This notice describes broad categories of information involved when visitors use the Lumiraxa website and voice experience.
Visitors may choose to provide information such as their name, business name, email address, phone number, questions, and details about a possible automation project. Lumiraxa may use that information to respond, arrange a consultation, understand the request, and operate the requested interaction.
Please do not submit confidential, regulated, or sensitive information through the public website unless Lumiraxa has provided an appropriate process for it.
The Talk to Mike experience requires browser microphone permission. When a visitor starts a conversation, voice audio and related interaction data may be transmitted to service providers that support speech processing, AI responses, call operation, and workflow execution.
Visitors can decline microphone permission or end the conversation. The public voice experience should not be used for emergencies or sensitive information.
If a visitor asks to schedule a meeting or requests follow-up, Lumiraxa may process the contact details, availability, conversation context, and appointment information needed to complete that request. That information may be sent to connected calendar, email, or workflow services.
When a business authorizes Google Calendar or Gmail, Lumiraxa uses the authorization only to provide the requested customer-facing scheduling, availability, appointment, and email-confirmation features. The Google Workspace data involved may include the authorized business account identity, calendar free/busy results, event details that Lumiraxa creates or updates for the approved workflow, and the sender and recipient details needed to send an approved confirmation.
Lumiraxa shares, transfers, or discloses this data only to Google APIs, Lumiraxa-controlled hosting and workflow systems, and, for an approved booking or message, the authorized business and the caller or attendee receiving its calendar invitation or confirmation email. Lumiraxa uses those systems only to check availability, create, update, or cancel an approved appointment, and send the corresponding email. Lumiraxa does not sell Google Workspace data, disclose it to advertising networks or data brokers, or share raw, aggregated, anonymized, or derived Google Workspace data with third-party AI providers for training or improving generalized or foundational AI or machine-learning models.
OAuth access and refresh tokens are encrypted and retained only while the business keeps the connection active. Disconnecting permanently replaces Lumiraxa's stored token material and requests revocation from Google. If Google does not accept that revocation request, Lumiraxa reports the failure instead of presenting it as complete and directs the authorized business to remove the grant from its Google Account. Lumiraxa retains only the bounded connection, delivery, event-receipt, and audit evidence needed to operate, secure, troubleshoot, and document the approved workflow; it does not copy unrelated calendar entries or Gmail messages.
Calendar and Gmail access is requested separately, uses the narrow scopes shown during authorization, and can be disconnected by the authorized business. Lumiraxa's use of data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Lumiraxa relies on service providers for hosting, networking, workflow automation, calendars, email, databases, monitoring, voice, telephony, and AI features. For Google Workspace features, the recipients are limited to Google, Lumiraxa-controlled hosting and workflow systems, and the business or caller involved in the authorized appointment or email. Other providers process only the information needed for the feature they support, according to their own terms and Lumiraxa's arrangements with them.
Mike and other Lumiraxa AI experiences generate responses using automated systems. Responses may be incomplete, inaccurate, or inappropriate for a visitor's circumstances. Visitors should verify important information and use human contact channels when needed.
Lumiraxa intends to use reasonable operational and technical safeguards appropriate to the service as it develops. No website, transmission, storage system, or third-party service can be guaranteed secure. Visitors should consider this limitation before submitting information.
Information may be retained while needed to respond to a request, operate and improve the service, troubleshoot issues, maintain appropriate records, or meet applicable obligations after those obligations are reviewed. Retention practices may vary by system and provider.
Google OAuth token material is deleted from Lumiraxa's active credential store when the authorized business disconnects. Google-derived workflow evidence is removed or de-identified when it is no longer needed for the connected service, security, dispute, or legal-record purpose for which it was retained. A deletion request also triggers review of the related active credentials and retained workflow evidence across Lumiraxa-controlled systems.
Visitors may contact Lumiraxa to ask about access, correction, or deletion of information they submitted. Lumiraxa will review requests based on the information available, applicable operational constraints, and qualified guidance. No guaranteed deletion timeline is promised in this notice.
This notice may change as Lumiraxa's website, services, providers, and operating practices develop. The current version will be posted on this page.
Questions or requests about this privacy notice can be sent to [email protected].