Privacy Policy

Last updated: 2026

Luma ("Luma", "we", "us") is a browser-based 3D slab analysis
and reinforcement-design tool. This policy explains what data we collect, why, and
how it is protected.

What we collect

We collect only the minimum information required to operate your account:

Email address - used for login, email verification, and password resets.
Company name - only for Professional-tier accounts, the company name you provide.
Associated usernames - the user names linked to a Professional account (for example, team members).

That is the only personal data we store in our database.

What we do not collect

We do not collect any other personal data.
We do not gather additional personal information beyond the items listed above.
We do not use any of your data for AI training, model development, or any similar purpose.
We do not use your models, project data, or account information to train, improve, or feed any artificial-intelligence system.

How your data is used

Your email is used solely for account authentication and essential service
communications (verification and password recovery). We do not send marketing emails,
and we do not share your information with anyone.

Payment processing

All payment processing is handled entirely by Stripe, a PCI-compliant third-party
payment provider. Luma does not store, access, or process any credit-card
numbers, bank details, or financial information. For details on how Stripe handles
your payment information, please refer to the
Stripe Privacy Policy.

We do not share or sell your personal data to third parties. Your data is not used
for advertising and is not resold in any form.

Data retention

Your account and associated data are retained for as long as your account is active.
If you wish to have your account and all associated data deleted, contact us and we
will process your request promptly.

Cookies

Luma uses a single session cookie for authentication. We do not use tracking
cookies, analytics cookies, or any third-party cookies.

Visitor analytics

To understand usage, Luma counts page visits on the landing page and the app
itself. This is done server-side with no cookies: each visit records the page,
the time, and a one-way hash of the visitor's IP address together with a
country code derived from it. Raw IP addresses are never stored, locations
stay at country level, and visit records are deleted after 90 days.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on
this page with an updated revision date.

Contact

Questions about this policy? Email hello@element3d.app.