Privacy Policy

DRAFT — template pending legal counsel review; not legal advice.

Last updated: 16 June 2026

Lumira LLC ("Lumira," "we," "us") provides email- and domain-health checks over a website, a free public scanner, and an API. This policy explains what we collect, why, and the choices you have. We keep data collection to the minimum we need to run the service.

Who we are (data controller)

The data controller is Lumira LLC, a limited liability company organized in the State of Nevada, USA. For any privacy question or request, contact daniel@lumirallc.com.

What we collect

We collect only what a given action requires:

  • Waitlist / access requests. If you join a waitlist or request API access, we store the email address you provide and the domain you ask us to check or monitor, plus the time of the request. We use this to contact you about access and the feature you asked for.
  • Scanned domain. When you run a scan, the domain name you submit is processed to perform public DNS, TLS, and related lookups. A scan domain is not personal data about you.
  • Transient IP address. When you use the free scanner or the API, your IP address is processed momentarily for security and rate-limiting (abuse prevention). It is not stored in our application database and is used only in memory at request time.

We do not ask for, or intentionally collect, special-category data, payment-card numbers (payment is handled by our payment processor when paid plans launch), or tracking cookies for advertising.

Why we may process this data (lawful basis)

  • Consent — for adding your email to a waitlist or access list and contacting you about it. You can withdraw consent at any time (see Your rights below).
  • Legitimate interests / security — for transient IP processing and bot-protection (including Cloudflare Turnstile, below), to keep the service available and prevent abuse. We balance this against your privacy and use the least data necessary.

Third-party processors

  • Cloudflare Turnstile. We use Cloudflare Turnstile, a privacy-focused bot- detection service, to protect the free scanner and API from automated abuse. When the challenge loads, Cloudflare may process technical signals (including your IP address) to decide whether a request is human. Cloudflare acts as a security processor for this purpose. See Cloudflare's privacy documentation for details.
  • Hosting / infrastructure. Our site and API run on infrastructure providers that process requests on our behalf to deliver the service.

We require processors to handle data only on our instructions and to protect it.

How long we keep it

  • Waitlist / access emails and domains: kept while we are operating the related feature and your interest is active, then deleted on request or when no longer needed.
  • Transient IPs: not retained — used only at request time for rate-limiting and discarded.
  • Scan results: point-in-time and may be cached briefly to serve a result page; they reflect public DNS/TLS at the moment of the check.

We don't sell your data

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share data only with the processors above, strictly to operate the service, or where required by law.

Your rights

Depending on where you live (for example, under the GDPR or CCPA/CPRA), you may have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these — including deletion of your waitlist email — email daniel@lumirallc.com and we will respond within a reasonable period and as required by applicable law. You may also have the right to complain to your local data-protection authority.

International users

We operate from the United States. If you contact us from outside the US, you understand your information will be processed in the US and other countries where our processors operate.

Children

The service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy as the product evolves. We will revise the "last updated" date above, and material changes will be reflected on this page.

Contact

Questions or requests: daniel@lumirallc.com · Lumira LLC, Nevada, USA.