Privacy Policy
What we collect, why we collect it, and what we never do with your documents.
Template text. This document is placeholder copy supplied with the template. It is not legal advice. Replace it with a policy reviewed by your own counsel before you launch.
Last updated 1 March 2026
1. Information we collect
Account information: your name, work email, company name and billing details when you subscribe to a paid plan.
Content you connect: the documents, files and messages you choose to index. We process this content solely to build your private search index and generate answers for your workspace.
Usage data: pages visited, features used, and error diagnostics. We use this to fix bugs and prioritise work, not to profile individuals.
2. How we use your information
To provide the service: indexing your sources, retrieving passages, generating cited answers and syncing changes.
To communicate with you: transactional emails about your account, billing and security. Marketing email is opt-in and one-click unsubscribe.
To improve reliability: aggregated, de-identified metrics on latency, retrieval quality and error rates.
3. Model training
We do not use your documents, questions or answers to train machine learning models — ours or any third party's. Model providers we use are contractually bound to zero-retention processing.
4. Sharing and subprocessors
We do not sell personal data. We share data only with subprocessors required to run the service: cloud hosting, model inference, payment processing and error monitoring. A current list is available on request.
5. Data retention and deletion
Indexed content is retained while your workspace is active. Deleting a source removes its embeddings and cached text within 24 hours. Closing your account triggers full deletion within 30 days, backups included.
6. Security
Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Access to production is limited, logged and reviewed. Retrieval respects the permissions of the connected source.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email us and we will respond within 30 days.
8. Contact
Questions about this policy can be sent to hello@lumen.example.com, or by post to Lumen Labs, Inc., 2261 Market St, San Francisco, CA.