Privacy policy · updated October 4, 2026
Privacy policy
This policy explains what information Lume Autonoma (“we”) collects through lumeautonoma.store and its client dashboard, and what we do with it. Questions: lumeautonoma@gmail.com.
The website
- No cookies, no analytics, no advertising trackers. The page, its fonts, images and videos all come from this site; viewing it sends nothing to Google, social networks or ad companies.
- Your browser remembers, for the current tab only, that Nova has already greeted you, so she doesn’t greet you again on a reload. That note stays on your device.
- The contact form sends nothing to us by itself. It opens WhatsApp or your email app with your message filled in. If you then send it, it reaches us through WhatsApp (run by Meta under its own terms) or by email, and we use it only to reply and to work with you.
The client dashboard
The dashboard at /account/ lets our clients see the invoices we send them.
- Sign in with Google. When you sign in, Google gives us your Google account ID, email address, name and profile picture link. We keep these, with the times you signed in, to show you the invoices addressed to your email.
- One cookie keeps you signed in for up to 30 days, or until you sign out. We store only a one-way fingerprint of it, never the cookie itself.
- Invoices. To bill you we keep your name, email address, company, billing address, country and state or province, and the invoices we send you: items, amounts, taxes, dates and whether they are paid. We email invoices from our own Gmail account and keep a record of each send.
Google user data
For sign-in we ask Google only for your basic profile and email address, and use them only to sign you in and show you your invoices. We do not sell this data, use it for advertising, or use it to train AI models. Separately, our own Gmail account is connected to the dashboard with permission to send email only, so invoices can be emailed to you.
Lume Autonoma’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who else handles it
- Cloudflare hosts the site and the dashboard’s database, and handles the technical details every web request carries, such as your IP address and browser type, to deliver and protect the site.
- Google provides sign-in, and the Gmail account invoices are sent from.
We do not sell or share your personal information for advertising, and we do not sell it to anyone.
How long we keep it
Sign-in sessions end after 30 days or when you sign out. Account and invoice records are kept while we work together and for as long as the law requires us to keep business and tax records.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing lumeautonoma@gmail.com. We answer every request, wherever you live. If the law requires us to keep an invoice, we keep it but use it for nothing else.
Children
This site and the dashboard are for businesses. They are not meant for children under 13, and we do not knowingly collect their information.
Changes
If this policy changes, we update it here and change the date at the top.