Lumidoc: OCR, Refine and Style Any Document with AI

This Privacy Policy explains how Lumidoc ("we," "us," or "our") collects, uses, and safeguards information when you use our Service at lumidoc.app. We keep this straightforward: we collect only what we need and never sell your data.

1. Information We Collect

Account information

When you sign in with Google OAuth, we receive your name and email address from Google. When you sign in with a magic link, we collect your email address. This information is used solely to identify your account.

Uploaded documents

When you import a document (a PDF, photos, Word, PowerPoint, EPUB, or another supported format), we store the file with your account so you can see it beside its text. Scanned pages are sent to our OCR provider to read the text. Photos sent from your phone with the scan feature are deleted from our servers within a day, once they have been imported. Your documents, their versions, and your exports are stored on our servers and tied to your account.

AI features

When you use an AI feature (cleanup, refine, translate, ask, study material, or image descriptions), the text or images it needs are sent to our AI provider to produce the result. We send only what that one request needs.

Shared links

When someone opens a link you have shared, we count the visit so you can see how your document is read: when it was opened, the site that linked to it, and how far the reader scrolled. We do not store the reader's IP address; visits are told apart with a one-way code that changes every day. If a reader sends you feedback, we keep the name and message they choose to write.

Billing information

If you subscribe to a paid plan or purchase a credit top-up, payment is handled by LemonSqueezy. We do not store your full payment card details. We receive confirmation of your subscription status and purchase history from LemonSqueezy.

Usage data

We store basic information about your activity: credit usage, document exports, and account actions. This helps us provide the credits system and support you if something goes wrong.

2. How We Use Your Information

To provide and operate the Service (processing documents, managing credits, handling subscriptions).
To send transactional emails, such as magic sign-in links and billing receipts, via Plunk.
To respond to your support requests.
To enforce our Terms of Service and prevent misuse.
To comply with legal obligations.

We do not use your documents or personal data to train AI models, run advertising, or sell data to third parties.

3. Cookies and Session Data

Lumidoc uses strictly necessary session cookies to keep you signed in. These cookies are essential for the Service to function and do not track you across other websites.

We use a product analytics tool (PostHog) to learn which parts of Lumidoc help people. It records page views and events such as an import finishing. It sets an analytics cookie only if you choose Allow when we ask; until then it keeps nothing on your device, and if you choose No thanks it records nothing in your browser at all. Readers of a document you have shared are never asked and never given the cookie. You can change your mind by clearing this site's data in your browser.

We do not use advertising cookies or trackers that follow you across other websites. Analytics data is used only to improve Lumidoc and is never shared for marketing.

4. Third-Party Services

We share limited data with third parties only as needed to operate the Service:

Mistral (OCR provider): receives the pages you import to read their text. Data is used solely for processing your request and is subject to Mistral's Terms of Service.
LemonSqueezy: handles payment processing and subscription management. Subject to LemonSqueezy's Privacy Policy.
Google (AI provider): Gemini models receive the text or images an AI feature needs, only when you use that feature.
Plunk (email delivery): sends our emails (sign-in links, receipts, and the notifications you can turn off in Settings). Your email address is shared only for this purpose.
Google: if you sign in with Google, your authentication is handled by Google OAuth. Subject to Google's Privacy Policy.
Analytics provider: first-party analytics to understand product usage. We share page views, feature interactions, and user events solely to improve the Service.

5. Data Retention

We retain your account information and documents for as long as your account is active. When you delete your account, we cancel any subscription, delete your files and their history from our servers straight away, and ask our sub-processors to remove what they hold within 30 days.

Documents you delete go to Trash, where you can restore them for 30 days. After that, or when you empty Trash, they are deleted for good, with their versions and exports.

Preview images for shared links are kept for up to 30 days after they were last used, and are removed as soon as you turn the link off.

6. Data Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS) and secure storage. No method of transmission over the Internet is 100% secure, however, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate information.
Deletion: Request deletion of your account and all associated data, including any data held by our sub-processors on our behalf.
Portability: Download everything, at any time, from Settings: every document as Markdown with its images, and the files you imported.
Objection: Object to certain types of processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. The "last updated" date at the top of this page indicates when the most recent changes took effect.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at [email protected].