Privacy Policy

1. Information we collect

Information you provide. When you submit a contact, “Book a call,” or inquiry form, or interact with our AI assistant (“Luma”), we collect the information you choose to provide — such as your name, email address, phone number, agency name, and the contents of your message or chat.

Information collected automatically. When you use the Services, we and our service providers may automatically collect certain technical information, such as your IP address, browser type, device information, pages viewed, referring URLs, and general usage data, including through cookies and similar technologies.

Cookies & similar technologies. We use a small number of cookies and similar technologies that are necessary to operate the Services, keep you signed in to the admin area, remember preferences, and protect against spam and abuse. You can control cookies through your browser settings, though some features may not function without them.

2. How we use information

• To respond to your inquiries and provide the demo, sales, and onboarding experience you request;
• To operate, maintain, secure, and improve the Services;
• To power AI features such as the Luma assistant and to generate website content;
• To send you transactional and follow-up communications related to your request;
• To detect, prevent, and address fraud, abuse, security, or technical issues; and
• To comply with legal obligations and enforce our agreements.

3. AI processing

Our Services use third-party artificial intelligence providers to power the Luma assistant and to generate website content. When you interact with Luma or submit information through an AI-enabled feature, the relevant content may be transmitted to and processed by our AI provider to generate a response. We do not use your personal information to train third-party AI models, and we instruct our providers to process data only to deliver the Services.

4. How we share information

We do not sell your personal information. We share information only as described below:

• Service providers (sub-processors) who perform services on our behalf, including hosting, databases, AI processing, email delivery, spam protection, mapping, and analytics. Current providers include Supabase (database, authentication, and storage), Anthropic (AI processing), Google reCAPTCHA (spam protection), Resend (transactional email), and our hosting and content-delivery infrastructure (Google Cloud Platform and Cloudflare).
• Real estate clients. If you submit a lead through a client’s demo or live site, your information is shared with that real estate agency so they can respond to you.
• Legal & safety. When required by law, legal process, or to protect the rights, property, or safety of LumaRealtyAI, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Google reCAPTCHA

We use Google reCAPTCHA to protect our forms from spam and abuse. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

6. Data retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain de-identified or aggregated information indefinitely.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices & rights

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, or to object to certain processing. You may also opt out of non-essential communications at any time. To exercise any of these rights, contact us using the details below. We will respond consistent with applicable law.

9. Children’s privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

10. Third-party links

The Services may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the Services after changes become effective constitutes acceptance of the updated Policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at [email protected] or visit luxandgrand.com.