Privacy Policy

Last updated: June 19, 2026

Lumien LLC (“Lumien”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you use our website (lumienai.com) or engage with our services, how we use it, who we share it with, and your rights.

1. Who we are

Lumien LLC is a limited liability company organised in the State of California, United States. Our registered office is 5750 Sunrise Boulevard, STE 210-G, Citrus Heights, California 95610, United States. You can reach us at info@lumienai.com.

2. Data we collect

We collect personal data only when you provide it or when it is necessary to deliver our services:

• Contact form submissions: name, email, company, project goal, budget range, message.
• Engagement data: contracts, invoices, proposals and project artefacts you share with us.
• Website analytics: aggregated, anonymised page views, referrer, country, device type via privacy-respecting analytics.
• Server logs: IP address, user-agent, timestamp, retained for up to 30 days for security and abuse prevention.

3. Why we use your data

• Respond to inquiries submitted through the contact form.
• Deliver services you have engaged us for, send invoices, manage the project.
• Improve the website using aggregated, non-identifying analytics.
• Comply with legal obligations, including tax, accounting, and lawful requests from authorities.

Legal bases under GDPR (where applicable): performance of a contract, your consent, our legitimate interest in operating the business, and compliance with legal obligations.

4. Who we share data with

We share personal data only with vendors who help us run the business. Each is bound by a written data-processing agreement and may not use your data for any other purpose.

• Hosting and infrastructure: Hetzner Online GmbH (Germany).
• Email delivery: Google LLC / Google Workspace, Resend Inc., Postmark.
• Customer relationship and accounting: HubSpot, Stripe Inc., QuickBooks.
• Analytics: Google Analytics 4 (anonymised).

We do not sell personal data and we do not share it with advertising networks.

5. International transfers

We are based in the United States. If you are visiting from the European Economic Area, the United Kingdom, Switzerland or another jurisdiction with data-export rules, your data may be transferred to and processed in the US under Standard Contractual Clauses or equivalent safeguards.

6. How long we keep data

• Contact form submissions, 24 months from receipt.
• Engagement records (contracts, invoices), 7 years for tax and audit compliance.
• Server logs, 30 days.
• Analytics data, 14 months.

7. Your rights

Depending on your jurisdiction (GDPR / UK GDPR / CCPA / CPRA / other), you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Request deletion of data we no longer need.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent at any time, where consent is the legal basis.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email info@lumienai.com. We respond within 30 days.

8. Security

We use industry-standard safeguards: TLS 1.2+ in transit, encryption at rest on managed infrastructure, principle-of-least-privilege access controls, MFA on all staff accounts, automated dependency patching. No system is perfectly secure; we will notify affected users and regulators as required by law in the event of a breach.

9. Children

The site is not directed at children under 16 and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We update this policy when our practices change or when required by law. The “Last updated” date at the top reflects the most recent revision. Material changes will be flagged at the top of this page for at least 30 days.

11. Contact

Lumien LLC
5750 Sunrise Boulevard, STE 210-G, Citrus Heights, California 95610, United States
Email: info@lumienai.com