Privacy Policy

1. Information Collection

We collect personal information when you:

• Create a LuraFlow account
• Process payments through PayPal or Stripe
• Contact our support team
• Use our platform services

Types of information we collect:

• Name, email, phone number
• Billing address and payment information
• IP address, browser information (analytics)
• Service usage data and logs
• API keys and authentication tokens

2. How We Use Your Data

• Provide and improve our services
• Process payments and subscriptions
• Send service notifications and updates
• Comply with legal obligations
• Prevent fraud and security threats
• Provide customer support

3. Payment Processing

When you pay via PayPal or Stripe:

• Your payment details are sent directly to PayPal/Stripe (not stored by us)
• We receive your email and transaction ID
• We do NOT store your credit card details
• PayPal's and Stripe's privacy policies apply to their use of your data

4. Data Retention

• Account data: Retained while account is active + 30 days after deletion
• Payment records: Retained for 7 years (legal requirement)
• Analytics data: Retained for 12 months
• Support communications: Retained for 2 years

5. Security

We use industry-standard security measures:

• HTTPS encryption for all data in transit
• Bcrypt password hashing for stored passwords
• Regular security audits and penetration testing
• Secure API token management
• Access controls and authentication

6. Third Parties We Share With

• PayPal & Stripe: Payment processing
• Google Analytics: Anonymized usage analytics
• Resend: Transactional emails only
• DigitalOcean, Hetzner, Vultr: Cloud hosting infrastructure
• Legal authorities: If required by law

7. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Opt-out of non-essential communications
• Data portability (export your data)

To exercise these rights, email us at: privacy@luraflow.com

8. Cookies & Tracking

• Session cookies: Required for login persistence
• Analytics cookies: Anonymized usage tracking (Google Analytics)
• Authentication tokens: JWT tokens for API access

You can control cookies through your browser settings.

9. International Data Transfers

Your data may be processed and stored in countries other than your country of residence. By using LuraFlow, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

10. Changes to Privacy Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email. Your continued use of LuraFlow constitutes acceptance of the updated privacy policy.