Lumiosa

Privacy Policy

Last updated: May 12, 2026

Lumiosa is a service operated by MANIGEN LLC ("we," "our," or "us"). We operate lumiosa.app, a platform that helps creators manage social media messages, comments, and content. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

1. Information We Collect

Information you provide

  • Name and email address when creating an account
  • Workspace name and configuration settings
  • Knowledge base content, brand voice settings, and AI instructions you configure

Information from connected platforms

When you connect your Instagram or Facebook account, we receive the following via Meta's APIs, subject to the permissions you grant:

  • Your Facebook Page name, ID, and access token
  • Your Instagram Business account name, ID, and linked access token
  • Incoming messages and comments sent to your connected accounts
  • Basic profile information of people who message your accounts (name, profile ID)

We do not collect data from personal Facebook profiles or personal Instagram accounts. Lumiosa only connects to Instagram Business or Creator accounts and Facebook Pages.

Usage information

  • Log data including IP address, browser type, and pages visited
  • Feature usage patterns to improve the service

2. How We Use Your Information

  • To operate and deliver the Lumiosa service
  • To display your incoming messages and comments in your Lumiosa inbox
  • To generate AI-drafted replies using your configured knowledge base and brand voice
  • To send messages and replies on your behalf when you explicitly direct us to
  • To provide activity logs and analytics within your workspace
  • To send transactional emails related to your account
  • To detect and prevent abuse or fraudulent activity

We do not use your social media data to train general AI models. AI reply generation uses only the knowledge base and instructions you configure for your own workspace.

3. Data Sharing and Disclosure

We do not sell your personal information. We share data only in these circumstances:

  • Service providers: We use third-party providers to operate Lumiosa, including cloud hosting (Vercel), database services (Supabase), AI inference (Anthropic), background job processing (Inngest), and transactional email (Resend). These providers process data only as needed to deliver the service and are bound by confidentiality obligations.
  • Legal requirements: We may disclose information if required by law, court order, or governmental authority.
  • Business transfers: If Lumiosa is acquired or merges with another company, your data may be transferred as part of that transaction.

4. Meta Platform Data

Data obtained through Meta's APIs (Facebook and Instagram) is used solely to provide features you have requested — displaying your messages, drafting replies, and sending messages you approve. We do not use Meta platform data for advertising or to build profiles beyond what is necessary to operate your Lumiosa workspace.

We comply with Meta's Platform Terms and Developer Policies. Access tokens are stored encrypted and are used only to make authorized API calls on your behalf.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and social account connections within 30 days, except where retention is required by law.

To request deletion of your data associated with Facebook or Instagram, use our data deletion request page or contact us at privacy@lumiosa.app.

6. Data Security

We use industry-standard security measures including encrypted storage of access tokens, HTTPS for all data in transit, and access controls limiting who can access your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect your Instagram or Facebook account at any time via Settings → Connections

To exercise these rights, contact us at privacy@lumiosa.app.

8. Children's Privacy

Lumiosa is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of Lumiosa after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or data requests, contact MANIGEN LLC at: privacy@lumiosa.app