Legal
Privacy Policy
Last updated · June 2026
This Privacy Policy explains how Lumo Labs, Inc. (“Lumo”) collects, uses, and protects information when you use our website and platform. We try to keep this readable — if anything's unclear, email us.
1. Information we collect
- Account data — your name, email, password, and workspace settings.
- Usage data — how you interact with the product, logs, and device/browser information.
- Content you provide — search criteria, email copy, connected mailbox data, and integrations you authorize.
- Billing data — handled by our payment processor; we do not store full card numbers.
2. Prospect & contact data
To run outbound for you, Lumo processes business contact information about the prospects you target (such as name, role, company, work email, and phone). We act as a processor of this data on your behalf; you are responsible for having a lawful basis to contact these people and for honoring opt-out and deletion requests.
3. How we use information
- To provide, operate, and secure the service.
- To find and enrich prospects, generate copy, and send and track outreach you initiate.
- To support you and communicate about your account.
- To improve the product and prevent abuse. We do not sell your personal information.
4. Sharing & subprocessors
We share data with vendors that help us run Lumo — for example cloud hosting, email delivery, data enrichment, and payment processing. They may only use it to provide services to us. We may also disclose information to comply with the law or protect our rights.
5. Cookies
We use essential cookies to keep you signed in and a limited set of analytics to understand usage. You can control cookies through your browser settings.
6. Data retention
We keep personal data for as long as your account is active or as needed to provide the service, then delete or anonymize it within a reasonable period, unless we're required to keep it longer for legal reasons.
7. Security
We use encryption in transit, access controls, and other safeguards to protect data. No system is perfectly secure, but we work to protect your information and will notify you of a breach where required.
8. Your rights
Depending on where you live (e.g. the EEA/UK under GDPR or California under CCPA/CPRA), you may have rights to access, correct, delete, or port your data, and to object to certain processing. To exercise these rights, email privacy@uselumoai.com.
9. International transfers
We may process and store data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for these transfers.
10. Children
Lumo is not intended for anyone under 18, and we do not knowingly collect their data.
11. Changes & contact
We may update this policy and will revise the date above. Questions or requests? Email privacy@uselumoai.com.