GDPR & Your Data Rights

LumaiScope, Inc. ("LumaiScope", "we", "us") builds product-research tools for Amazon FBA sellers and dropshippers. This page explains how we approach the EU and UK General Data Protection Regulation (GDPR), the legal grounds we rely on to process your data, and the rights you have over it. It supplements our Privacy Policy.

Our commitment is simple: we collect what we need to run the service you signed up for, we are honest about where your data goes, and we make it straightforward for you to access or remove it.

Under the GDPR we must have a lawful basis for processing your personal data. Depending on the activity, we rely on:

• Performance of a contract — to create and operate your account, run product validations and other tools you request, process your subscription, and provide support. Without this processing we cannot deliver the service.
• Legitimate interests — to keep the platform secure, prevent fraud and abuse, debug and improve the product, and understand aggregate usage. We weigh these interests against your rights and use the minimum data needed.
• Consent — where we ask for it specifically, such as optional product communications. You can withdraw consent at any time without affecting the lawfulness of processing done beforehand.
• Legal obligation — where we must retain certain records, for example for tax or accounting purposes.

If you are in the EU, UK, or another region with comparable laws, you have the following rights over your personal data:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct data that is inaccurate or incomplete.
• Erasure — ask us to delete your personal data (the "right to be forgotten"), subject to records we must keep by law.
• Restriction — ask us to pause processing while a concern is resolved.
• Portability — receive your data in a structured, machine-readable format and have it transferred where technically feasible.
• Objection — object to processing we carry out on the basis of legitimate interests.
• Withdraw consent — withdraw any consent you previously gave, at any time.

Email support@lumaiscope.com with your request and the email address associated with your account. We may need to verify your identity before acting, to protect your data from someone impersonating you.

If you believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority.

LumaiScope operates from the United States, and some of our processors are based there too. When we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) to ensure your data keeps an equivalent level of protection.

We use a small set of trusted service providers (subprocessors) to run LumaiScope. Two are worth calling out:

• Payments — Stripe processes your billing details and handles card data directly. We do not store full card numbers on our servers.
• AI processing — when you ask our AI features to analyze product data, the relevant inputs are processed in real time by our AI subprocessor, Anthropic, to generate a response. Your submitted data is not used to train AI models, and the AI narrates measured signals — it does not invent numbers.

A current list of the sources and providers we use is on our Data Sources & Subprocessors page.

If you are a California resident, you have rights to know what personal information we collect, to request access or deletion, and to be free from discrimination for exercising those rights. You can make a request the same way — by emailing support@lumaiscope.com.

For the complete details of what we collect and how we use it, see our Privacy Policy. For the providers and data sources behind the platform, see Data Sources.