Privacy Policy

Who we are

Luminous is a managed website platform operated by Phronema Labs. For the purposes of data protection law, Phronema Labs is the controller of the information described in this policy.

This policy covers this website and the Luminous product. It does not cover a website we have built for a client. Each of those sites is controlled by the business that owns it, and enquiries through their forms go to them. If you have a question about a business's own website, contact that business.

Cookies on this site

This website sets no cookies. There is no advertising tracker and no third-party analytics script on these pages. The interactive tools on this site run in your browser. You will not see a cookie banner here because there is nothing to consent to.

The Luminous admin application is different: once you log in, it stores your session so you stay logged in. That is strictly necessary for the service to work, and it is not used for tracking.

What we collect when you contact us

When you submit the contact form on this site, we collect:

Information	Why
Your name	To address you and identify your enquiry
Your email address	To reply to you
Your business name	To understand your business and prepare a useful reply
Your phone number, if you give it	To call you back if that is easier
What you are interested in	To route your enquiry to the right person
Your message	The substance of your enquiry
Your IP address and browser identification	Abuse prevention and rate limiting
Whether a bot check was passed	Spam prevention

Name, email, and message are required. Everything else is optional, and the form works without it.

What we collect when you use the product

• Account information. Your email address, which is how you sign in. We do not store a password for you; access is by single-use link sent to your email.
• The business brief you supply. Business name, services, service area, contact details, and the other answers you give when a site is generated.
• Content you create. Pages, text, images, and media you upload or edit in the CMS.
• Billing information. Handled by our payment processor. We receive whether a subscription is active and an identifier for the customer; we do not receive or store your full card number.

Visitor analytics on client websites

Sites we host count page views so the business can see what is being read. That record contains the page path, the referring site, the country, the device type, and a session identifier. It does not store the visitor's IP address, and it does not build a profile of a person across sites. It is first-party, and it is not shared with anyone.

Who we share it with

We do not sell your information, and we do not share it for advertising. We use a small number of service providers who process it on our behalf:

Provider	What they handle
Cloudflare	Hosting, content delivery, and the database and media storage behind the product
Stripe	Subscription payments and billing
Resend	Delivery of sign-in links and transactional email
Anthropic, Google	Automated content generation from the brief you supply

Each of these is bound by its own agreement with us and may only use the information to provide its service. We may also disclose information where the law requires it, or to protect the rights and safety of others.

Automated content generation

To generate your website, the brief you supply is sent to a third-party language model. Do not put information in your brief that you are not willing to have processed this way. See the AI content disclosure for what is generated and what you must check.

How long we keep it

• Contact enquiries: kept while the enquiry is live and for a reasonable period afterwards so we can follow up.
• Account and content: kept while your subscription is active. After you cancel, kept for a short period so cancellation can be reversed, then deleted. See the Terms of Service.
• Page view records: kept in aggregate. They contain no IP address, so they cannot be traced back to a person.
• Billing records: kept as long as tax and accounting law requires.

Your rights

Depending on where you live, you may have the right to:

• ask for a copy of the information we hold about you;
• have inaccurate information corrected;
• have your information deleted;
• object to, or ask us to restrict, how we use it;
• receive it in a portable format, or have it sent to another provider;
• withdraw consent where our basis for processing is consent.

Email [email protected] to exercise any of these. We will respond within the period the law allows. If you are unhappy with our response, you have the right to complain to your local data protection authority.

Security

Information is transmitted over encrypted connections and stored on infrastructure with access controls. Access to customer data is limited to those who need it to run the service. No system is perfectly secure, but we take this seriously: if a breach affected your information, we would tell you and the relevant authority as the law requires.

Children

The service is intended for businesses. It is not directed at children, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes, we will update the date at the top of this page. If a change materially affects how we use your information, we will notify you before it takes effect.

Contact

Phronema Labs — [email protected]