Privacy Policy

Effective Date: May 30th 2026

Last Updated: June 25th 2026

1. Introduction

Lumesoon respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, protect and disclose information when you visit the Lumesoon website, create an account or use any of our products, applications, APIs or related services.

This Policy should be read together with our Terms of Service, Cookie Policy, GDPR Policy and any other policies that apply to your use of the Services.

By using Lumesoon, you acknowledge that your information will be handled as described in this Privacy Policy.

Nothing in this Privacy Policy limits any rights that cannot legally be excluded under applicable law.

2. Scope

This Privacy Policy applies to:

• The Lumesoon website.
• User accounts.
• Subscription services.
• Creator tools.
• Voice generation services.
• Voice cloning services.
• Audio transcription services.
• Meeting transcription services.
• Meeting summaries.
• Content generation tools.
• APIs.
• Mobile applications.
• Customer support.
• Marketing communications.
• Any other products or services that link to this Privacy Policy. This Privacy Policy does not apply to third-party services that operate independently from Lumesoon.

Those services remain governed by their own privacy policies.

3. Information We Collect

Depending on how you use the Services, we may collect different categories of information.

This may include:

• Personal information.
• Account information.
• Payment information.
• Device information.
• Technical information.
• Usage information.
• Uploaded content.
• Voice recordings.
• Generated content.
• Customer support communications.
• Marketing preferences.
• Security information. The information collected depends on the features you choose to use.

4. Information You Provide

When creating an account or using the Services, you may provide information including:

• Name.
• Email address.
• Username.
• Password.
• Company name.
• Billing address.
• Country.
• Profile information.
• Payment details processed by payment providers.
• Voice recordings.
• Audio files.
• Text prompts.
• Uploaded documents.
• Images.
• Meeting recordings.
• Generated projects.
• Customer support messages.
• Feedback.
• Survey responses. Providing certain information may be necessary to access specific Services.

5. Account Information

When you register for a Lumesoon account, we may collect information necessary to create and manage your account.

This may include:

• Registration date.
• Account status.
• Subscription plan.
• Credit balance.
• Referral information.
• Affiliate information.
• Billing history.
• Login history.
• Security settings.
• Notification preferences. We use this information to operate and secure your account.

6. Payment Information

Payments made through Lumesoon may be processed by trusted third-party payment providers.

Depending on the payment method selected, payment providers may collect:

• Payment card information.
• Bank account information.
• Billing address.
• Tax information.
• Transaction identifiers.
• Payment verification data. Lumesoon generally does not store complete payment card details on its own systems.

Payment information is processed in accordance with the privacy practices of the applicable payment provider.

7. Uploaded Content

The Services allow users to upload various types of content.

This may include:

• Voice recordings.
• Audio files.
• Documents.
• Images.
• Scripts.
• Text prompts.
• Meeting recordings.
• Video subtitles.
• Generated projects. Uploaded content is processed to provide the requested Services.

Users remain responsible for ensuring they have all necessary rights and permissions before uploading any content.

8. Voice Recordings

Voice recordings submitted for voice generation or voice cloning are processed solely for the purpose of providing requested features.

Users are responsible for obtaining all necessary permissions before uploading voice recordings belonging to another individual.

Lumesoon does not independently verify ownership of uploaded voice recordings.

Voice recordings may be retained for operational, security, backup and legal compliance purposes in accordance with our retention practices.

9. Generated Content

Content generated through the Services may be stored to:

• Deliver requested Services.
• Enable project history.
• Improve reliability.
• Support account functionality.
• Prevent abuse.
• Investigate security incidents.
• Comply with legal obligations. Generated content remains subject to the user's responsibilities under the Terms of Service.

10. Information Collected Automatically

When you use Lumesoon, certain information may be collected automatically.

This may include:

• IP address.
• Browser type.
• Browser version.
• Device type.
• Operating system.
• Language settings.
• Time zone.
• Device identifiers.
• Referral source.
• Pages visited.
• Session duration.
• Click activity.
• Feature usage.
• Error reports.
• Performance metrics.
• Network information. This information helps us improve security, reliability and overall platform performance.

11. Cookies and Similar Technologies

Lumesoon uses cookies and similar technologies to operate the website, remember preferences, improve performance and enhance security.

Cookies may also help us:

• Keep users signed in.
• Remember settings.
• Prevent fraud.
• Measure performance.
• Understand platform usage.
• Improve user experience. Further information is available in our Cookie Policy.

