Privacy: Click Oracle

What we collect

Account: email, optional name, a salted hash of your password (never the password itself), plan and billing status.
Your work: the options, briefs, profiles and past test results you submit, and the rankings and options we produce.
Usage: counts of rankings, Claude-written options and calibration tests, with model token counts and cost, so we can apply plan limits.
Support: messages you send us.
Email: confirmation messages we send when you create an account, and password reset messages.

We set one first-party cookie, a sign-in session cookie. We also use Google Analytics to measure aggregate traffic to this site (pages viewed, general location, and device type). We do not send your email, account data, briefs, options, or other personal content to Google. Page addresses are sent without query strings or reset, verify, or invite tokens. Google Analytics sets its own cookies. See Google's privacy policy.

How we use it

To run the service: rank your options, write options when you ask, show your history, apply limits, bill paid plans and answer support. We do not sell your data, and LumeGrid does not use your content to train models.

Who processes it

TypeSafe AI (the ranking model) receives the options being compared and the format, only to produce your ranking. We have not yet accepted TypeSafe's DPA for this product. Their API terms typically prohibit training on API inputs; we have not independently verified their retention or training practices.
Anthropic (Claude) receives your brief, audience notes and any existing options, only when you ask Claude to write options, under Anthropic's API terms.
Resend sends account email (confirmation and password reset) and receives the destination email address.
Cloudflare hosts the service and its database.
Stripe is the merchant of record for paid plans. It processes payments, collects applicable sales tax or VAT, and runs the billing portal. We never see or store card numbers.
Google provides Google Analytics, which receives page views and basic device and coarse location data for aggregate traffic analytics. See Google's privacy policy.

Do not send us EEA or California user traffic until processing terms with our model providers are in place. A customer DPA template is in review; ask hello@trylumegrid.com if you need one before sending live traffic that includes personal data.

How long we keep it

Rankings and written options are kept for your plan's history window (7 days on Free, 1 year on Creator, 2 years on Pro and Agency) and then deleted automatically. If you cancel or your paid plan ends, we keep that paid history window for 30 days so you can export, then the Free 7-day window applies. You can delete any ranking at any time. Deleting your account deletes your rankings, options, profiles, API keys, sessions and support messages right away. We keep usage counts (numbers only, no text), billing records and a security audit log as the law requires.

Your choices

You can export your rankings (CSV or JSON), delete them, or delete your account from Account settings. For any other request, including access or correction, use the support form with the topic Privacy, or email hello@trylumegrid.com.

Security