Legal

Privacy Policy

Last updated: June 2026

This Privacy Policy describes how Lumora ("we," "us," or "our") collects, uses, and shares information when you use our photo-delivery service at lumorapic.com. We are based in Vietnam and we process your data in accordance with applicable law.

1. Information we collect

Account information. When you sign up, we collect your name, email address, and a hashed password. If you continue with Google OAuth, we receive your name, email, and profile picture from Google.

Payment information. Lumora uses manual bank transfer (VietinBank). We collect the amount, the reference code you use, and the date of the transfer. We do not collect or store card numbers.

Photo and gallery data. We store copies of photos synced from your Google Drive in cloud storage, along with any album names, descriptions, and sharing settings you configure. Client selections (favorites, notes) are also stored.

Usage data. We collect page view counts and download counts for each gallery link, browser type, device type, and coarse geographic region (country level). We do not use third-party tracking pixels or behavioral ad networks.

Cookies. We use session cookies for authentication and a first-party referral cookie (lumora_ref) to credit photographers who referred you. No third-party advertising cookies are set.

2. How we use your information

Provide and improve the Lumora service.
Send transactional emails (order confirmation, payment verification, account security).
Process and verify manual bank transfer payments.
Display per-gallery analytics to the album owner.
Enforce plan limits and prevent abuse.
Respond to support requests.

3. Data storage and security

Your data is stored in cloud infrastructure with encryption at rest and in transit (HTTPS / TLS 1.2+). We apply access controls so that only authorized systems and team members can access your data. No system is perfectly secure; if you believe your account has been compromised, contact support@lumorapic.com immediately.

4. Sharing your information

We do not sell your personal data. We share it only:

With your clients: gallery content (photos, titles) and selections are visible to anyone you share a gallery link with.
With service providers: cloud storage, email delivery, and infrastructure providers that process data on our behalf under data-processing agreements.
For legal reasons: if required by Vietnamese law or valid legal process.

5. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support@lumorapic.com. We will respond within 30 days. Deleting your account removes your profile and galleries; we may retain aggregate, anonymized usage records.

6. Data retention

We retain account data for as long as your account is active, plus a 90-day grace period after deletion to support recovery requests. Payment records are kept for seven years in accordance with Vietnamese accounting regulations.

7. Children

Lumora is not directed at children under 13. We do not knowingly collect data from children. If you believe a child's data has been submitted, contact us and we will delete it promptly.

8. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced by email or via an in-app notice at least 14 days before they take effect. Continued use of Lumora after the effective date constitutes acceptance.

9. Contact

Questions about this policy? Email support@lumorapic.com or visit our contact page.