12. Analytics Information

We may use analytics technologies to understand how users interact with the Services.

Analytics information may include:

• Page visits.
• Navigation patterns.
• Device information.
• Session duration.
• Feature popularity.
• Performance statistics.
• Error diagnostics. Analytics information helps us improve usability, stability and platform performance.

13. Log Information

For security and operational purposes, our systems automatically generate logs.

These logs may include:

• Login attempts.
• IP addresses.
• Browser information.
• Device identifiers.
• Error logs.
• Security events.
• API activity.
• Authentication records.
• System diagnostics. Logs are used to detect fraud, investigate security incidents and maintain the integrity of the Services.

14. Customer Support Information

When you contact customer support, we may collect information including:

• Your name.
• Contact information.
• Account details.
• Support requests.
• Attachments.
• Screenshots.
• Correspondence.
• Technical information necessary to investigate reported issues. Support communications may be retained to improve service quality, resolve disputes and maintain support records.

15. Marketing Communications

If you subscribe to newsletters or marketing communications, we may use your contact information to send:

• Product announcements.
• Feature updates.
• Educational content.
• Promotional offers.
• Account notifications.
• Service announcements. You may unsubscribe from marketing communications at any time using the unsubscribe link included in applicable emails.

Certain service-related communications cannot be disabled because they are necessary for the operation of your account.

16. How We Use Your Information

We use personal information only where there is a legitimate business purpose or another lawful basis for doing so.

Depending on your use of the Services, we may use information to:

• Create and manage accounts.
• Provide requested Services.
• Process payments.
• Deliver subscriptions.
• Maintain platform security.
• Prevent fraud.
• Authenticate users.
• Respond to customer support requests.
• Improve platform functionality.
• Develop new features.
• Monitor service performance.
• Detect technical problems.
• Enforce our Terms and policies.
• Comply with legal obligations.
• Send account notifications.
• Send service announcements.
• Conduct internal reporting.
• Protect the rights, property and safety of Lumesoon, our users and others. We do not sell your personal information to third parties.

17. Legal Bases for Processing

Where applicable data protection laws require a legal basis for processing personal information, Lumesoon processes personal information on one or more of the following grounds:

• To perform our contract with you.
• To provide the Services you request.
• To comply with legal obligations.
• To protect vital interests where permitted by law.
• To pursue legitimate business interests that are not overridden by your rights and freedoms.
• With your consent where consent is required. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

18. How We Share Information

Lumesoon does not sell your personal information.

We may share information only where reasonably necessary to operate the Services, comply with legal obligations or protect legitimate business interests.

Information may be shared with:

• Payment providers.
• Cloud hosting providers.
• Infrastructure providers.
• Email delivery providers.
• Customer support providers.
• Analytics providers.
• Identity verification providers.
• Fraud prevention providers.
• Professional advisers.
• Auditors.
• Legal advisers.
• Regulatory authorities where required by law. Every recipient receives only the information reasonably necessary for the applicable purpose.

19. Third Party Services

The Services may integrate with third-party products and services.

Examples include payment platforms, authentication providers, storage services and communication services.

Your interaction with those services is governed by their own privacy policies and terms.

Lumesoon is not responsible for the privacy practices of third-party services that operate independently from our platform.

We encourage users to review the privacy policies of those providers before using their services.

20. International Data Transfers

Your information may be processed or stored in countries other than your country of residence.

Where personal information is transferred internationally, Lumesoon takes reasonable steps to ensure that appropriate safeguards are implemented in accordance with applicable data protection laws.

Such safeguards may include contractual protections, technical safeguards, organizational measures or other legally recognized transfer mechanisms.

21. Data Security

Lumesoon implements administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration or destruction.

These safeguards may include:

• Encryption of data in transit.
• Encryption of sensitive stored data where appropriate.
• Access controls.
• Authentication mechanisms.
• Role-based permissions.
• Security monitoring.
• Firewall protection.
• Regular software updates.
• Secure infrastructure.
• Backup procedures.
• Fraud detection systems. No internet service or electronic storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect your information, we cannot guarantee absolute security.

22. Account Security Responsibilities

You also play an important role in protecting your information.

You are responsible for:

• Keeping your password confidential.
• Using a strong password.
• Protecting your authentication credentials.
• Logging out from shared devices.
• Maintaining the security of devices used to access your account.
• Promptly notifying Lumesoon if you suspect unauthorized access. Lumesoon is not responsible for losses resulting from your failure to protect your account credentials.

23. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide the Services.
• Maintain your account.
• Process transactions.
• Resolve disputes.
• Prevent fraud.
• Enforce our agreements.
• Comply with legal obligations.
• Maintain security records.
• Preserve backup systems.
• Protect our legitimate business interests. Retention periods may vary depending on the type of information involved and applicable legal requirements.

When information is no longer required, we will delete, anonymize or securely dispose of it where reasonably practicable.

Certain information may remain in encrypted backup systems for a limited period as part of normal disaster recovery procedures.

24. Your Privacy Rights

Subject to applicable law, you may have rights regarding your personal information.

These rights may include:

• Accessing your personal information.
• Correcting inaccurate information.
• Updating incomplete information.
• Requesting deletion.
• Requesting restriction of processing.
• Objecting to certain processing activities.
• Requesting a copy of your information in a portable format where applicable.
• Withdrawing consent where processing relies on consent.
• Lodging a complaint with the appropriate supervisory authority. Certain requests may be declined where Lumesoon has a lawful basis to retain or continue processing the information.

25. Access and Correction

You may review and update much of your account information directly through your account settings.

Where information cannot be updated through your account, you may contact us using the contact methods provided on the Lumesoon website.

We may request reasonable verification before making changes to personal information.

26. Deletion Requests

You may request deletion of your personal information where permitted by applicable law.

Deletion requests may be limited where retention is necessary to:

• Comply with legal obligations.
• Resolve disputes.
• Prevent fraud.
• Enforce our agreements.
• Protect the security of the Services.
• Complete ongoing transactions.
• Preserve backup integrity.
• Exercise or defend legal claims. Deletion of your account does not necessarily result in the immediate deletion of all information from backup systems.

27. Children's Privacy

Lumesoon is not intended for individuals who are below the minimum legal age required to use the Services under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

If we become aware that personal information has been collected in circumstances where applicable law prohibits such collection, we will take reasonable steps to remove the information.

Parents or legal guardians who believe that a child has provided personal information may contact us using the contact information published on our website.

28. Business Transfers

If Lumesoon is involved in a merger, acquisition, financing, investment, corporate restructuring, sale of assets or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

Any successor entity receiving the information will remain subject to obligations that are materially consistent with this Privacy Policy unless users are notified otherwise where required by law.

29. Compliance With Legal Obligations

Lumesoon may disclose personal information where we reasonably believe disclosure is necessary to:

• Comply with applicable law.
• Respond to lawful requests from public authorities.
• Enforce our agreements.
• Protect the rights or safety of Lumesoon.
• Protect our users.
• Prevent fraud.
• Investigate suspected unlawful activity.
• Defend legal claims.
• Exercise our legal rights. We disclose only the information reasonably necessary for the applicable purpose.

30. Automated Decision Making

Lumesoon may use automated systems to assist with fraud detection, abuse prevention, security monitoring, service delivery and operational efficiency.

These systems are designed to support the operation of the Services and do not replace any legal rights you may have under applicable law.

Where applicable law provides rights relating to automated decision making, those rights remain available to you.

31. Changes to This Privacy Policy

Lumesoon may update this Privacy Policy from time to time.

Updated versions become effective upon publication unless otherwise stated.

Where required by applicable law, reasonable notice of material changes will be provided.

Your continued use of the Services after the effective date of an updated Privacy Policy constitutes acceptance of the revised Policy.

32. Contact Us

If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact Lumesoon using the official contact methods published on our website.

We may request reasonable information to verify your identity before responding to certain privacy requests.

33. Entire Privacy Policy

This Privacy Policy should be read together with the Terms of Service, Cookie Policy, GDPR Policy and other applicable policies published by Lumesoon.

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

Nothing in this Privacy Policy limits any rights or obligations that cannot legally be excluded under applicable law.

34. Service Processing

Lumesoon processes uploaded content only to provide the Services requested by you.

Depending on the features you use, this processing may include:

• Voice generation.
• Voice cloning.
• Speech synthesis.
• Audio transcription.
• Meeting transcription.
• Subtitle generation.
• Script generation.
• Content generation.
• Translation.
• Project management.
• File conversion. Processing is limited to what is reasonably necessary to provide the requested functionality, operate the platform, maintain security and comply with applicable law.

35. Service Improvement

Lumesoon continually improves the quality, reliability, performance and security of its Services.

