Privacy policy

Lumyo is run by its founder, Vlad Tiganila, in Romania, who decides how your data is used (the “controller” under the GDPR). You can reach us at the contact address at the end of this page.

• Your email address, when you join the waitlist. Nothing else is asked for.
• A record of your signup: when you joined, which version of this policy was in place, that you joined from this website, and how you found it. That last part is the campaign named in the link you followed, or the website that sent you (for example "google" or "tiktok"), never the page you were on.
• A scrambled (hashed) form of your IP address, kept for one hour, to stop the form being flooded with signups. We never store the address itself.
• Basic request logs kept by our hosting provider, Vercel: IP address, browser type and the page requested. Vercel uses them to run and protect the service and keeps them for a short period.
• Visit statistics from Vercel Web Analytics: the pages viewed, the referring website, campaign tags in the link, country, and device and browser type. It sets no cookies and stores nothing on your device, and we only ever see totals, never a profile of you. It can't recognise you on a later visit or on other websites.

We don't use advertising pixels or tracking cookies, and we don't track whether you open our emails or click their links.

We use your email address to send you emails about Lumyo:

• the launch, and invitations to get access;
• early access and beta testing invitations;
• product news and updates;
• requests for feedback, such as a short survey;
• offers related to Lumyo.

We don't sell your email address, share it with advertisers, or upload it to advertising platforms. If we ever want to use it in a way not listed here, we'll ask you first.

• Emails: your consent (Article 6(1)(a) GDPR), which you give by submitting the form. You can withdraw it at any time, and every email will include an unsubscribe link.
• The signup record: our legitimate interest in being able to show that you agreed (Articles 6(1)(f) and 7(1) GDPR).
• The hashed IP address and request logs: our legitimate interest in keeping the website secure and working (Article 6(1)(f) GDPR).
• Visit statistics and how you found us: our legitimate interest in knowing which channels bring people to the waitlist (Article 6(1)(f) GDPR). Both are cookieless and counted in totals.

• Vercel Inc. hosts the website and provides the visit statistics.
• Upstash, Inc. runs the database that stores the waitlist.
• When we start sending emails, an email delivery provider will send them. We'll name it here first.

Each acts as our processor under a data processing agreement. Some of their infrastructure is in the United States; transfers there rely on the EU-US Data Privacy Framework or the EU's Standard Contractual Clauses.

We keep your email address and signup record for as long as you stay on the list. If you unsubscribe from one of our emails, we delete both straight away. If you ask us by email to remove you, we delete them within 30 days.

This website sets no cookies. If you use the light/dark switch, your choice is saved in your browser's local storage under the name “lumyo-theme” so the page remembers it. It never leaves your device, and you can clear it from your browser settings.

Under the GDPR you can ask to see the data we hold about you, correct it, delete it, receive a copy of it, or object to how we use it. You can also withdraw your consent at any time. To do any of this, email us from the address you signed up with.

If you think we've handled your data wrongly, you can complain to your local data protection authority. In Romania that is the ANSPDCP (dataprotection.ro).

We don't sell or share your personal information, as those terms are defined in California law (the CCPA, as amended by the CPRA), and we don't use it for targeted advertising or profiling. The only personal information we collect is described above: an identifier (your email address) and internet activity limited to the hosting logs, the hashed IP address, cookieless visit statistics and the channel you came from.

Depending on the state you live in, you may have the right to know what we hold about you, to get a copy, to correct it and to delete it. Email us to use any of these rights; you can also ask someone to do this on your behalf. We'll answer within 45 days and won't treat you differently for asking.

Do Not Track and Global Privacy Control: we don't track you across other websites, so these browser signals don't change anything on this site.

Every marketing email we send will identify Lumyo, include our postal address and have an unsubscribe link. We act on unsubscribe requests straight away, and always within 10 business days.

You must be 16 or older to join the waitlist. The website isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has signed up, email us and we'll delete the address.

If we change this policy, we'll update the date at the top of this page. If a change affects how we use your email address, we'll tell you by email before it applies.

Email: tiganilavlad@gmail.com