Who we are
Lumiist is a trading name of Jodie Bush, a sole trader. In this policy, "Lumiist", "we" and "us" mean Jodie Bush trading as Lumiist. We are responsible for the personal information described here.
Email: info@lumiist.com
Postal address: available on request from info@lumiist.com
What information we collect
When you use Lumiist, we collect:
- Account details: your name, email address and sign-in details, and the same for anyone you invite to your team
- Business details: your business name, address, contact details, tax details, logo, brand colours, fonts and the descriptions you give us
- Payment details shown on your documents: the bank, PayPal or other payment details you choose to show your clients
- Your services and documents: your services and prices, and the quotes, invoices and receipts you create
- Your clients' details: the names, email addresses, phone numbers and addresses of the clients you add (see "Your clients' information" below)
- Messages and approvals: questions, approvals and signatures your clients send from their document page
- Billing details: your plan and billing history. Card payments are handled by Stripe and we never see or store your full card number
- Technical information: your IP address, browser and device type, and records of errors, kept to run the service securely
- Visit counts: anonymous, cookie-free counts of visits to our website pages
- Invoice demo: if you try the demo on our invoice generator page, we keep the job you type, the example it produced, your approximate country and the time, to improve the demo and the service. Please don't include personal details. Separately, we record your IP address and the time of each try, only to limit how often the demo can be used
Your clients' information
When you add your own clients to Lumiist and send them documents, you decide what information to add and why. For that information, you are the controller and we act as your processor: we only use it to provide the service to you, on your instructions.
You are responsible for having a lawful reason to use your clients' information and for telling them how you use it. We do not contact your clients except to send the documents, reminders and notices you ask us to send.
How we use your information
- To run your account and provide the service, including writing, storing and sending your documents
- To take payments for your plan, and to run card payments for your invoices if you turn them on
- To send you emails about your account, such as sign-in codes, client activity and billing notices
- To answer your questions and give support
- To keep the service secure, prevent misuse and fix problems
- To understand, in general terms, how the service is used so we can improve it
- To meet our legal and tax obligations
We do not sell your information and we do not use it for advertising.
Legal basis for using your information
Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we rely on:
- Contract: to provide the service you have signed up for
- Legitimate interests: to keep the service secure and to improve it, where this does not override your rights
- Legal obligation: to keep records we are required to keep, such as billing records
- Consent: for anything optional you have agreed to, which you can withdraw at any time
Who we share it with
We use a small number of trusted providers to run Lumiist. Each one only receives what it needs to do its job:
- Supabase: our database, sign-in system and file storage
- Vercel: hosts the website and app, and provides cookie-free visit counts
- Stripe: takes payments for your plan and, if you turn on card payments, processes your clients' card payments. Stripe collects the identity and bank details it needs directly from you, under Stripe's privacy policy
- Resend: sends the emails from Lumiist, including the documents you share
- PDFShift: turns your documents into PDF files
- Anthropic: writes document and service text from the details you give us, such as a job description and your services. Under Anthropic's commercial terms, this information is not used to train their models
Some of these providers store or process information outside the UK, including in the United States. Where they do, they use recognised safeguards, such as the UK International Data Transfer Addendum or standard contractual clauses, to protect it.
We may also share information if the law requires it, or to protect our rights or the safety of others.
Cookies and browser storage
We do not use advertising or tracking cookies. To keep you signed in, Lumiist stores a sign-in key in your browser's own storage. Our visit counts are cookie-free and do not identify you. Stripe may use cookies on its own payment pages to prevent fraud. Our videos are hosted on our own website and use no cookies; a video only downloads when you press play, or when you open our video page.
How long we keep it
We keep your information while your account is open. When you ask us to delete your account, we delete your information within 30 days, except billing records and anything else the law requires us to keep, which we keep only for as long as required.
Deleting your account
To delete your account, email info@lumiist.com from the email address you sign in with. Within 30 days we will:
- Cancel any paid plan, so you are not charged again
- Delete your account, brand passport, services, documents, client list and uploaded files
- Switch off the links to documents you have shared, so your clients can no longer open them
Download any documents you want to keep before you ask. If you turned on card payments, your Stripe account belongs to you and stays open; you can close it in Stripe.
Your rights
Under UK data protection law, you have the right to:
- Ask for a copy of the information we hold about you
- Ask us to correct information that is wrong or incomplete
- Ask us to delete your information
- Object to, or ask us to limit, how we use your information
- Ask for a copy of your information in a format you can take elsewhere
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email info@lumiist.com. We will reply within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Age
Lumiist is for businesses and is not intended for anyone under 18.
Changes to this policy
We may update this policy from time to time. When we do, we will change the date at the top of this page, and if the change is significant we will tell you by email.
Contact us
For any question about this policy or your information, email info@lumiist.com.