1. Who we are
Lumiro (“Lumiro”, “we”, “us”) runs the Lumiro website builder at lumiro.lk. This policy explains what personal data we collect, why we collect it and the choices you have.
If you have questions, email us at [email protected].
2. Information we collect
We collect only what we need to run the service:
- Account details: your name or business name, email address and login credentials.
- Your website content: text, images, templates you choose and the instructions you give to our AI.
- Domain details: the domain names you connect and related settings.
- Usage and device data: pages visited, browser type, device, approximate location and IP address.
- Payments: handled by our payment provider. We do not store full card numbers.
- Messages you send us, for example through the contact page.
3. How we use your information
- To create, edit, host and publish your websites.
- To run AI features that edit your site from your instructions.
- To manage your account, plan and billing.
- To give support and reply to your messages.
- To keep the service secure and prevent abuse or fraud.
- To understand how Lumiro is used and make it better.
- To meet legal obligations.
4. AI processing
When you ask Lumion to change your website, your instructions and the relevant site content are sent to AI model providers so they can generate the result. We do not sell this data.
Please do not type sensitive personal data (such as ID numbers, health or financial details) into AI instructions. AI output can be wrong, so always review your site before you publish.
5. Who we share data with
We share data only with service providers that help us run Lumiro, such as hosting and content delivery, authentication and database, AI model, payment and email providers. They may use your data only to provide their service to us.
We may also share data when the law requires it, to protect our users or rights, or in a business transfer such as a merger. We do not sell your personal data.
6. Your published websites
Anything you publish on a Lumiro site is public. If your site collects information from your own visitors (for example a contact form), you are responsible for how that data is used and for telling your visitors.
7. Cookies
We use essential cookies and similar storage to keep you signed in and remember basic settings. If we add analytics, we will say so here. You can control cookies in your browser settings, but parts of Lumiro may stop working without the essential ones.
8. How long we keep data
We keep your data while your account is active. If you delete your account, we remove or anonymise your data within a reasonable time, except where we must keep some records for legal, tax or security reasons.
9. Security
We use reasonable technical and organisational measures to protect your data. No online service is completely secure, so we cannot guarantee absolute security.
10. Your rights
Depending on the law that applies to you, including Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, you may have the right to access, correct or delete your personal data, to object to or limit certain uses, and to withdraw consent.
To use these rights, email [email protected]. We may need to confirm who you are first.
11. International transfers
Our service providers may process data in countries outside Sri Lanka. When that happens we take steps to make sure your data stays protected.
12. Children
Lumiro is not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. We will change the date at the top and, for important changes, tell you by email or inside Lumiro.
14. Contact us
Lumiro, Colombo, Sri Lanka. Email: [email protected].