Privacy Notice

Lumi Analytics ("Lumi") provides a multi-tenant commercial automation and customer relationship platform. Questions and data-rights requests may be sent to contato@lumianalytics.com.br.

Lumi is the controller of applicant, account, billing-contact, support, security, and website data used to operate our own service. A tenant organization is normally the controller of lead and customer data it enters or connects to the platform; Lumi processes that data on the tenant's instructions.

We process only data reasonably necessary to provide, secure, support, and improve the service.

• Identity and account data, including name, professional email, password hash, role, and verification status.
• Company application data, including company name, industry, market, description, and contact telephone.
• Tenant content, including leads, clients, conversations, tasks, pipeline events, custom fields, and automation settings.
• Technical and security data, including IP-derived rate-limit identifiers, timestamps, audit events, device/browser information in service logs, and delivery status.
• Commercial and support records, including order status, invoices or provider references when billing is enabled, and support communications.

Depending on the relationship and jurisdiction, processing is based on steps requested before entering a contract, performance of a contract, compliance with legal duties, legitimate interests in securing and improving the service, and consent only where a specific optional activity requires it.

• Verify applications, provision and administer accounts, and enforce manual approval.
• Deliver automation, AI-assisted features, communications, support, and service notifications.
• Prevent abuse, investigate incidents, maintain auditability, and enforce acceptable use.
• Comply with tax, accounting, legal, and regulatory obligations.

Lumi may use infrastructure, database, hosting, transactional email, communications, AI, analytics, and payment providers as subprocessors. We disclose the minimum data required for each service and do not sell personal information or share it for cross-context behavioral advertising.

Tenant administrators control which optional integrations are connected to their workspace and remain responsible for having an appropriate basis for customer communications.

Providers and tenant users may process data outside the country where a person is located. Lumi uses contractual, technical, and organizational safeguards appropriate to the transfer and applicable law, including the Lei Geral de Proteção de Dados and, where applicable, the General Data Protection Regulation.

Application challenges expire quickly and are removed after verification or expiry. Account, tenant, audit, security, contractual, and financial records are kept only for the service relationship, legal retention periods, dispute prevention, and legitimate security needs. Data is deleted or anonymized when no longer necessary, subject to backups and mandatory retention.

We use tenant-scoped authorization, encryption of sensitive platform credentials, password hashing, audit records, rate limiting, access controls, and production health checks. No system is risk-free; confirmed incidents are assessed and notified as required by applicable law.

Subject to applicable law, a person may request confirmation, access, correction, portability, information about sharing, review of certain automated decisions, objection, restriction, anonymization, or deletion. California residents may also request to know, correct, or delete covered information and receive non-discriminatory treatment. Lumi does not sell personal information.

Send a request to contato@lumianalytics.com.br. We may request proportionate information to verify identity and authority. For tenant-controlled lead or customer data, we may direct the request to the relevant tenant.

The current version is 2026-08-28. Material changes will be published here and, when appropriate, communicated through the platform or email.