Privacy Policy

Last updated: July 21, 2026

Lumo respects your privacy. This policy explains what personal data we collect, why we collect it, and the rights you have over it.

Who we are

Lumo ("we", "us") is operated by Santiago Vargas, a Miami/Madrid AI studio (an entity currently in formation, doing business as Lumo), and is the controller of personal data collected through this website. For privacy enquiries, contact us at [email protected].

What we collect

We collect: (a) information you give us directly, such as your name, email address, phone number, and any messages you send through the live demos, the call-me and missed-call calculator forms, or by email; (b) demo and call interaction data: when you use the live voice demo or a deployed AI receptionist, your call audio is recorded and a transcript is generated to run and improve the service; when you use the WhatsApp or web chat demo, your messages are processed to generate replies; when you submit the calculator or a call-me/contact form, your inputs and contact details are stored in our lead database so we can respond, prepare your audit, or notify our team by email; (c) technical and advertising data such as your IP address, browser type, pages visited, and (on our /ads/ landing pages) ad click and conversion data collected via Google Analytics and the Meta Pixel/Conversions API, as described in our Cookie Policy.

Legal basis (EU/EEA visitors)

We process your data on the legal basis of (i) performance of a contract or pre-contractual steps (handling your enquiry, booking, or audit request), (ii) your consent (optional third-party features, and analytics/advertising pixels), or (iii) our legitimate interest in operating, securing, and improving the website and Services. You can withdraw consent at any time via the "Cookie preferences" link in the footer.

Third-party services

We use the following third-party processors who may receive your data:

• Cloudflare — hosts this site, runs the proxy behind our live demos, and stores lead/enquiry data submitted through our forms (name, phone, email); processes IP addresses and request logs.
• Google (Analytics/GA4) — measures site usage across all pages using your IP address, device, and browsing behavior on this site.
• Meta (Pixel and Conversions API) — on our /ads/ advertising landing pages, measures ad performance and conversions; may receive your IP address, browser data, and events such as call clicks or bookings, matched to your Meta account where applicable.
• OpenAI — generates the replies in the chat demo; receives the messages you type (relayed through our Cloudflare proxy).
• Retell AI — powers our live voice demo and deployed AI receptionists; processes your call audio, records the call, and generates transcripts.
• Twilio — provides the telephony infrastructure (phone numbers and call/SMS routing) that carries calls and text messages to and from our AI agents.
• Cal.com — powers our booking calendar; processes the name, email, and time details you provide when scheduling a call.
• Resend — sends transactional email notifications on our behalf (e.g., alerting our team to a new lead or confirming your booking).
• Leadsy (visitor-identification pixel) — with your marketing consent, may identify you or your company from your visit for sales follow-up purposes.
• jsDelivr — a content-delivery network that serves some of this site's script files; sees your IP address when those files load.
• Google Workspace — handles our email, so any email you send us is processed by Google.

Each of these may process your IP address; their respective privacy policies apply.

Call recording

Calls to our live voice demo and to any deployed AI receptionist are recorded and transcribed via Retell AI and our telephony provider (Twilio) to deliver the service, for quality review, and to improve the agent. If you continue a call after being notified of recording, or if applicable law deems continuing the call to be consent, you consent to that recording. Where required by law, we provide notice at the start of the call. Do not proceed with a call if you do not consent to being recorded.

How long we keep data

Enquiries and audit submissions are kept for up to 24 months unless a longer period is required by law. Call recordings and transcripts from deployed AI receptionists are retained for the duration of the client engagement plus a reasonable period for support and disputes, per the client's service agreement. Live demo conversations (voice and chat) are processed to deliver the demo; the chat session identifier lives only in your own browser storage. Hosting logs are retained for a short period by our hosting provider.

Your rights

You may request access to, correction of, or deletion of your personal data; restrict or object to processing; request portability; and lodge a complaint with your local data-protection authority. California residents have additional rights under CCPA/CPRA, including the right to know what personal information is collected, to request deletion, and to opt out of the sale or sharing of personal information (including for cross-context behavioral advertising). We do not sell personal information for money; where required by CCPA/CPRA we treat advertising-pixel sharing as an opt-out-able "share" — use the "Cookie preferences" link in the footer to opt out. Email [email protected] to exercise any of these rights.

International transfers

Some of our service providers are based in the United States. Where we transfer EU/EEA data outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

Children

This service is not directed at children under 18 and we do not knowingly collect their personal data.

Changes

We may update this policy from time to time. Material changes will be notified on this page with a revised "Last updated" date.

Contact

Privacy questions: [email protected].