Privacy Policy
How we collect, use, and protect your information.
Effective Date: February 3, 2026
Last Updated: February 5, 2026
Catmo Marketing ("we," "us," or "our") provides digital marketing services and software products, including the LUME brand development platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website, platforms, and services.
We are committed to protecting your privacy and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.
1. Information We Collect
Contact Information
When you contact us or request our services, we collect:
- Your name
- Email address
- Phone number (if provided)
- Company name and role
LUME Account Information
When you create a LUME account, we collect:
- Email address (used for authentication)
- Display name or artist name (provided during onboarding)
- Authentication data from third-party sign-in providers (Google, Microsoft) if used
- Account preferences and settings
LUME Session and Conversation Data
When you use LUME's brand development sessions, we collect:
- Your responses during AI-guided conversations
- Session progress and completion status
- Generated brand outputs (documents, strategies, visual identities)
- Session metadata (timestamps, session type, progress percentage)
Business Information (Agency Clients)
When you become a marketing agency client, we may collect:
- Business goals and marketing objectives
- Advertising account access (with your permission)
- Website analytics data
- Campaign performance data
Website and Platform Usage Data
We automatically collect:
- Pages visited on our website and platforms
- Device type and browser information
- Referring website
- General location (city/country level)
- Error reports and performance data (via Sentry)
Payment Information
Payment is processed through secure payment providers. For LUME subscriptions, payments are processed by Paddle (Paddle.com Market Limited), who acts as the Merchant of Record. For agency services, payments are processed via bank transfer or credit card through secure processors. We do not store your credit card details.
2. How We Use Your Information
Provide Our Services
- Deliver digital marketing services and manage advertising campaigns
- Operate the LUME platform, including AI-powered brand development sessions
- Process your inputs through AI systems to generate personalised brand outputs
- Maintain your session history so you can return and continue progress
- Provide reporting, analytics, and generated documents
- Communicate about your account and services
Improve Our Services
- Analyse website and platform usage to improve user experience
- Monitor errors and performance to maintain platform reliability
- Develop better AI conversation flows and outputs
- Use anonymised, aggregated data to improve service quality
Communicate With You
- Respond to inquiries and support requests
- Send account-related communications
- Notify you of important service or platform updates
We do not send unsolicited marketing emails. You will only hear from us about your account, services, or if you have explicitly opted in to updates.
3. AI Data Processing
LUME uses artificial intelligence to provide its brand development service. Here is how your data is processed by AI systems:
How AI Processing Works
- Your conversation responses are sent to Anthropic's Claude API to generate contextual, personalised guidance and brand outputs
- Each conversation includes your session history to maintain context
- AI-generated outputs are stored in your account for your continued access
What We Do Not Do
- We do not use your personal conversation data to train AI models
- We do not share your individual session data with other users
- We do not sell your data to any third party
Image Generation
LUME may use Fal.ai to generate images as part of the brand development process. Text prompts (not your personal information) are sent to generate visual assets. Generated images are stored for your access.
4. Third-Party Services
We use trusted third-party services to operate our business and platforms. These providers may process your data as described below:
| Service | Purpose | Data Processed |
|---|---|---|
| Supabase | LUME authentication and database | Account data, session data, conversation history |
| Anthropic (Claude) | AI conversation engine for LUME | Conversation messages (processed, not stored by Anthropic for training) |
| Paddle | LUME payment processing (Merchant of Record) | Payment and billing information |
| Fal.ai | Image generation for LUME | Text prompts for image generation |
| OpenAI | Voice features (speech-to-text and text-to-speech) for LUME | Audio recordings (for transcription), text (for speech synthesis) |
| Sentry | Error monitoring and performance tracking | Error reports, session context, device information |
| Google Analytics | Website analytics | Browsing behaviour, device info, location |
| Vercel | Website and platform hosting | Server logs, request data |
Each provider has their own privacy policy. By using our services, you acknowledge that your data may be processed by these providers.
5. Data Storage and Transfers
Your data is stored on servers operated by our service providers, which may be located outside Canada (including the United States and the European Union).
When your data is transferred outside Canada, we ensure it receives protection comparable to Canadian standards through:
- Contractual agreements with our providers
- Selecting providers with strong privacy practices and security certifications
- Using encryption for data in transit and at rest
LUME Data Storage
LUME user data is stored in Supabase (PostgreSQL database) with:
- Row-level security ensuring users can only access their own data
- Encrypted connections between the application and database
- Regular automated backups
6. Data Retention
LUME Accounts
- While your account is active, we retain all session data and generated outputs
- After account deletion or subscription cancellation, session data is retained for 90 days before deletion
- You may request immediate deletion of your data at any time
Agency Client Relationships
While we have an active client relationship, we retain your data to provide services and maintain campaign history.
After Services End
When our engagement ends:
- We retain records as required for legal and accounting purposes (typically 7 years)
- Campaign data is retained per your agreement terms
- You may request deletion of personal data at any time
7. Your Privacy Rights
Under PIPEDA and Canadian privacy law, you have the right to:
Access Your Data
Request a copy of the personal information we hold about you, including your LUME session data and generated outputs.
Correct Your Data
Ask us to fix inaccurate or incomplete information.
Delete Your Data
Request deletion of your personal information, including your LUME account and all associated session data (subject to legal retention requirements).
Export Your Data
Request a copy of your LUME brand outputs and session data in a portable format.
Withdraw Consent
You can withdraw consent for data processing, though this may affect our ability to provide services. For LUME, withdrawing consent for AI processing means the platform cannot function.
To exercise any of these rights, contact us through our contact form. We will respond within 30 days.
8. Security Measures
We take reasonable steps to protect your information:
- Encryption: All data transmitted uses HTTPS encryption
- Access Controls: Limited access to client and user information, with row-level security on LUME data
- Authentication: LUME supports secure authentication including OAuth providers
- Error Monitoring: Sentry tracks errors without exposing sensitive user data
- Secure Providers: We use reputable, security-focused service providers
- Payment Security: We never store credit card details. LUME payments are handled entirely by Paddle
No system is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.
9. Cookies and Tracking
Our website and platforms use cookies to:
- Ensure the website and LUME platform function correctly
- Maintain your authentication session on LUME
- Understand how visitors use our site
- Improve user experience
We use analytics cookies to understand website traffic. LUME uses essential cookies for authentication and session management, which are required for the platform to work.
You can disable non-essential cookies in your browser settings, though some features may not work properly.
We do not sell your data to advertisers.
10. Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through our website and platforms.
The "Last Updated" date at the top shows when this policy was last revised.
12. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, please use our contact form.
Company: Catmo Marketing
Location: Calgary, Alberta, Canada
Website: catmomedia.ca
LUME Platform: lume-v2-five.vercel.app
For complaints about our privacy practices, you may also contact the Office of the Privacy Commissioner of Canada.
By using our website, platforms, and services, you acknowledge that you have read and understood this Privacy Policy.