Luminary3 and Lumen Studio Privacy Policy

Effective date: October 19, 2026
Version: 1.0

This Privacy Policy explains how LUMINARY 3, L.L.C., a Florida limited liability company, doing business as Luminary3 and Lumen Studio ("Luminary3," "we," "us," or "our"), collects, uses, discloses, and protects information through our website at luminary3.com, the Lumen Studio web and mobile applications, and our done-for-you marketing services, including Lumen Social, the AI Front Desk, and Lumen Leads (together, the "Services"). Capitalized terms not defined here have the meanings given in our Terms of Service.

1. Who This Policy Covers and Our Role

1.1 Our clients and site visitors. For information about our business clients, their personnel, and visitors to our website, Luminary3 decides how the information is used and is responsible for it.

1.2 Our clients' customers and prospects. When we provide the Services, we process information about our clients' customers, callers, leads, prospects, and message recipients ("End Users") on behalf of and at the direction of the client. For that information, our client is the business responsible for it (sometimes called the "controller"), and Luminary3 acts as its service provider or processor. If you are an End User, please contact the business you interacted with first; we will assist our clients in responding to your request as required by law. You may also contact us directly at advertise@luminary3.com.

1.3 Business-to-business service. The Services are offered only to businesses. They are not intended for personal, family, or household use.

2. Information We Collect

2.1 Information you give us. Name, business name, job title, business email, phone number, mailing address, account login details, billing contact information, ideal-customer criteria, brand materials, logos, images, offers and pricing, and the content of your communications with us.

2.2 Payment information. Payments are processed by Stripe. We receive limited information such as the card brand, last four digits, expiration date, billing address, and payment status. We do not store full card numbers.

2.3 Connected account information. If you connect social media, advertising, phone, email, calendar, or website accounts, we receive the access tokens and the information those platforms make available to us (for example, page names, post and ad performance, and messages), as permitted by your settings and the platform.

2.4 End User information processed through the AI Front Desk. Caller and texter phone numbers, names, and the information they choose to share; call audio, recordings, and transcripts where enabled and lawful; text and direct-message content; appointment details; caller ID and carrier information; the date, time, and duration of communications; and consent, permission-to-call, and opt-out records (including the exact wording shown, the response, and its timestamp).

2.5 Business contact information processed through Lumen Leads. Names, job titles, business email addresses, company names, company websites, industry, location, and company size of business prospects, obtained from public sources, business data providers, and email verification services; outreach emails sent; replies, unsubscribe requests, and suppression records. Lumen Leads does not collect or use personal mobile phone numbers from lead lists for calls or texts; any phone numbers obtained from lead lists are discarded.

2.6 Results information. Deals marked "won," deal values, and related notes entered by our clients to calculate dashboard metrics.

2.7 Automatically collected information. IP address, device and browser type, operating system, pages viewed, referring URL, approximate location derived from IP, and the date and time of access, collected through server logs, cookies, and similar technologies (see Section 9).

3. How We Use Information

We use information to: (a) provide, operate, and maintain the Services, including creating posts and ads, answering calls and messages, finding and contacting business prospects, scheduling appointments, and reporting results; (b) obtain approvals and honor consent, permission-to-call, unsubscribe, and STOP requests; (c) process payments and manage subscriptions; (d) communicate with clients about the Services, support, billing, security, and changes to our terms; (e) secure the Services, prevent fraud and abuse, and enforce our Terms; (f) comply with legal obligations, including keeping consent and opt-out records; (g) analyze and improve the Services using de-identified or aggregated information; and (h) send our own marketing to business contacts, from which you may unsubscribe at any time.

4. Artificial Intelligence Processing

4.1 The Services use AI technologies, including large language models and voice technologies provided by third-party AI providers, to draft content, generate responses, answer and transcribe calls, classify replies, and research business prospects. Information (including End User communications) is sent to these providers to generate outputs.

4.2 We select AI providers that contractually commit to process information only to provide their services to us and, where the provider permits, we configure them not to use our clients' or End Users' information to train their models. We do not use information that identifies a client or End User to train general-purpose AI models offered to others.

4.3 AI outputs may be inaccurate. Clients review and approve social posts, ads, and outreach emails before they are published or sent. The AI Front Desk responds in real time based on information the client provides, and clients can review conversation history.

5. How We Disclose Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We disclose information only as follows:

5.1 Service providers (processors) that help us run the Services under contracts that limit their use of information, in the following categories: cloud hosting and database providers; AI model providers; voice, telephony, and text-messaging providers; email delivery and email verification providers; payment processors; and advertising and social media platforms when you connect them. A current list of our subprocessors is available on request at advertise@luminary3.com.

