Privacy Policy

Legal Disclaimer: This privacy policy is a template-based document intended for informational purposes. It is not a substitute for legal advice. Consult with an attorney before using this document. This document does not constitute legal advice, advertising, a solicitation, or tax advice. Transmission of this form and the information contained herein is not intended to create, and receipt thereof does not constitute formation of, an attorney-client relationship. You should not rely upon this document or information for any purpose without seeking legal advice from an appropriately licensed attorney.

Introduction

This Privacy Policy describes how lumeforms ("we," "our," or "us") collects, uses, and shares personal information when you use our website, mobile application, or other digital products (collectively, the "Service"). This policy applies to all users of the Service, including visitors, registered users, and subscribers.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our Service.

Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Service, and information from third-party sources. The types of personal information we collect include:

Information You Provide to Us

Account Information: When you create an account, we collect your email address, password (encrypted), and any other information you provide during registration or profile setup.
User-Generated Content: We collect the forms you create, questions you design, responses you receive, and any other content you submit through our Service.
Form Responses: When you submit a response to a form created by another user, we collect the information you provide in that response. Responses may be submitted anonymously (without requiring an account) or with your account information, depending on the form creator's settings.
Payment Information: If you subscribe to a paid plan, we collect billing information through our third-party payment processor (Stripe). We do not store your full credit card information on our servers.
Communications: We collect information you provide when you contact us for support, respond to surveys, or communicate with us via email, phone, or other methods.

Information We Collect Automatically

Usage Data: We collect information about how you interact with our Service, including pages visited, features used, time spent on pages, and navigation patterns.
Device Information: We collect information about your device, including IP address, browser type, operating system, device identifiers, and mobile network information.
Log Data: Our servers automatically record information when you access our Service, including your IP address, browser type, referring/exit pages, and timestamps.

Information from Third Parties

We may receive information about you from third-party services, including:

Authentication providers (if you sign in using third-party services)
Analytics providers (Google Firebase Analytics)
Payment processors (Stripe) for transaction information
Hosting and infrastructure providers (Vercel) for technical data

How We Use Your Information

We use the information we collect for the following purposes:

To Provide Our Service: To create and maintain your account, process transactions, deliver the features and functionality of our Service, and respond to your requests.
To Communicate with You: To send you service-related notifications, updates, security alerts, administrative messages, and respond to your inquiries and support requests.
To Provide AI-Powered Insights: We use artificial intelligence (Google Gemini) to analyze form responses and generate insights, themes, sentiment analysis, and actionable recommendations for form creators. This processing helps form creators understand and act on the feedback they receive.
To Improve Our Service: To analyze usage patterns, conduct research, develop new features, and improve the functionality and user experience of our Service.
To Ensure Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems.
To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, and enforce our Terms of Service.
For Business Purposes: To manage our business operations, conduct analytics, and for other legitimate business purposes.

Note: We do not sell your personal information to third parties. However, we may share your information with third-party service providers who assist us in operating our Service, as described in the "Third-Party Services" section below.

Special Note for Form Respondents

When you submit a response to a form created by another user:

Your responses are visible to the form creator (the person who created the form)
Form creators may use AI-powered insights generated from your responses
Responses may be submitted anonymously (without requiring an account) or linked to your account, depending on the form settings
Form creators are responsible for how they use and handle the responses they receive
We process your responses through AI services (Google Gemini) to generate insights for form creators

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

Types of Cookies We Use

Essential Cookies

These cookies are necessary for the service to function and cannot be switched off:

Session Cookies - Used for authentication and maintaining your login session
CSRF Protection Cookies - Used to prevent cross-site request forgery attacks
Organization ID Cookies - Used to remember your active organization when using multi-organization features

Preference Cookies

These cookies remember your preferences:

Theme Cookies - Store your theme preference (light/dark mode)
Sidebar State Cookies - Remember your sidebar collapsed/expanded state

Analytics Cookies

These cookies help us understand how visitors interact with our service:

Firebase Analytics - We use Google Firebase Analytics to track page views and user interactions to improve our service. This service may collect information such as your IP address, browser type, and pages visited.

Managing Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer.

To opt out of Firebase Analytics, you can use browser extensions or adjust your browser settings. Note that disabling analytics cookies will not affect the functionality of our service.

Data Security

We use industry-standard security measures to protect your data, including encryption, secure authentication, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

Access - You can request access to the personal data we hold about you
Deletion - You can request that we delete your personal data
Correction - You can update your account information at any time in your settings
Data Portability - You can export your form data and responses at any time
Opt-Out - You can opt out of analytics tracking by adjusting your browser settings

To exercise these rights, please contact us at akhil@lumeforms.com

Disclosure of Information to Third Parties

We may share your personal information with third parties in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf, including:

Firebase (Google): For authentication, database storage, file storage, and analytics services. Firebase may collect information such as your IP address, device identifiers, and usage data. See Google's Privacy Policy for more information.
Google Gemini AI: For processing form responses to generate AI-powered insights, themes, and sentiment analysis. When form creators request insights, we send form responses to Google Gemini for analysis. Google may process this data according to their Privacy Policy. See Google's Privacy Policy for more information.
Vercel: For hosting, deployment, and infrastructure services. Vercel may collect technical information about your use of our Service.
Stripe: For payment processing. When you make a payment, Stripe collects your payment information. We do not store your full credit card details. See Stripe's Privacy Policy for more information.
Email Service Providers: For sending transactional and marketing emails (if applicable).

These third-party service providers are contractually obligated to protect your information and may only use it for the purposes we specify. However, they have their own privacy policies, and we encourage you to review them.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a legal process.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

Important: We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Data Retention and Deletion

We retain your personal information for as long as necessary to provide you with our Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Active Accounts: We retain your information while your account is active and for a reasonable period thereafter.
Deleted Accounts: If you delete your account, we will retain your data for 90 days, after which it will be permanently deleted from our systems, except where we are required to retain it for legal, regulatory, or business purposes.
Legal Requirements: We may retain certain information for longer periods if required by law, court order, or to resolve disputes.
Backup Systems: Deleted information may persist in backup systems for a limited period before being permanently deleted.

You can export your data at any time through your account settings. After account deletion, you will not be able to recover your data.

Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of any material changes by:

Posting the updated Privacy Policy on this page with a new "Last updated" date
Sending you an email notification (if you have provided an email address)
Displaying a prominent notice on our Service

Your continued use of our Service after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. The "Last updated" date at the bottom of this page indicates when this Privacy Policy was last revised.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: akhil@lumeforms.com

Last updated: January 9, 2026