Privacy Policy

LumiLex.AI Inc. (“LumiLex,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you use our Trade Compliance Workbench platform (“Service”).

Personal Information Provided by You:

• Name
• Email address
• Employer information
• Address (in certain circumstances)

Information Collected Automatically:

• IP address
• Device information
• Browser type
• Usage data and analytics

• Providing and managing your account and the Service
• Improving the Service through analytics and usage insights
• Security and authentication purposes
• Marketing and promotional communications (e.g., providing information on new features, updates, and additional LumiLex products and services that may interest you)

We do not sell or share your personal information with third parties for their marketing purposes. We may share data you provide to the Service (e.g., inputs you submit for classification, screening, or analysis, which may include personal or business information) with third-party AI providers solely to operate the Service. All AI inference that uses your data is performed within our secured United States cloud environment (AWS GovCloud (US)); we do not send your data to any AI inference service that does not contractually commit to zero data retention and to not using your data to train its models; and we do not use your data to train AI models. For screening and research features, we submit only the identity of the third party being researched (such as an entity or individual name) to public-source research providers (such as Perplexity), and no other data is shared with them. A current list of our AI providers and subprocessors is available upon request to legal@lumilex.ai.

The Service integrates with third-party services, including payment processors (Stripe), analytics platforms (e.g., Google Analytics), AI and research providers (such as Anthropic and Perplexity), and CRM tools. Your information may be processed by these providers according to their respective privacy policies, except that AI providers that process your data do so under contractual zero-retention and no-training commitments as described in Section 4.

Data is stored in the United States through reputable cloud providers (including Amazon Web Services GovCloud (US) for customer data). We employ industry-standard security measures, including encryption of data in transit and at rest, access controls, and regular security audits to protect your data. Where the Service is used with U.S. export-controlled data, we restrict access to vetted U.S. persons.

We retain your personal information and user-generated data for up to one year after account termination unless required to retain it longer by applicable laws or regulations. Data submitted to our AI providers for inference is processed on a zero-data-retention basis and is not retained by those providers, except where preservation is required by law or legal process.

You have the right to view, modify, delete, and export your personal data at no charge. Requests can be made by contacting us at support@lumilex.ai.

We use cookies primarily for authentication and for analytics purposes to improve our Service. You can control cookie preferences through your browser settings.

For California residents, we comply with the California Consumer Privacy Act (CCPA). California residents may exercise their rights under CCPA by contacting us at support@lumilex.ai.

In the event of a data breach affecting your personal information, we will notify affected customers without undue delay and as required by applicable law.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the policy date and via the Service.

If you have questions or requests regarding this Privacy Policy, please contact us at support@lumilex.ai.