Privacy Policy

Last updated: 26 September 2026

This policy explains what Lumiox collects when you visit our website or use our captioning service, why we collect it, who processes it on our behalf, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

01. Who we are

Lumiox is operated by [Registered business name], [Registered business address, City, State, PIN], India ("Lumiox", "we", "us"). We decide how and why your personal data is processed, which makes us the data fiduciary for it.

02. Information we collect

We collect only what we need to run the service:

• Account details: your name and email address when you sign up or contact us.
• Project data: the transcripts, caption edits, style choices and language settings you save in your account.
• Usage data: the transcription minutes you use, so we can apply your plan's limits.
• Payment records: plan, amount, date and the payment ID from our payment processor. We never see or store your full card, UPI or bank details.
• Device and analytics data: browser type, device type, approximate location at country or city level, and the pages you visit on our website.
• Messages you send us through the contact form or by email.

03. Your video and audio

Your video file does not leave your device. Captions are rendered and burned in locally in your browser.

To create a transcript, only the audio track of your clip is sent to our speech-recognition provider. The audio is deleted once the transcript is returned to you. The transcript itself is stored in your account until you delete the project or close your account.

We do not publish, sell or share your audio, video or transcripts with anyone other than the processors listed below.

04. How we use your information

• To create your account and sign you in.
• To transcribe your audio and save your caption projects.
• To process payments, renew subscriptions and send invoices.
• To answer support requests and resolve billing issues.
• To keep the service secure and prevent fraud or abuse.
• To understand which parts of the website and product are used, so we can improve them.
• To send product updates and newsletters, only if you opt in. You can unsubscribe from any email.

05. Who we share it with

We do not sell your personal data. We share it only with service providers who process it for us, under contract, and only as far as they need to:

• Speech-recognition provider — transcribes the audio track of your clips.
• Cloud hosting and database providers — run the website and store your account and project data.
• Cashfree — processes payments and subscription mandates.
• Razorpay — processes payments and subscription mandates.
• Email delivery provider — sends account, billing and support emails.
• Analytics provider — measures website visits in aggregate.

We may also disclose information where the law requires it, for example in response to a valid order from a court or government authority.

06. Cookies

We use essential cookies to keep you signed in and to remember your settings. We also use analytics cookies to count visits and see how pages are used. You can block or delete cookies in your browser settings; the website will still work, but you may need to sign in again.

07. How long we keep it

• Audio: deleted as soon as the transcript is returned.
• Account and project data: kept while your account is active, and deleted within 30 days of you closing it.
• Payment and invoice records: kept for as long as tax and accounting law requires.
• Support messages: kept for up to 12 months after the conversation ends.

08. How we protect it

Data is encrypted in transit using HTTPS, access to production systems is limited to the people who need it, and payments are handled entirely by the PCI-DSS compliant systems of our payment partners (Cashfree and Razorpay). No method of storing or sending data over the internet is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach as the law requires.

09. Your rights

Under the DPDP Act and other applicable laws, you can:

• Ask for a summary of the personal data we hold about you.
• Ask us to correct, complete or update it.
• Ask us to erase it, or close your account.
• Withdraw consent for anything that relies on it, such as newsletters.
• Nominate another person to exercise these rights on your behalf.
• Raise a grievance with us, and escalate it to the Data Protection Board of India.

Email support@luumiox.in from the address on your account and we will respond within 7 business days.

10. Children

Lumiox is meant for users aged 18 and over. Users under 18 may only use it with the verifiable consent of a parent or lawful guardian. If you believe a child has given us personal data without that consent, contact us and we will delete it.

11. Grievance officer

If you have a complaint about how your data is handled, contact our Grievance Officer, [Grievance officer name], at support@luumiox.in or by post at [Registered business address, City, State, PIN], India. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

12. Changes to this policy

If we make a material change, we will update the date at the top of this page and email account holders before the change takes effect. Continuing to use the service after that means you accept the updated policy.