Privacy Policy

This policy explains, in plain words, what data PromptLumi collects, why, and what you can do about it. It applies to everyone who uses promptlumi.com, wherever you live.

1. What we collect

• Account data — email, name, username, profile photo and bio. Passwords are stored only in encrypted (hashed) form. If you sign in with Google or GitHub, we receive your name, email and photo from them.
• Your content — prompts, images, videos, collections, Bio Page, reviews, comments and messages.
• Purchases — orders, credits and Pro membership. Payments are handled by our payment provider; we never see or store your card details. Sellers also give us the details we need to send payouts.
• Technical data — IP address, browser and device, and the pages you visit. We use it for security and simple visitor statistics.
• Optional — newsletter, push notifications, phone number or crypto wallet address, only if you add them.

2. Why we use it

• To run your account and show what you publish.
• To process payments, credits, sales and payouts.
• To create the AI results you ask for.
• To send emails you need (sign-in links, receipts, security alerts) and, only if you subscribe, our newsletter.
• To keep the site safe, stop spam and fix problems.

We do not sell your data, we do not show ads based on it, and we do not use your private data to train AI models.

3. Who helps us

We use trusted services to run PromptLumi: Cloudflare (hosting, storage, spam protection), Resend (email), our payment provider (currently Midtrans), AI providers (Anthropic, OpenAI, Google, fal.ai), and Google or GitHub if you sign in with them. They only get the data they need for their job. Some of them are in other countries, such as the United States; we use them under standard data-protection agreements.

4. What is public

Your username, name, photo, bio, published prompts, public collections, reviews and Bio Page can be seen by everyone. Your email, orders, credits and messages stay private.

5. Cookies

We only use cookies needed to keep you signed in, protect forms from spam, and remember your language and theme. No advertising cookies.

6. How long we keep data

We keep your data while your account is active. When you delete your account, we delete your data, except records we must keep by law (such as payment records).

7. Your rights

You can see, download, correct or delete your data at any time:

• Download your data or delete your account in Dashboard → Account.
• Edit your profile whenever you like.
• Unsubscribe from emails with the link in every newsletter.

You can also ask us to stop or limit how we use your data. Just contact us — we reply within 30 days. If you live in the EU or UK, you can also complain to your local data protection authority.

8. Security

We use HTTPS, encrypted passwords and optional two-factor sign-in. No system is perfect, but if something goes wrong with your data, we will tell you.

9. Children

PromptLumi is not for children under 13 (under 16 in the EU and UK without a parent's permission). If a child has given us data, contact us and we will delete it.

10. Changes and contact

We may update this policy; the date at the top shows the latest version. Questions? Contact us.