Privacy Policy
Last updated: March 31, 2026
Lumnix ("we," "our," or "us") is operated by Oltaflock AI. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing intelligence platform at lumnix.vercel.app (the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
a) Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password.
- Workspace Data: Brand name, logo, and other workspace configuration you provide.
- Payment Information: If you subscribe to a paid plan, payment is processed by Razorpay. We do not store your credit card details.
- Support Communications: Any messages you send us via email or in-app support.
b) Information Collected Automatically
- Analytics Data: We collect data from third-party services you connect (Google Analytics 4, Google Search Console, Google Ads, Meta Ads) through OAuth. This data is used solely to power your dashboard and reports.
- Usage Data: Pages visited, features used, session duration, and browser/device type.
- Cookies: We use essential cookies for authentication and session management. No third-party advertising cookies are used.
c) Third-Party Integrations
When you connect Google or Meta accounts via OAuth, we request only the permissions necessary to read your analytics, search console, and advertising data. We access this data in read-only mode. We never modify your Google or Meta accounts, campaigns, or settings.
2. How We Use Your Information
- To provide, operate, and maintain the Service
- To display your marketing analytics, SEO data, and advertising performance in a unified dashboard
- To generate AI-powered insights, anomaly detection, and automated reports
- To track competitor ads via the Meta Ad Library (publicly available data)
- To send you service-related emails (account verification, billing, feature updates)
- To improve and develop new features
- To respond to support requests
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:
- Service Providers: We use third-party services (Supabase for database hosting, Vercel for deployment, Razorpay for payments, OpenAI/Anthropic for AI analysis) that process data on our behalf under strict data processing agreements.
- Legal Requirements: If required by law, regulation, or legal process.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
4. Data Storage & Security
- Your data is stored on Supabase (hosted on AWS) with row-level security (RLS) enabled.
- All data is encrypted in transit (TLS 1.2+) and at rest.
- OAuth tokens are stored encrypted and are never exposed to client-side code.
- We conduct regular security reviews and follow industry best practices.
5. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and connected analytics data within 30 days. Aggregated, anonymized data may be retained for analytics purposes.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to or restrict certain processing activities
- Lodge a complaint with a supervisory authority
To exercise any of these rights, contact us at admin@oltaflock.ai.
7. Third-Party Services
Our Service integrates with:
8. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: