Privacy Policy for LumoCade

Introduction

This Privacy Policy describes how LumoCade ('Company', 'we', 'our', or 'us') collects, uses, and shares information when you use our platform. It also explains your rights and choices. LumoCade is a game marketing platform where indie developers create countdown pages to collect email subscribers for their games and run marketing campaigns. We act as an intermediary; developers use our tools to collect and engage with their own audiences. By using our platform, you agree to this Privacy Policy.

1. Interpretation and Definitions

• Account: A unique account created by a developer to access and use our platform.
• Developer: An indie game developer who uses LumoCade to collect subscribers and run campaigns.
• Subscriber: An individual who subscribes to a developer's countdown page.
• Service: The LumoCade website and platform at https://lumocade.com.
• Service Providers: Third parties we use to deliver the platform, including Paystack (payments), Resend (email delivery), Clerk (authentication), and Supabase (database and storage).
• Personal Data: Any information relating to an identified or identifiable individual.

2. Types of Data We Collect

a. Account Data

• Name, email address, and login credentials.
• Authentication via Google or GitHub OAuth.

b. Game Marketing Data (collected for developers)

• Game information uploaded by developers (titles, descriptions, screenshots, release dates).
• Subscriber email addresses collected through countdown pages.
• Campaign performance: delivery rates, open/click tracking.
• Analytics data: page views, conversion rates, traffic sources.

c. Subscription and Billing Data

• Payment information processed by Paystack (we do not store card details).

d. Usage Data

• Device type, browser, IP address, session duration, and diagnostic data.

e. Cookies and Tracking

• Necessary cookies for authentication, security, and platform functionality.

f. Data Storage

All platform data (including account data, subscriber information, and analytics) is securely stored in Supabase-managed infrastructure hosted on AWS, region eu-west-2.

3. How We Use Data

We use data to:

• Provide, maintain, and improve our platform.
• Authenticate and manage developer accounts.
• Deliver email campaigns via Resend.
• Process payments via Paystack.
• Provide analytics to developers.
• Monitor and secure platform functionality.

4. Data Sharing

• With Developers: Subscriber data is shared only with the developer who collected it.
• With Service Providers: Paystack (billing), Resend (email), Clerk (authentication), Supabase (database and storage).
• For Legal Compliance: If required by law or court order.
• Business Transfers: If LumoCade is acquired or merged.

We do not sell personal data.

4.5 International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers.

5. Data Retention

• Analytics data: Retained for 2 years.
• Subscriber data: Retained until a subscriber unsubscribes.
• Developer account data: Retained until account deletion.
• Billing records: Retained as required by law.

6. User Rights

• Unsubscribe: Subscribers can opt out anytime via unsubscribe links in emails. Unsubscribe requests are processed immediately and take effect within 24 hours.
• Account Deletion: Developers may delete their accounts.
• Data Export: Developers may export their subscriber lists; subscribers may request a copy of their data.

To exercise these rights, contact us using the information in section 11.

7. Developer Responsibilities

Developers are the data controllers for their subscribers' information. Developers must:

• Use subscriber data only for permitted marketing.
• Provide clear privacy notices on their countdown pages.
• Comply with email marketing and privacy laws.

LumoCade acts as a data processor on behalf of developers.

8. Security

We use commercially reasonable measures to protect data. However, no method of transmission over the internet is 100% secure.

In the event of a data breach affecting subscriber data, we will notify affected developers within 72 hours.

8.5 GDPR Compliance

For users in the European Union, we act as a data processor when handling subscriber data collected by developers. Under GDPR, developers (as data controllers) are responsible for obtaining proper consent from EU subscribers and handling their data requests. As a processor, we:

• Process subscriber data only on developer instructions
• Implement appropriate security measures and handling
• Assist developers with data subject requests when required
• Notify developers of any data breaches affecting subscriber data

9. Children's Privacy

LumoCade is not directed to children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy and will notify users via email or in-platform notices.

Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, contact us: