Privacy Policy

LuminScript is a service that helps you author a printed book with the help of AI, and arranges for it to be printed and delivered. We are the controller of the personal information described here.

In this document, “LuminScript”, “we”, “us” and “our” refer to [COMPANY LEGAL NAME] (registered address: [REGISTERED ADDRESS]), the company that will operate the LuminScript service. Questions can be sent to [DPO/CONTACT EMAIL].

We collect only what we need to create and deliver your book:

• Account information — the email address you use to sign in, managed through our authentication provider (Supabase).
• Your book content — everything you create or upload to build your book: written answers and drafts, uploaded photographs, documents, and photographs of handwriting such as recipe cards, letters or diary pages.
• Sensitive details within your content — because you decide what goes into your book, your content may include personal or sensitive information about you or others (for example health, religious or family details). We treat everything you upload as confidential.
• Shipping and delivery details — when you order a printed book, the recipient name and postal address needed to print and deliver it.
• Payment information — when purchases go live, payments will be handled by Stripe; we do not store full card numbers on our systems.
• Usage and device data — privacy-friendly analytics (via PostHog) about how the site is used, collected only after you accept analytics cookies.

We rely on the following legal bases (as required by UK GDPR and equivalent laws):

• To provide the service — creating, editing, compiling, printing and delivering your book (performance of our contract with you).
• To process your book with AI — sending your content to our AI providers to draft, structure and design it (performance of our contract).
• To take payment and fulfil orders — processing purchases and arranging printing and shipping (performance of our contract).
• To keep the service secure and working — preventing abuse and diagnosing problems (our legitimate interests).
• To understand and improve the product — analytics, only where you have given consent (consent).
• To meet legal obligations — tax, accounting and responding to lawful requests (legal obligation).

To turn what you give us into a finished book, we send your content — your answers, and where relevant your uploaded photographs, documents and handwriting images — to trusted AI providers. Text is processed by Anthropic (Claude). When illustrated editions are enabled, images may also be processed by image-generation providers.

We use providers who state that content sent through their business APIs is not used to train their models — for example, Anthropic states that it does not train its models on inputs or outputs sent through its commercial API. We rely on these provider commitments. We do not sell your content and we do not use it to train third-party models.

AI is assistive. You review and approve your book before anything is printed, and you remain the author of the finished work.

We share your information only with the providers who help us run the service:

• Print and fulfilment partner (Lulu) — to print and ship your physical book, we share the book file and the delivery name and address.
• Payment processor (Stripe) — to take payment securely when purchases are live.
• AI providers (Anthropic, and image providers when enabled) — to produce your book, as described above.
• Analytics provider (PostHog) — usage data, and only after you accept analytics cookies.
• Infrastructure providers — hosting, database and storage providers who process data on our behalf under contract.
• Authorities or an acquirer — where required by law, or as part of a business sale, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

LuminScript serves customers in the United States, the United Kingdom and Australia, and some of our providers are based in the United States. Where your data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses and the equivalent protections required by UK, EU and Australian law.

We keep your account and book content for as long as your account is active, so you can return to your projects. If you ask us to delete your account, we will erase your content within 30 days, except where we must keep limited records (for example order and tax records) for as long as the law requires. Backups are cycled out on a rolling basis.

Depending on where you live, you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct information that is wrong or incomplete.
• Erasure — ask us to delete your account and content (the “right to be forgotten”).
• Portability — ask for your data in a portable format.
• Objection and restriction — object to, or ask us to limit, certain processing.
• Withdraw consent — turn analytics off at any time using Cookie settings.

If you are in the United States (including California), you have the right to know what personal information we collect, to request its deletion, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information, and we will never discriminate against you for exercising your rights.

If you are in Australia, the Australian Privacy Principles give you the right to access and correct your personal information and to complain about how it is handled.

To exercise any of these rights, use our data request page or contact [DPO/CONTACT EMAIL]. You can also complain to your data-protection regulator — the ICO (UK), your state authority (US) or the OAIC (Australia).

We use a small number of essential cookies to run the site and, only with your consent, privacy-friendly analytics. You can accept or decline analytics at any time. See our Cookie Policy for details.

LuminScript is not intended for children. You must be at least 16 years old to create an account. A book may include photographs or stories about children, but only an adult may hold the account and provide that content.

You can ask us to delete your account and everything in it at any time from our data request page. We action verified deletion requests within 30 days.

We will update this policy as LuminScript develops and before we launch commercially. When we make material changes we will update the effective date and, where appropriate, let you know.

For any privacy question, or to exercise your rights, contact [DPO/CONTACT EMAIL] or write to us at [REGISTERED ADDRESS].