Privacy Policy

Last updated: March 19, 2026

Your privacy matters to us. This policy explains what data we collect, how we use it, and the choices you have. We keep things simple and transparent.

End-to-end encryptionNo image training14-day auto-deleteGDPR-friendly

01Information We Collect

Account Information

When you create an account, we collect your email address, name (optional), and a hashed version of your password. We never store your password in plain text.

Product Images

You upload product images for processing. Original images are deleted immediately after processing is complete. Generated images are stored for 14 days to allow you to download them, then permanently deleted.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other payment credentials on our servers. Stripe’s privacy policy governs their handling of your payment data.

Usage Data

We collect anonymized usage data including pages visited, features used, and general performance metrics to improve the Service. This data is collected via Google Analytics and does not personally identify you.

02How We Use Your Information

To provide and maintain the Service

To process your image transformations

To process payments and manage your account

To communicate service updates and important notices

To detect and prevent fraud or abuse

To improve and optimize the Service

03Data Storage and Security

Your data is encrypted in transit (TLS/SSL) and at rest. Images are stored on Cloudflare R2 with encryption enabled. We use secure, HTTP-only cookies for authentication. Passwords are hashed using bcrypt with a cost factor of 12.

04Data Retention

Original uploads — deleted immediately after processing

Generated images — stored for 14 days, then permanently deleted

Account data — retained while your account is active

Payment records — retained as required by law for tax and accounting purposes

05Third-Party Services

We use the following third-party services:

Stripe — Payment processing

Cloudflare R2 — Image storage

Google Analytics — Anonymized usage analytics

Neon — Database hosting (PostgreSQL)

Each service has its own privacy policy governing how they handle data. We only share the minimum data necessary for each service to function.

06Your Rights

You have the right to:

Access the personal data we hold about you

Request correction of inaccurate data

Request deletion of your account and associated data

Export your data in a portable format

Opt out of marketing communications

To exercise any of these rights or for privacy-related questions, contact us at privacy@lumipic.com.

07Cookies

We use a single essential cookie (auth_token) for authentication. This cookie is HTTP-only, secure, and uses SameSite=Strict to prevent cross-site request forgery. We also use Google Analytics cookies for anonymized usage tracking, which you can opt out of using browser extensions or settings.

08Children’s Privacy

The Service is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

09Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after changes constitutes acceptance.

10Contact

To exercise any of these rights or for privacy-related questions, contact us at privacy@lumipic.com.

Also see our Terms of ServiceRead Terms →