Privacy Policy
This Privacy Policy describes how LCN Serviços Digitais Ltda, a Brazilian company registered under CNPJ 47.105.980/0001-50 ("we", "us", the "controller"), collects, uses, stores and protects your personal data when providing the Lumen service. We honor the rights granted by the privacy laws applicable to you, including the California Consumer Privacy Act (CCPA/CPRA) for California residents and Brazil's LGPD.
Honest summary: we collect only what is necessary (name, email, phone, your conversations with Lumen). We know your conversations touch on something deeply personal, your marriage and your emotions, and we treat that content with corresponding care. We use this data to operate the service: run the AI, keep your case memory, process payment, and notify you of important things. We never sell your data. We never use your conversations to train any AI. You can request a copy, correction or deletion at any time.
1. Data we collect
| Type | When | Why |
|---|---|---|
| Name, email, phone | When you sign up for the free trial or purchase a plan | Create and identify your account, support and service communications |
| Content of your conversations (questions, responses, images and audio you send) | While using Lumen | Operate the service — the AI needs the recent history and case memory to respond with context. This content is sensitive by nature and is used for nothing else. |
| Payment data (last card digits, brand, status) | When you purchase a plan | Process the subscription. Complete card data stays only with Stripe (PCI-DSS). |
| Technical data (IP, browser, system, access logs) | Automatically upon access | Security, anti-abuse, anti-bot (Cloudflare Turnstile), operational metrics |
| Usage metrics (how many questions used, on which date) | While using Lumen | Apply your plan's quota and display the progress bar |
2. How we use your data
- Providing the service — operating the AI, keeping your case memory, processing payment, authenticating you;
- Legal compliance — tax records, fraud prevention, responding to authorities;
- Security — platform protection, anti-abuse, technical improvements;
- Communications — transactional emails (activation, receipts, notices) and, with your consent, occasional service updates (you can unsubscribe at any time).
3. Who we share data with
To operate the service, we share strictly necessary data with the following processors:
- Stripe (payments) — billing and identification data. Stripe's policy.
- Anthropic (AI engine — Claude) — the content of your conversations is processed by Claude models to generate responses. Anthropic does not retain your content for training under our commercial agreement. Anthropic's policy.
- Upstash (database) — stores account, plan and recent history.
- Vercel (infrastructure) — hosts the servers that run the service.
- Cloudflare (security and Turnstile anti-bot) — analyzes requests to block bots.
- Resend (email) — transactional email delivery (activation, password recovery, notices).
- ActiveCampaign (CRM) — only your name, email and phone, for service communications. You can unsubscribe at any time.
We never sell your personal information and we never share it with third parties for their own advertising. In CCPA terms: we do not "sell" and do not "share" personal information for cross-context behavioral advertising.
4. International transfer
Our processors (Stripe, Anthropic, Vercel, Cloudflare, Resend, Upstash) operate servers in the United States and/or the European Union. The service provider is established in Brazil. Transfers are protected by contractual safeguards ensuring a level of protection equivalent to the applicable privacy laws.
5. How long we keep data
- Active account — while your subscription is active;
- Cancelled account — 90 days after cancellation, for reactivation or disputes;
- Conversation history and case memory — while the subscription is active, per plan tier;
- Payment and tax records — 5 years (legal obligation);
- Technical logs — 6 months;
- Communication list — until you unsubscribe or request deletion.
6. Your rights (including deletion)
At any time and free of charge, you have the right to:
- Know what personal data we have about you and how it is used;
- Access a copy of your data (portability);
- Correct incomplete, inaccurate or outdated data;
- Delete your data (except what we must keep by legal obligation);
- Opt out of non-essential communications at any time;
- Not be discriminated against for exercising any of these rights (CCPA).
To exercise any of these rights, email support@lucianocastro.com.br with the subject "Privacy request". We respond within 15 days for most requests and within the timelines required by your applicable law (45 days under CCPA).
7. Security
We adopt reasonable technical and administrative measures to protect your data, including: encryption in transit (HTTPS), encryption at rest for sensitive data, passwords stored with bcrypt hashing, signed-token authentication (JWT), anti-bot protection (Cloudflare Turnstile), rate limiting, monitoring and access logs. No system is 100% immune. In the event of a security incident that poses risk to you, we will notify affected users and the competent authorities as required by law.
8. Cookies and similar technologies
- localStorage — stores your session token (JWT), preferences and recent conversation history so the AI keeps context. Necessary for the service to work.
- Third-party cookies — Cloudflare Turnstile may set anti-bot protection cookies. No cookie is used for cross-site advertising tracking on the service itself.
9. Children
The service is intended for adults (18+). We do not knowingly collect data from minors. If we identify that a minor created an account, we will close it and delete the data.
10. Data protection contact
Data protection contact: Luciano Castro — support@lucianocastro.com.br.
11. Changes to this policy
We may update this Policy to reflect changes in the service, in processors or in the law. Material changes will be communicated by email and/or in the interface at least 15 days in advance.
12. Contact
Questions, requests or reports: support@lucianocastro.com.br.
← Back to Lumen