Legal
Privacy Policy
Effective July 21, 2026
This policy explains how LumenQR processes information when you use lumenqr.com and its authenticated workspace.
What we collect
Account identifiers and profile details needed to run your account; workspace content you create; billing customer and subscription identifiers; and operational logs needed for security and reliability. Scan analytics use salted hashes instead of storing raw visitor IP addresses.
How we use data
We use data to provide dynamic QR links, authenticate users, enforce workspace access, process subscriptions, measure privacy-safe activity, prevent abuse, support customers, and meet legal obligations.
Service providers
LumenQR uses Clerk for authentication, Convex for application data, Stripe for billing, Vercel for hosting and analytics, and configured email providers for account and service messages. Each provider processes data under its own security and privacy terms.
Retention and security
We retain account and workspace records while your account is active and as required for legitimate business, security, tax, and legal purposes. We use encryption in transit, access controls, signed webhooks, secret rotation, and tenant authorization, but no online service can promise absolute security.
Your choices
You may update account and workspace details, cancel a subscription through the billing portal, or request access, correction, export, or deletion by contacting privacy@lumenqr.com. Some financial and security records may need to be retained.
Contact
Privacy questions can be sent to privacy@lumenqr.com.