Privacy Policy

CRM LUMI ("we", "us") is customer relationship management software operated by Kookaburra Digital Designs. This policy explains what information we collect when you use CRM LUMI at crm-lumi.lovable.app, how we use it, and the choices you have.

Information we collect

• Account information: your name, email address and password (stored hashed) or Google sign-in identity.
• Business profile: answers you give in the onboarding questionnaire about your business, customers and communication style.
• CRM records: contacts, leads, pipeline stages, notes, follow-ups and activities you or LUMI create.
• Google data (only if you connect it): Gmail messages, metadata and labels, and Google Calendar events and calendar lists.
• Technical data: basic logs needed to operate and secure the service.

How we use Google user data

When you choose to connect Gmail or Google Calendar, CRM LUMI requests these permissions:

• Gmail (read and modify): to scan your inbox, identify business leads, summarize conversations and organize messages for your CRM.
• Gmail (send): to send follow-up emails and replies only when you click Send.
• Google Calendar: to show your calendar inside CRM LUMI and to create, update and delete events for follow-ups you schedule, keeping both calendars in sync.
• Basic profile and email: to identify which Google account is connected.

CRM LUMI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google data only to provide and improve the user-facing features described above.
• We do not sell Google data or use it for advertising, including retargeting or interest-based ads.
• We do not allow humans to read your Google data unless you give explicit permission, it is necessary for security purposes or to comply with law, or the data is aggregated and anonymized for internal operations.
• We do not transfer Google data to third parties except as necessary to provide the service, for security, to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Google data to train general-purpose AI or machine-learning models. Email content may be processed by an AI model solely to produce results for your own account.

How we store and protect data

Data is stored in a managed, encrypted cloud database. Each workspace's records are isolated with database-level access rules. Google access credentials are encrypted and kept on our servers only — they are never exposed to your browser. Data is transmitted over HTTPS.

Sharing

We share data only with service providers that help us run CRM LUMI (cloud hosting, database and AI processing), under confidentiality obligations, and only as needed to operate the service. We do not sell personal information.

Retention and deletion

We keep your data while your account is active. You can disconnect Gmail or Google Calendar at any time from the Integrations page, which stops further access. You can also revoke access at myaccount.google.com/permissions. To delete your account and associated data, email us and we will delete it within 30 days.

Your rights

You may request access to, correction of, or deletion of your personal information by contacting us. We respond to requests within 30 days.

Children

CRM LUMI is a business tool and is not directed at children under 16.

Changes

We may update this policy. Material changes will be announced in the app or by email.

Contact

Questions about this policy: kookaburradigitaldesigns@gmail.com