Privacy Policy

Luman is a workspace product built by Lucide Tech ("Lucide Tech," "we," "us"). This policy explains what information Luman collects when you use the app at luman.lucide.in or the Luman desktop app, why we collect it, and the choices you have. It applies to every Luman product surface: the marketing site, the desktop workspace, and the underlying API.

1. Information we collect

Account information

When you sign up or sign in — including with "Continue with Google" — we receive your name, email address, and profile picture from the identity provider. Signing in with Google only requests your basic Google profile (name, email address, profile photo). Luman does not request access to your Gmail, Google Drive, Google Calendar, or any other Google service — the sign-in is used strictly to authenticate you, not to read or write data in your Google account.

Content you create

Luman stores what you put into it: notes and documents, tasks and their due dates, calendar events, chat messages, whiteboard content, uploaded files, and the organizations and workspaces you create or join. This content is stored so the product can function — showing your notes back to you, syncing tasks across your team, and so on.

Voice input

If you use Luman's voice agent, your recorded audio is sent to our transcription and text-to-speech providers solely to convert your speech to text and to generate a spoken reply. Audio clips are not stored by Luman after the request completes; see "Third-party processors" below for who performs the transcription and speech synthesis and their own data handling.

Usage data

We collect standard technical data — IP address, browser type, device information, and log timestamps — to keep the service secure, debug issues, and understand basic usage patterns.

2. How we use your information

• To create and authenticate your account, and to keep you signed in.
• To operate the core product: storing and displaying your notes, tasks, calendar, chats, and files.
• To let you invite teammates to a shared organization or workspace, and to show them your name and email as the author of shared content.
• To transcribe voice commands and generate spoken replies when you use the voice agent.
• To respond to support requests you send us.
• To detect, investigate, and prevent abuse, security incidents, and violations of our terms.

We do not sell your personal information, and we do not use your notes or documents to train AI models.

3. Third-party processors

Luman relies on a small number of infrastructure providers to operate. Each only receives the data it needs to perform its specific function, and each is bound by its own privacy and security terms.

• Supabase — hosts our database and authentication, and processes Google OAuth sign-in.
• OpenRouter — processes text sent to the voice agent and AI assistant so a language model can interpret commands or generate assistant replies.
• Google (Gemini API) — powers the voice agent end to end: it transcribes your voice recordings into text, interprets what you asked for, and converts the agent's replies back into spoken audio. In conversation mode your browser streams microphone audio to Google directly for as long as the conversation is open.
• Vercel — hosts the Luman application and web infrastructure.

4. Data sharing within your organization

Luman is built around shared organizations and workspaces. Content you create inside a shared workspace — notes, tasks, chat messages, calendar events, files — is visible to other members of that workspace according to the role and permissions your organization administrator sets. Your name and email are visible to teammates you share a workspace with, so they know who created or edited what.

5. Data retention

We retain your account and content for as long as your account is active. If you delete a note, task, or other item, it is removed from active use; if you delete your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it by law or for legitimate business purposes such as fraud prevention.

6. Your choices and rights

• You can access, edit, or delete most of your content directly inside Luman.
• You can request a copy of your personal information, or ask us to delete your account and associated data, by contacting us (see "Contact" below).
• If you are in the EEA, UK, or a jurisdiction with similar data protection law, you have rights to access, correct, delete, or port your data, and to object to or restrict certain processing.
• You can revoke Luman's access to your Google account at any time from your Google Account permissions page.

7. Security

We use industry-standard measures — encryption in transit, access controls, and row-level security on our database — to protect your data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

8. Children's privacy

Luman is not directed at children under 13, and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy as Luman changes. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

10. Contact

Questions about this policy or your data can be sent through our support page, or by email at privacy@lucide.in.