Privacy Policy

Your data. When you sign up we hold your name, business name, email address and billing details, plus everything you configure — hours, services, prices, policies and how the agent should sound.

Your customers’ data. When someone calls your line, we process their information on your behalf. You decide what your agent does and what it knows; we operate it for you. In data protection terms you are the controller and we are the processor.

• the caller’s phone number, and their name if they give it;
• a written transcript of the conversation, and how long the call lasted;
• anything the caller provides so the agent can help — an order number, an address, an appointment time, or an email address or ZIP code used to confirm who they are;
• for online stores, order details read from your store so the agent can answer questions about them.

Call audio is processed by our voice provider to turn speech into text and text into speech. What we store is the transcript.

If you use SEO + AI Search, we hold what you give us about your website and each business location: its address, phone number, category, and the keywords and questions you want to be found for. Using those, we collect:

• the public pages of your website, which we crawl to find technical and content problems;
• public search results: where you and your competitors rank on Google and in the local map pack, links to your site from other websites, and whether AI assistants mention you;
• the fixes we draft, whether you approved or rejected each one, and what we changed on your site;
• if you connect them, information from your Google account and your online store, described below.

None of this is about your customers. It describes your business’s public presence online.

To operate your agent, show you your conversations, book appointments, look up orders, create callback tickets, meter your usage against your plan, and support and improve the service. For SEO + AI Search: to show you your rankings and problems, draft fixes for your approval, publish the ones you approve, and send you a monthly report.

We do not sell personal information. We do not use one customer’s business content or call data to serve another customer.

This is the part most easily overlooked, and it is yours rather than ours.

Calls to your line are answered by an automated system and are transcribed and stored. Some places — including California and several other US states — require everyone on a call to be told when it is recorded, and rules on disclosing automated systems vary by jurisdiction. You are responsible for meeting the requirements that apply to your business and your callers, including any notice on your website or spoken at the start of a call.

We can configure your agent to say so at the beginning of every call. If you want that, ask us and we will set it up.

If you connect your Google account in Settings, we ask Google for two things: your Google account’s email address, so we can show you which account is connected, and read-only access to Google Search Console for your website.

We use Search Console for one purpose: checking whether Google has indexed the pages on your website and, if it hasn’t, why not. For each page we check, we keep Google’s answer: whether the page is indexed, when Google last crawled it, and any reason it gave for leaving it out. Problems appear as findings in your dashboard. We cannot change anything in your Search Console account.

Your Google access token is stored in a dedicated secrets vault, encrypted, and used only by our own systems to run those checks. Information we receive from Google is:

• never sold, and never used for advertising;
• never used to train AI models, never sent to one, and never used to generate images or any other content;
• never shared with anyone else, except as needed to run the features you see, to comply with the law, or as part of a merger or acquisition that we would tell you about;
• not read by our staff unless you ask us to, or unless it’s needed for security or to meet a legal obligation.

You can disconnect Google at any time in Settings. We revoke our access with Google and delete the stored token. You can also remove LumiLink from your Google account permissions. Findings we already produced stay in your dashboard until you ask us to delete them or close your account.

LumiLink’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use these providers to run the service. Each has access only to what it needs to do its job.

If you connect your online store, we hold credentials to it in our secrets vault. The agent only looks orders up; it never edits, cancels or refunds them. If you use SEO + AI Search and give us permission to publish, we change only your store’s pages and product descriptions, only after you approve each change, and we keep the previous version so it can be put back.

Conversations, transcripts and the records built from them are kept for as long as your account is active, because they are what your dashboard shows you. The same goes for SEO data: rankings, findings, drafts and reports.

If you cancel, tell us and we will delete your business data and your call records. We keep the minimum needed for legal and accounting purposes, such as invoices.

If one of your customers asks you to delete their information, contact us and we will remove it from your workspace.

Data is encrypted in transit and at rest by our infrastructure providers. Each customer’s data is isolated at the database level, so one workspace cannot read another’s. Store credentials are held in a dedicated secrets vault rather than in application configuration.

No system is perfectly secure. If a breach affects your data we will tell you.

Depending on where you live you may have the right to access, correct, export or delete your personal information, and to object to some processing. Email lumilinkhq@gmail.com and we will help.

If your request is about a call you made to a business that uses LumiLink, contact that business first — the data is theirs, and we act on their instructions.

We will update this page when the service changes. The date at the top shows when it last changed. See also our terms of service.