at privacy@lumoauth.dev.
8. Cookies and Tracking
We use cookies and similar tracking technologies to collect and store information. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.
| Cookie Type | Purpose |
|---|---|
| Essential | Required for the Service to function (authentication, security) |
| Functional | Remember your preferences and settings |
| Analytics | Understand how visitors use our website |
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.
10. Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
- Email: privacy@lumoauth.dev