Lumina Bespoke ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website at luminabespoke.com and AI jewelry design services (the "Service"). This Policy applies to users in the United States, European Economic Area, United Kingdom, and other regions where we make the Service available.
1. Information We Collect
Information you provide. We may collect email addresses when you create an account or sign in (including one-time verification codes), text prompts, style preferences, and reference images of jewelry or related subjects that you upload for generation or editing.
Automatically collected information. We may collect device type, browser, approximate location derived from IP address, session identifiers, usage logs, and diagnostic data necessary to operate and secure the Service.
Payment information. Purchases of credits or subscriptions are processed by Creem, our payment provider and merchant-of-record partner, and its banking and card-network partners. We do not store full payment card numbers on our servers. Creem collects and processes payment details in accordance with its own privacy policy; we receive limited transaction metadata (such as order ID, status, amount, and partial card information) needed to fulfill your purchase and provide support.
2. How We Use Information
We use personal information solely to:
- Provide, maintain, and improve the Service, including AI generation and virtual try-on features;
- Authenticate sessions, enforce usage limits, and prevent fraud or abuse;
- Respond to support requests and communicate service-related notices;
- Process payments and manage credits or subscriptions through our payment provider;
- Comply with legal obligations and protect our rights.
We do not sell, rent, or trade your jewelry reference images, prompts, or email addresses to third parties for their independent marketing or data brokerage purposes. We do not use your uploaded reference imagery to train public third-party models for unrelated commercial datasets without your explicit consent.
3. Analytics
We use Google Analytics 4 (Google LLC) to understand aggregate traffic, pages viewed, and general usage patterns. GA4 may set cookies or use similar technologies and receive information such as page URL, referrer, device/browser type, and approximate location derived from IP address. Google's processing is governed by Google's Privacy Policy. You can opt out of GA via browser add-ons such as the Google Analytics Opt-out Browser Add-on or your browser's cookie controls where available.
4. AI Processing and Service Providers
To generate images, we transmit prompts and reference media to vetted infrastructure and model hosting partners (such as cloud inference providers) under contractual confidentiality and security obligations. These processors act on our instructions and may not use your content for their own advertising profiles. Retention by processors is limited to the period necessary to complete inference and associated logging, subject to their policies and our agreements.
5. Legal Bases (EEA/UK Users)
Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process personal data on the bases of: (a) contract performance (providing the Service you request); (b) legitimate interests (security, analytics, product improvement balanced against your rights); and (c) consent where required (for example, optional marketing emails). You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. Data Retention
We retain account-related data and generation logs only as long as necessary for the purposes described above, unless a longer period is required by law. Gallery items stored locally in your browser remain under your control until you clear site data. Server-side copies of uploads may be deleted on a rolling schedule unless needed for dispute resolution or legal compliance.
7. Your Rights
Depending on your location, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. California residents may have additional rights under the CCPA/CPRA. To exercise rights, contact studio@luminabespoke.com. We will verify requests as permitted by law.
8. Security
We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, or disclosure. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.
9. International Transfers
If you access the Service from outside the United States, your information may be processed in the U.S. and other countries where our providers operate. We rely on appropriate safeguards such as Standard Contractual Clauses where required.
10. Children
The Service is not directed to individuals under eighteen (18). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us for deletion.
11. Changes
We may update this Privacy Policy periodically. Material changes will be indicated by updating the "Last updated" date. Continued use after changes constitutes acknowledgment.
12. Contact
Privacy and data requests: studio@luminabespoke.com