Privacy Policy

Last updated August 19, 2026

My Lumen CRM is business software. The information in it belongs to the business that entered it: not to us, and not to anyone else using the product.

What we hold

Your account. Name, email, password (stored hashed, never readable), and an optional profile photo.
Your business records: the contacts, deals, estimates, invoices, files, notes, messages and calendar entries you create.
What you tell the assistant, anything you type or say to Lumen, and the optional description of your business you may write in Settings.
Basic technical logs: errors and request records needed to keep the service running and secure.

Device permissions

The app asks only when a feature needs it, and each is refusable, the rest of the app keeps working:

Microphone & speech: to talk with Lumen instead of typing.
Camera & photos: to attach a photo of a property, job or document to a record.
Contacts: to add someone from your phone without retyping.
Calendar: to put showings and appointments on your own calendar.
Location: to show nearby properties or jobs, only while you are using the app.
Face ID: to unlock the app. It is verified by your device; we never receive it.
Notifications: to tell you about new leads and messages.

Separation between companies

Every record is bound to the company that created it, and enforced in the software at the database level. One company can never see, search or reach another's data.

The assistant

Lumen is part of the product. When you ask her something, your question, and the working context needed to answer it, such as counts from your own workspace, is sent to the Lumen service that powers her. She is never given ownership of your records: they stay in My Lumen CRM's own database.

What we never do

We do not sell your data, or your customers' data, to anyone.
We do not use your business records to advertise to you.
We do not share your records with other customers.

Deleting your data

You can delete your account from inside the app Settings → Delete account. Removing your own account deletes your sign-in. If you are the last administrator, it deletes the entire company: every contact, deal, estimate, file and teammate, permanently. There is no recovery, by design.

You may also email us and ask for a copy of your data, or for it to be erased.

Security

Traffic is encrypted in transit (HTTPS). Passwords are hashed and cannot be read back, by us or anyone else. Access is limited to what is required to operate the service.

Children

My Lumen CRM is for businesses and is not directed at children under 13.

Changes

If this policy changes materially, the date above changes and the current version is always published here.

Contact

Questions about privacy, or a request about your data: support@poweredbylumen.app.