We may use aggregated, anonymized or de-identified operational information to:

• Improve platform stability.
• Improve system performance.
• Detect abuse.
• Prevent fraud.
• Improve service reliability.
• Analyze feature usage.
• Measure system health.
• Diagnose technical issues. Where information has been anonymized or de-identified, it is no longer intended to identify an individual user.

36. Training of Models

Unless expressly disclosed for a specific feature or unless you separately provide consent where required by applicable law, Lumesoon does not use your uploaded content solely for the purpose of training proprietary machine learning models.

Your uploaded files remain processed only as reasonably necessary to provide the Services you request, maintain platform security, improve operational reliability and comply with legal obligations.

Where third-party providers process information to deliver requested Services, their handling of information is governed by their applicable terms and privacy commitments.

37. Data Minimization

Lumesoon seeks to collect only the information reasonably necessary to operate the Services.

We do not intentionally collect unnecessary personal information.

Users should avoid uploading sensitive information unless it is required for the specific Service being used.

38. Accuracy of Information

You are responsible for ensuring that the information you provide is accurate, complete and kept up to date.

Lumesoon is not responsible for problems resulting from inaccurate, incomplete or outdated information supplied by users.

39. Identity Verification

Where necessary to protect users, comply with legal obligations or prevent fraud, Lumesoon may request additional information to verify your identity.

Verification requests may be required before:

• Processing certain privacy requests.
• Restoring account access.
• Changing sensitive account information.
• Processing large affiliate withdrawals.
• Investigating suspicious activity. Failure to complete reasonable verification may delay or prevent processing of your request.

40. Fraud Detection

To protect the platform and our users, Lumesoon may process information necessary to detect, investigate and prevent:

• Unauthorized account access.
• Payment fraud.
• Identity fraud.
• Platform abuse.
• Automated attacks.
• Spam.
• Malicious activity.
• Violations of our Terms of Service. Such processing is carried out only where reasonably necessary and in accordance with applicable law.

41. Security Monitoring

Lumesoon may monitor system activity to protect the integrity, availability and security of the Services.

Monitoring activities may include:

• Authentication events.
• Failed login attempts.
• API activity.
• Security alerts.
• System diagnostics.
• Performance monitoring.
• Abuse detection. Security monitoring is intended solely to maintain the safety and reliability of the platform.

42. Communication Preferences

You may manage certain communication preferences through your account settings where available.

Even if you opt out of marketing communications, Lumesoon may continue sending messages that are necessary for:

• Account security.
• Password resets.
• Billing.
• Subscription management.
• Product notices affecting your account.
• Legal notices.
• Service interruptions.
• Compliance obligations. These communications are considered essential to the operation of your account.

43. Data Accuracy Requests

If you believe that any personal information we hold about you is inaccurate, you may request that it be corrected.

We may request reasonable evidence before making changes where necessary to protect account security and prevent fraud.

44. Business Contact Information

Information relating to businesses, organizations or professional representatives may be processed for legitimate commercial purposes, including account administration, customer support and contractual communications.

45. Third Party Links

The Lumesoon website may contain links to third-party websites, services or resources.

Lumesoon does not control those websites and is not responsible for their privacy practices, security or content.

Your use of third-party websites is governed by their own terms and privacy policies.

46. Record Retention for Legal Purposes

Where reasonably necessary, Lumesoon may retain certain records beyond normal retention periods for purposes including:

• Compliance with legal obligations.
• Tax reporting.
• Fraud prevention.
• Security investigations.
• Regulatory compliance.
• Enforcement of agreements.
• Protection of legal rights.
• Resolution of disputes. Such records will be retained only for as long as reasonably necessary for those purposes.

47. Privacy Complaints

If you believe that Lumesoon has not handled your personal information appropriately, you may contact us using the official contact methods published on our website.

We will review privacy concerns in good faith and respond within a reasonable period, subject to verification where appropriate.

Where applicable law provides additional rights, you may also contact the relevant supervisory authority.

48. Reservation of Rights

Except where prohibited by applicable law, Lumesoon reserves all rights not expressly granted under this Privacy Policy.

Failure to exercise any right under this Privacy Policy does not constitute a waiver of that right.

49. Severability

If any provision of this Privacy Policy is found to be unlawful, invalid or unenforceable, the remaining provisions shall continue in full force and effect.

50. Electronic Acceptance

By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein, where consent is the applicable legal basis for processing.