Privacy Policy.

Lumanw Inc. is the data controller.

Lumanw Inc. ("Lumanw", "we", "us", or "our") provides a configurable AI operations platform. This policy explains what personal information we collect when you visit lumanw.com, contact us, or use our platform, applications, APIs, integrations, and related services — and what we do with it.

If you have any questions about this policy or how your data is handled, contact us at privacy@lumanw.com.

The data we hold falls into four categories.

Information you provide directly. Name, work email, company, role, country of operation, and any details you share through the contact form, demo requests, support enquiries, or while using our applications.

Customer operational data. When customers use Lumanw to model workflows and coordinate work, we process the records, events, tasks, decisions, messages, documents, and other operational information they choose to submit or connect. This data belongs to the customer; we process it on their behalf to deliver the service.

Device and usage data. Standard log information including IP address, browser type, device identifiers, pages viewed, timestamps, and referring URLs. We use cookies and similar technologies for session management, analytics, and security.

Information from connected services. Where a customer chooses to connect a third-party system, we receive the information authorised by that customer and use it to provide the requested integration and platform features.

Only for what the platform needs to do.

We use personal information to operate, maintain, secure, support, and improve the Services; to authenticate users; to coordinate configured workflows and provide decision support; to communicate about your account or our services; to comply with legal obligations; and to detect and prevent fraud or abuse.

We do not sell personal information, share it with third parties for advertising, or use one customer's operational data to provide market intelligence to another customer.

We process data only when we have a lawful basis.

Depending on the jurisdiction, the legal basis for processing is one of: performance of a contract with you or your employer; your consent (which you may withdraw at any time); compliance with a legal obligation; or our legitimate interest in operating, securing, and improving the platform, balanced against your rights and freedoms.

A short list of carefully chosen partners.

We share information only with: (a) cloud infrastructure and service providers that help us operate, secure, support, and monitor the Services under contractual controls; (b) third-party systems a customer asks us to connect to; (c) professional advisors, regulators, and authorities where required by law; and (d) acquirers or successors in the event of a corporate transaction, subject to equivalent protection.

Data follows the operation, not the border.

Lumanw operates across multiple countries. Personal information may be processed outside your country of residence. Where this happens, we rely on appropriate safeguards — including standard contractual clauses, adequacy decisions, and data residency configurations — to ensure your information remains protected to the standard required by applicable law.

Encrypted in transit, encrypted at rest, retained no longer than needed.

We use TLS for data in transit, encryption at rest for stored data, role-based access controls, audit logging, and routine penetration testing. No system is perfect; if a breach affecting your personal information occurs, we will notify you and the relevant authorities within the timelines required by applicable law.

We retain personal information only for as long as needed to deliver the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and jurisdiction.

You can ask us what we hold and what to do with it.

Subject to applicable law (including POPIA in South Africa, GDPR in the EU/UK, and equivalent regimes in other markets), you have the right to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent where processing is based on it. To exercise any of these rights, email privacy@lumanw.com. We will respond within the timeframe required by the applicable law.

If we process data on behalf of a customer using the Lumanw platform, please direct your request to that customer in the first instance — they are the controller, and we will support them in fulfilling it.

Essential cookies, plus a few we'd like to use.

We use strictly necessary cookies to keep you signed in and the platform secure. With your consent, we also use analytics and performance cookies to understand how the site is used so we can improve it. You can control non-essential cookies through your browser settings or any cookie controls offered on our site.

Lumanw is not for children.

Our products are designed for businesses and the people who run them. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

We will tell you when this changes.

We may update this policy as our platform and the law evolve. The date at the top of this page reflects the most recent change. Material changes will be communicated through the platform or by email before they take effect.

Reach the privacy team.

Questions, requests, and complaints can be sent to privacy@lumanw.com. You also have the right to lodge a complaint with the data protection authority in your jurisdiction — for South African residents, the Information Regulator (POPIA).