1. Your sign-in
You sign in with an emailed link. Google Cloud Identity Platform verifies the address; Lumis keeps a keyed hash of it to find your workspace again, not the address itself. There is no password, so there is no password to store.
2. Connected accounts
When you connect an account such as Google, the access token stays in an encrypted credential vault. Lumis stores only a reference to the connection, scoped to you and your workspace. Reads use the narrowest permission the provider offers; today that is read-only contacts, calendar and tasks.
3. What is stored from those accounts
Contacts, calendar events and tasks are copied into your workspace so the app can show them and the assistant can cite them. Each record keeps where it came from and when. Records belong to your workspace and are never visible to another one.
4. What we never do
We do not train models on your data, your prompts, your documents or anything read from your accounts. We do not sell or share it. Logs and traces are content-free: they record that something happened, not what it said.
Pages, the public ones included, send anonymous timings: how long a page took to load, which of a few marked buttons was pressed, and any error, so we can find faults. They set no cookie, read no browser storage and leave no identifier on your device beyond a single page view, which ends when you move to another page or after ten minutes. An error report names only the kind of error and the page's route, never its message. Links are cut to their path and visible text is never included. When you are signed in, your workspace and user identifiers are added on our server. We keep a sampled subset of these timings in our trace store for its default retention period. Like every request to our site, each page and timing request is also recorded in our server request logs with your IP address, your browser's user agent and the address requested, next to the same trace id, and those logs are kept for the platform's log retention period. Your IP address is also held briefly in memory to limit abuse of this route.
5. Your rights
From Usage & billing, Privacy inside your workspace you can request access to, an export of, or the deletion of your personal data. Deletion removes what was stored, subject to legal retention, and disconnecting an account stops new data arriving.