Privacy
Last updated 2026-08-26
Who we are
Luma Legal provides software to law firms. This policy covers the marketing site at luma.legal and the Luma application.
What we collect
On this site: your name, email, firm and practice area if you request a demo, plus standard server logs. In the application: your account details, the documents your firm uploads, and a record of actions taken in the product.
Client documents
Documents your firm uploads are processed to provide the service — reading, extracting facts, generating drafts. They are isolated to your firm and are not used to train models, ours or our providers’.
Legal basis and role
For firm and client data inside the application, your firm is the controller and we are the processor, acting on your instructions under a data processing agreement.
Sharing
We use infrastructure and model providers to run the service. They process data on our behalf under contract and may not use it for their own purposes. We do not sell personal information.
Retention
Application data is retained while your account is active. After cancellation it remains available for export for 30 days. Deleting a document removes what was derived from it, including extracted facts and search embeddings.
Your rights
Depending on where you are, you may request access, correction, deletion or a copy of your personal data. Email hello@luma.legal. Where your firm is the controller, we will direct the request to them.
Security
Encryption in transit and at rest, tenant isolation, role and per-user access control, and audit logging. See the Security page for detail.
Cookies
This site uses only what is required to serve the pages. No advertising or cross-site tracking cookies.
Changes
We will post material changes here and, for application changes, notify account administrators by email.
Contact
hello@luma.legal