How Lumi FM handles information

1. Scope

This Privacy Policy applies to the Lumi FM website, including the home page, playback session pages, signup and login pages, contact page, APIs that power the listening experience, and embedded abuse-prevention services such as Cloudflare Turnstile.

2. Information we collect

A. Information you choose to provide

• If you contact us, we may receive your email address and any information you include in your message.
• If you create an account or request password recovery, we may collect the registration, login, and password-reset details you submit at that time.

B. Information stored in your browser for product operation

• A stable anonymous listener ID used to keep the listening experience coherent across visits.
• A returning-listener flag used to personalize DJ greetings.
• Session configuration data such as selected scene, topic, talk level, and initial queue state.

C. Information sent to our servers when you start or continue a session

• Your selected DJ and scene configuration.
• Your timezone and whether the browser appears to be returning.
• A session ID and related playback state needed to keep the stream moving.
• Anonymous ownership data used for session continuity and operational analytics.

D. Security and anti-abuse data

• The signup page uses Cloudflare Turnstile. When that feature loads, Cloudflare may collect device, browser, IP, and interaction information according to its own policies.
• Server logs and abuse-prevention records may include IP-related request metadata and verification status.

E. Provider-operation data

• When enabled by configuration, Lumi FM may send limited prompt or synthesis data to AI and infrastructure providers that power DJ copy, DJ voice, music generation, storage, and delivery.

3. Important note about the current signup and login pages

The signup and login pages now create and authenticate Lumi FM accounts through our backend. Signup requests include a Cloudflare Turnstile token for abuse prevention, passwords are processed server-side before secure storage, and successful authentication creates an HttpOnly session cookie in your browser.

In practical terms, this means the information you type into those pages may be validated locally in the browser for immediate guidance and then validated again on our servers before an account or login session is accepted.

4. How we use information

• To create and maintain listening sessions.
• To personalize DJ intros, scene labels, and session flow.
• To deliver music, DJ audio, and related playback responses.
• To prevent spam, bots, abuse, and security misuse.
• To troubleshoot, monitor performance, and improve product quality.
• To evaluate music-generation operations, job completion, and per-program cost or reliability metrics.
• To respond to messages you send us.

5. When we share information

We may share information in the following circumstances:

• With vendors and infrastructure providers that help operate Lumi FM.
• With anti-abuse providers such as Cloudflare Turnstile.
• With AI or audio-processing providers when those features are enabled.
• When required by law, legal process, or to protect rights, safety, and security.
• In connection with a merger, financing, sale, or transfer of all or part of the business.

We do not currently run third-party advertising on the public Lumi FM site, and we do not currently state that we sell personal information.

6. Third-party processors and embedded services

Depending on configuration, Lumi FM may use third-party providers such as Cloudflare Turnstile, OpenAI, ElevenLabs, Cloudflare R2, Suno-compatible providers, and Udio-compatible providers. These services may process data necessary to deliver their part of the product.

Their handling of data is governed by their own privacy notices and terms. You should review those providers if you want more detail about their practices.

7. Retention

We retain information for as long as reasonably necessary to operate the service, maintain security, support debugging, evaluate performance, satisfy legal obligations, or protect against abuse.

Some session and generation records may be stored in temporary or operational server-side storage. Browser storage items may remain on your device until you clear them or your browser removes them.

8. Security

We use reasonable technical and organizational measures to help protect information, but no system is completely secure. You should not send highly sensitive information to Lumi FM unless it is clearly required by a live feature and appropriate safeguards are in place.

9. Your choices and rights

• You can clear local browser storage through your browser settings.
• You can stop using the site at any time.
• You can contact us to request access, correction, or deletion where applicable.
• If local law gives you specific privacy rights, we will handle requests in line with applicable legal requirements.

To make a privacy request, contact support@lumifm.com.

10. Children's privacy

Lumi FM is not intended for children under 13, and we do not knowingly seek to collect personal information from children under 13 through the public website.

11. International processing

Lumi FM and its service providers may process information in countries other than your own. By using the service, you understand that information may be transferred to and processed in jurisdictions with different privacy laws than the laws of your home country.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the effective date at the top of the page.

13. Contact

Questions about this Privacy Policy can be sent to support@lumifm.com.

You should also review our Terms of Use for the rules that apply to use of Lumi FM.