Privacy Policy

This policy explains how Digimuse Private Ltd ("Digimuse", "we") handles personal data in LUMI by Digimuse ("LUMI"), our website and app. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act) and process personal data only for the purposes described here.

1. Who we are

Digimuse Private Ltd is the data fiduciary for personal data we collect to run our website and accounts. For content your workspace adds to LUMI (brand information, posts, briefs, creatives), your organisation decides what goes in, and we process it on your instructions to provide the service.

Address: B-502, Vaswani Exquisite, ITPL Main Road, near Zuri Hotel, Bengaluru, Karnataka 560048

2. What we collect

• Access requests: name, work email, phone, company, website, role, team size, plan interest and anything you add in the form.
• Accounts: name, username, email or phone if provided, a securely hashed password, your workspace, role and brand access, and sign-in times.
• Workspace content: brand profiles, Brand Brain inputs, plans, posts, comments, briefs, reports, uploaded files and images, and creatives.
• Usage and logs: activity history (who changed what and when), counts of Lumi and image requests for plan limits and cost tracking, and basic technical logs needed for security.

We don't use advertising trackers on the app, and we don't sell personal data.

3. Why we use it

• To review access requests, create and secure your workspace and logins.
• To provide LUMI's features, including generating content with AI on your instructions.
• To enforce plan limits, bill you, and support you.
• To keep the service secure, prevent misuse and keep backups.
• To send product updates, only if you opted in. You can opt out anytime.

4. AI processing

When you ask Lumi to write, research or design, the relevant brand and post information is sent to Google's Gemini API to produce the result. Client workspaces use Google's paid API service. Google's terms for the paid service say prompts and responses are not used to improve Google's products. Results are stored back in your workspace. Please don't put sensitive personal data (for example health or financial details of individuals) into prompts or briefs.

5. Where data is stored

LUMI's database, file storage and app servers run in the Mumbai, India region. Daily backups are encrypted (AES-256) and kept for 30 days. AI requests are processed by Google, which may process them outside India under its own terms.

6. Who we share it with

We use these service providers (processors) to run LUMI, under their data protection terms:

• Vercel Inc. (app hosting and file storage, Mumbai region)
• Upstash Inc. (database, Mumbai region)
• Google LLC (Gemini API for AI generation)
• Meta Platforms (only to read public Instagram business data for competitor benchmarks, if your workspace uses it)

We may also disclose data where the law requires it. We never share one workspace's data with another workspace.

7. How long we keep it

• Access requests: up to 12 months, or until you ask us to delete them.
• Workspace content: while your workspace is active. After a plan ends, we keep it for up to 90 days so you can come back or export it, then delete it.
• Backups: rolling 30 days.
• Activity logs: the most recent 3,000 events per installation.

8. Security

Each workspace is walled off on the server: a login only receives the brands and records it's allowed to see. We use personal logins with hashed passwords, signed HTTP-only session cookies, rate-limited sign-in, role-based access and encrypted backups. No system is perfectly secure; if a breach affects your personal data, we'll inform you and the Data Protection Board of India as the DPDP Act requires.

9. Your rights

You can ask us to access, correct, update or erase your personal data, withdraw consent, or nominate someone to act for you. Workspace admins can also ask us to export or delete their workspace. We'll respond within a reasonable time and as the law requires.

10. Grievance officer

For privacy questions, requests or complaints, contact our Grievance Officer: Srishiv Patro (CEO), contact@digimuse.in. If you're not satisfied with our response, you can approach the Data Protection Board of India.

11. Children

LUMI is a business tool and isn't meant for anyone under 18.

12. Changes

We'll post updates here and change the date above. For important changes, we'll tell workspace admins in the app or by email.