This Privacy Policy explains how Lumvio ("we", "our", "us") collects, uses, discloses, and protects personal information when you use our website, applications, and services (the "Service"). This Policy is maintained by Lumvio.
1. Information We Collect
- Account data: name, email, role (freelancer or client), password hash.
- Identity data: government-issued ID and selfie processed by our verification provider (Stripe Identity). We store the verification result and a session reference, not the raw document images.
- Profile and work data: avatar, bio, skills, portfolio, project briefs, messages, files uploaded to workspaces.
- Transaction data: escrow milestones, invoices, wallet balances, payout method metadata (no full card numbers).
- Technical data: IP address, device and browser info, cookies, and log events.
2. How We Use Information
- Provide, secure, and improve the Service.
- Verify identity and prevent fraud, abuse, and money laundering.
- Process payments and release escrow milestones.
- Communicate about your account, transactions, and product updates.
- Comply with legal obligations.
3. Legal Bases
Where required (e.g. under the EU/UK GDPR), we rely on the following bases: performance of a contract, compliance with legal obligations, legitimate interests (security and product improvement), and consent (where specifically requested).
4. Sharing
We share personal information with:
- Service providers such as Stripe (identity and payments) and Supabase (managed database and storage).
- Other users to the extent needed to perform contracts you enter into (e.g., your name is shown to your counterparty).
- Authorities when required by law or to protect rights, safety, and the integrity of the Service.
We do not sell personal information.
5. International Transfers
Data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
6. Retention
We keep account and transaction data for as long as your account is active and afterwards as needed to comply with legal, tax, and dispute-resolution obligations.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing. To exercise these rights, email privacy@lumvio.com. You may also lodge a complaint with your local data protection authority.
8. Security
We implement technical and organisational measures including encryption in transit, row-level access controls, and least-privilege administrative access. No system is perfectly secure; we cannot guarantee absolute security.
9. Cookies
We use strictly necessary cookies for authentication and session management, and limited analytics cookies to understand usage. You can control cookies through your browser settings.
10. Children
The Service is not directed to children under 18 and we do not knowingly collect their data.
11. Changes
We may update this Policy from time to time. Material changes will be notified through the Service.
12. Contact
Questions may be sent to privacy@lumvio.com.