Privacy Policy

• Your resume is used to generate your diagnosis and documents. That's it.
• The free resume fix is genuinely free — no card details are asked for or collected.
• We never sell your personal information, and we never share your resume with employers, recruiters or advertisers.
• Payments are handled by Stripe — we never see or store your card number.
• You can ask us to delete your account and data at any time: mrelvisdsilva@gmail.com.

• Account information — your email address and password (stored as a hash), managed through our authentication provider, Supabase.
• Content you provide — your resume, job ads you paste, your selected industry, and any details you add (for example, application outcomes you track).
• Referral information — if you arrive via a friend's referral link, we store their referral code as the source of your signup and any purchase. That's the whole mechanism: we never scan contacts and never access anyone's address book.
• Payment information — processed entirely by Stripe. We receive confirmation of payment, the product purchased, and a customer reference — never your card details.
• Usage information — product events (for example: page viewed, diagnosis started, purchase completed), device/browser type, and approximate location derived from IP. Used to measure and improve the funnel and product.
• Cookies and similar technologies — session cookies to keep you signed in, and (where enabled) analytics/advertising pixels described below.

• To generate your diagnosis, scores, and (if purchased) rewritten documents.
• To operate your account: sign-in, purchase fulfilment, receipts and support.
• To understand how the product is used and improve it, using aggregated usage events.
• To measure the performance of our advertising (see “Analytics and advertising” below).
• To meet legal, accounting and tax obligations.

We do not use your resume for advertising, and we do not build advertising profiles from its contents.

Your resume text and the job ad you provide are processed by third-party AI providers (currently Anthropic and/or OpenAI) to generate your diagnosis and documents. We use these providers' commercial APIs, which under their terms do not use API data to train their models. Your resume is sent for processing only — it is not published, listed, or shared beyond what is required to produce your results.

Your account data and content are stored with Supabase (our database and authentication provider) and our hosting provider. Data is encrypted in transit. Access within Lumora is restricted to what is needed to operate and support the service. Some of our providers store data outside Australia (for example, in the United States); where that happens, we rely on the protections in our agreements with those providers.

Only the service providers needed to run Lumora:

• Supabase — database, authentication and storage.
• Stripe — payment processing.
• Anthropic / OpenAI — AI analysis and document generation.
• Analytics and advertising platforms — Meta and Google, as described below, where enabled.
• Authorities, where disclosure is required by law.

We never sell your personal information. We never share your resume contents with employers, recruiters, data brokers or advertisers. If you share your referral link, the only thing recorded is that your code referred a signup or purchase — the people you refer never see your resume or results, and we never see their contacts.

Where enabled, we use Google Analytics and the Meta Pixel to understand how visitors reach and use the site and to measure our advertising (for example, that a purchase occurred after clicking an ad). These tools use cookies or similar identifiers and receive event data such as pages viewed and purchases made — never your resume contents. You can limit ad tracking through your browser settings, and through Meta and Google's own ad preference tools.

We keep your data while your account is active so your history (diagnoses, documents, tracked applications) keeps working for you. You can request deletion of your account and associated content at any time by emailing mrelvisdsilva@gmail.com. We'll action it within 30 days, except for records we must keep by law (for example, payment records).

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may request access to, correction of, or deletion of your personal information, or complain about our handling of it, by contacting us at mrelvisdsilva@gmail.com. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

We use industry-standard measures: encryption in transit, hashed passwords, row-level access controls on our database, and payment handling delegated entirely to Stripe. No system is perfectly secure — if we become aware of a data breach likely to result in serious harm, we will notify affected users and the OAIC as required by law.

Lumora is not directed at children and must not be used by anyone under 16.

If we make material changes, we'll update the effective date above and, for significant changes, notify you by email or in the product.

Questions about privacy: mrelvisdsilva@gmail.com