5.2 Our clients. End User information collected for a client is available to that client.

5.3 Platforms you direct us to use. Content you approve is published to the social and advertising platforms you choose, under those platforms' privacy policies.

5.4 Legal and safety. To comply with law, legal process, or government requests; to enforce our agreements; and to protect the rights, property, or safety of Luminary3, our clients, End Users, or others.

5.5 Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy.

5.6 With consent. Otherwise with your consent or at your direction.

6. Text Messages, Calls, and Mobile Information

6.1 Text messages are sent only as described in our Messaging (SMS) Terms. Reply STOP to any text message to opt out; reply HELP for help. Opting out of texts also stops calls and email from the Services for that business.

6.2 No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with the service providers that help us deliver messages (such as our messaging platform and wireless carriers) and as required by law.

6.3 The Services never place cold calls. A call is placed only after the person has given recorded permission.

7. Email and CAN-SPAM

Every marketing or outreach email sent through the Services identifies the sending business, includes its physical postal address, and includes an unsubscribe link (and, where supported, one-click unsubscribe). Unsubscribe requests are honored promptly and recorded on a suppression list so the address is not contacted again for that business.

8. Your Choices and Rights

8.1 Clients may access, correct, or export account information in the Services or by contacting us, and may request deletion when they close their account, subject to Section 10.

8.2 End Users may opt out of texts (STOP), calls, and emails (unsubscribe) at any time and may request access to or deletion of their information through the business they interacted with or by contacting us.

8.3 Florida residents. The Florida Digital Bill of Rights (Part V of Chapter 501, Florida Statutes) grants certain rights to Florida consumers with respect to businesses that meet its thresholds (including annual global gross revenue over $1 billion). Luminary3 does not currently meet those thresholds, but we honor reasonable requests to access, correct, or delete personal information as described in this Policy. Florida law also governs notification of data breaches (§ 501.171, Florida Statutes), which we follow.

8.4 Residents of other states. If the privacy law of your state applies to us, you may have additional rights. Contact us to make a request; we will verify your identity and respond as required by law. We will not discriminate against you for exercising your rights.

8.5 Marketing emails from Luminary3. Use the unsubscribe link in any marketing email we send.

9. Cookies and Analytics (Cookie Notice)

9.1 We use cookies and similar technologies (such as local storage and pixels) for: strictly necessary purposes (signing in, keeping you signed in, security, and load balancing); preferences (remembering settings); and, on luminary3.com, analytics (understanding visits and improving the site) through Squarespace Analytics, because our website runs on Squarespace. If we use advertising tags such as the Meta Pixel on our website, they may collect browsing information for ad measurement, and you can opt out through your Meta ad settings, your browser controls, or industry opt-out tools (for example, optout.aboutads.info).

9.2 The Lumen Studio app uses only strictly necessary storage to keep you signed in and to make the app work offline; it does not use advertising cookies.

9.3 You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may prevent the Services from working. Our website does not currently respond to "Do Not Track" signals; where required by law, we honor Global Privacy Control signals.

10. Data Retention

We keep information for as long as needed to provide the Services and for legitimate business and legal purposes, then delete or de-identify it. Typical periods: account and billing records for the life of the account plus up to seven (7) years for tax and accounting; client content and End User conversations for the life of the subscription plus thirty (30) days for export, then deletion from active systems (backups roll off on their normal schedule); consent, permission-to-call, opt-out, unsubscribe, and suppression records, including records of text-message consent and opt-outs, for at least five (5) years after the last message or the end of the relationship, whichever is later, because they are needed to prove compliance and to make sure opted-out people are never contacted again.

11. Security

We use commercially reasonable administrative, technical, and physical safeguards, including encryption in transit, access controls and role-based permissions, row-level data separation between clients, hashed passwords, audit logs, and vendor security reviews. No method of transmission or storage is completely secure, and we cannot guarantee the security of information. Clients are responsible for securing their own accounts and devices, including by using multi-factor authentication.

12. Children

The Services are intended only for businesses and for individuals eighteen (18) years of age or older. We do not knowingly collect personal information from children under 13, and the Services are not directed to anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

13. Where Information Is Processed

We are based in the United States, and information is processed and stored in the United States by us and our service providers.

14. Changes to This Policy

We may update this Policy. We will post the new version with a new effective date and, for material changes, notify clients by email or in the Services before the change takes effect.

15. Contact Us

LUMINARY 3, L.L.C. d/b/a Luminary3 and Lumen Studio · Attn: Privacy · 18408 Wayne Rd., Odessa, FL 33556
Email: advertise@luminary3.com · Web: luminary3.com · Telephone: (813) 403-7132