LEGAL
Last updated: September 2026
Draft, pending legal review — this describes how Lumaris actually handles data today, but hasn't been reviewed by counsel yet. Treat it as accurate, not final.
This policy covers the Lumaris website and dashboard (lumaris.apimastudio.com), operated by Apima. It does not cover how a customer's own app uses the Lumaris SDK inside that app — that's between the customer and their own end users, under the customer's own privacy policy.
Account information you give us directly when you register: email, password (stored hashed, never in plain text), country, date of birth, and, optionally, your company website and LinkedIn profile.
Basic technical data collected automatically: IP address, browser type, and request timestamps — mainly to keep the service secure and to enforce rate limits against abuse.
Support ticket content: whatever you write to us when you open or reply to a ticket.
To create and secure your account, and to let you sign in.
To respond to support tickets and other messages you send us.
To meet legal and tax obligations tied to running a paid product — country and date of birth exist for this reason, not for marketing.
We do not sell your information, and we do not use it to build advertising profiles.
The SDK itself — running inside a customer's app, on an end user's device — captures camera video, tracks facial landmarks, and renders makeup entirely on-device. No video frame is uploaded to Lumaris or Apima for processing, by design, not as a privacy add-on.
The SDK does not send face data, images, or video to our servers. Any data practices inside a customer's app are that customer's responsibility, not ours.
Account data is kept for as long as your account is active, and for a reasonable period after closure to meet legal, tax, and dispute-resolution obligations.
You can ask us to delete your account and associated data at any time by opening a support ticket, subject to records we're legally required to keep.
The dashboard uses browser storage to keep you signed in. We don't use third-party advertising or tracking cookies.
Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain uses of it. Contact us through the contact page to exercise any of these.
We'll update the date at the top of this page when this policy changes, and post the updated version here.
Questions about this policy can be sent through the contact page.