Privacy Policy

Last updated: this document describes the current version of Lumara AI Form Builder as built. It is provided as a starting point and should be reviewed by a qualified professional before use in a real production deployment.

What this policy covers

This policy explains what Lumara AI Form Builder ("Lumara", "we") collects about you as a user of the platform (an account holder building and publishing forms), and clarifies what happens to data submitted through the forms you create.

Account information

When you register, we store your name, email address, and a securely hashed version of your password (never the password itself — see our Security page for details). We use this to authenticate you and operate your account. We don't collect more account information than that.

Form submissions collected by you

You control what fields appear on your forms, and therefore what data is collected from the people who fill them out. You are responsible for the information you choose to collect through your forms, for having a lawful basis to collect it, for telling respondents how you'll use it, and for complying with any privacy laws that apply to you (such as GDPR or CCPA, depending on who you collect data from and where you operate). Lumara stores that submission data on your behalf so you can view, export, and delete it, but we don't review, use, or claim ownership of it.

Submitter IP addresses are stored only in a one-way hashed form for basic abuse prevention — never in a form that can be reversed back to the original address.

Cookies

Lumara uses a small number of functional cookies: a session cookie to keep you logged in, a CSRF-protection token, and (optionally, on forms configured to limit responses per person) a cookie that remembers a form was already submitted. See our Cookie Policy for the full list. We don't use third-party advertising or tracking cookies.

AI form generation

When you use "Create with AI," the text you type is sent to our AI provider to draft form fields. Your submission data is never sent to the AI provider — only your description of the form you want.

Data retention and deletion

You can delete a form, or an individual submission, at any time from your dashboard — this permanently removes the underlying data and any uploaded files. Deleting your account removes your account record; contact us if you need help fully removing associated form data.

Contact

Questions about this policy can be sent to Form@lumara.chat.