Privacy Policy

LumaGain is operated by Bits and Shovels, LLC, a Delaware limited liability company operating from California. In this policy, “LumaGain,” “we,” “us,” and “our” refer to Bits and Shovels, LLC.

This policy explains how we handle information when you visit LumaGain, process an image, create an account, subscribe to Pro, or contact us.

We collect the following categories of information:

• Images and processing choices. Images you upload, embedded image metadata, masks, brightness settings, and the files LumaGain generates for you.
• Account and authentication information. Your email address, verification status, account identifiers, login tokens, session dates, IP address, and browser or device user agent.
• Usage information. Conversion identifiers, output tier, download and export counts, product events such as starting an upload or checkout, event times, and marketing-email preferences.
• Subscription information. Plan, billing interval, subscription status and dates, and Stripe customer and subscription identifiers. Stripe collects and processes payment card and other payment details; LumaGain does not store full card numbers.
• Communications. Information you include when you contact us for help, privacy requests, or billing support.

We use information to:

• process images and deliver compatible Ultra HDR JPEGs;
• authenticate accounts and keep sessions secure;
• apply Free and Pro limits and manage subscriptions;
• operate, troubleshoot, secure, and improve LumaGain;
• send service, login, billing, and consented marketing messages;
• respond to requests and enforce our Terms of Service; and
• comply with law and protect users, LumaGain, and others.

We do not use your uploaded images to train generative artificial intelligence models.

Source and generated media files expire after one hour. They are kept in temporary processing storage and are not written to the account database or a persistent media volume. Download your result before it expires.

Account, session, consent, subscription, security, and usage records are kept for as long as reasonably necessary to provide LumaGain, honor subscription and tax obligations, resolve disputes, prevent abuse, and comply with law. Login links expire after ten minutes. Backup copies and records we must keep by law may remain for a limited period after a deletion request.

LumaGain uses necessary first-party cookies and similar storage to keep you signed in, protect account actions, and associate a temporary conversion with the browser that created it. Disabling them may prevent sign-in or download features from working.

We record limited first-party product events, such as whether an upload, result, account creation, checkout, or export step occurred. These events contain an event name, time, random event and tab-visit identifiers, and sometimes a conversion identifier. We retain allow-listed page paths and campaign labels to understand which content leads to product use. We do not include raw URLs, query strings, referrer URLs, filenames, images, email addresses, account identifiers, IP addresses, or user agents in these analytics records. Tab-visit storage expires after 30 minutes without a recorded event. Analytics records are removed after 90 days during collection or scheduled maintenance. We honor browser Do Not Track and Global Privacy Control signals for these analytics. Necessary authentication, billing, and download-limit records remain separate. We do not use third-party advertising cookies or cross-site behavioral analytics.

We disclose information only as needed to:

• service providers that host infrastructure, deliver email, process payments through Stripe, or help us secure and operate LumaGain;
• professional advisers, authorities, or other parties when required by law or reasonably necessary to protect rights and safety; and
• a successor in connection with a merger, financing, acquisition, reorganization, or sale of all or part of the business, subject to appropriate protections.

We do not sell your personal information. We also do not share it for cross-context behavioral advertising or use it for targeted advertising.

Where a law requires a legal basis, we process information as needed to perform our contract with you, pursue legitimate interests such as securing and improving LumaGain, comply with legal obligations, and act on your consent where requested. You may withdraw consent at any time without affecting earlier processing.

LumaGain is operated in the United States. If you use it from another country, your information may be processed in the United States or other locations where our service providers operate, subject to safeguards required by applicable law.

Depending on where you live, you may have the right to know, access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a decision about a request. We will not discriminate against you for exercising a privacy right.

You can change marketing-email consent in your account. To make any other request, email [email protected]. We may need to verify your identity and authority before acting. Some information may be retained when permitted or required by law, and Stripe may separately retain payment records under its legal obligations.

We use administrative, technical, and physical safeguards designed for the nature of the information we process. No online service is completely secure, so we cannot guarantee that information will never be accessed, altered, or lost without authorization.

LumaGain is a general-audience creative tool and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided information to us, contact us so we can review and delete it as appropriate.

We may update this policy as LumaGain or applicable law changes. We will post the updated policy here and revise its effective date. If a change materially affects how we use information, we will provide additional notice when required.

Questions or privacy requests may be sent to Bits and Shovels, LLC at [email protected].