Effective 10 November 2026. Lumienzo, Inc. ("Lumienzo", "we", "us") is a Delaware corporation. We make Lumi, AI agents that run influencer marketing for creators, brands, agencies, talent managers and creative pros. This policy explains what personal information we collect through our website at lumienzo.com and our app at app.lumienzo.com (together, the "Service"), including what we receive from Instagram, how we use it, who sees it, how long we keep it, and how to delete it. Questions go to team@lumienzo.com.

The short version

We do not sell your personal information, and we do not use it for advertising.
Creators connect their own Instagram through Meta's official connection. We read it, and we never change anything on it on our own: adding a comment, replying, changing or deleting one of the creator's own comments, or hiding or showing a comment happens only when the creator or someone on their team presses the button for it in Lumienzo. We never post photos or videos, and we never message anyone.
We do not use your data, or anything we receive from Instagram, to train AI models.
You can delete your account in the app at any time, and removing Lumienzo from your Instagram settings deletes everything we received from Instagram. See Delete your data.

What the Service does today

Anyone can open the app, continue with their email address or Google account, set up a profile for their role, and invite teammates. Creators connect their Instagram account, and Lumi writes a short profile of their work from it. Anyone who runs campaigns for a brand that is not on Lumienzo can also set the brand up and invite its people. Anyone who runs a campaign for a brand can also track one already running: its creators are asked first, and once one says yes, the posts and stories picked for the campaign are counted from Instagram, and Lumi reads the campaign each day.

What we collect

Your account

Your email or Google account. You continue with your email address or your Google account through our identity provider, Clerk. We receive your email address, your name if Google shares it, and an identifier Clerk gives your account.
Profile. Your name, a photo of yourself if you add one (it shows beside your name, and is your business's picture when you work on your own), your role (creator, brand, agency, talent manager or creative pro), your workspace's name and logo, and the answers you give during setup, such as your phone number, website, Instagram handle, what you will never promote, what you charge and in which currency, and the paragraph about you or your business.
Representation. If a creator tells us they signed an exclusive contract with a manager or agency, we keep which one (a creator has one at a time): the one on Lumienzo they pick, or the details they enter about one that is not (the person's name, an email address, a phone number and, if they give them, the company's name and a website). We use those details only to email that manager or agency an invite to Lumienzo, to fill in their own setup when they join with that email address (they can change any of it), and to contact them, so the creator's brand deals can go through them as the contract says. We also keep whether each side said yes.
A creator's invite from their manager. A talent manager or agency can invite a creator on their roster, one at a time, with the creator's Instagram username, an email address and, if they have it, a phone number. We use the email address only to send that invite. If the creator accepts it with their own Instagram account, the phone number goes on their profile when it has none, for their notifications, and they can change it. The invite works only for the Instagram account it was made for.
A creator's invite to a campaign. Anyone running a campaign on Lumienzo can invite a creator who is not on it yet, with the creator's Instagram username, an email address and, if they have it, a phone number. We use the email address only to send that invite, and the phone number is filled in for the creator when they join from it, where they can change it. Until the creator joins, people running campaigns who search for creators see that they were invited, with only their public Instagram name and follower count, never the email address or phone number.
Files and links. Logos, portfolio files and links, and the links added for a brand, by its team or by whoever set the brand up. For each file we also keep a small picture of it, made in your own browser, so your files show as pictures.
Teammates. The name, email address and phone number of each person you invite to your workspace. The name and phone stay on the invite only until it is accepted or cancelled.
A brand set up by someone else. When someone who runs campaigns for a brand sets it up on Lumienzo, we keep what they give us about the brand: its name, logo, website, Instagram, links, files and goals, and the paragraph about it. We also keep the name and email address of each person at the brand they invite, and use them only to email that person an invite, which says who set the brand up. The first person at the brand to join owns it; until then, whoever set it up can change or delete it.
Campaigns. What a team enters about a campaign: its name, what it is about, when it runs, its budget and what it spent before it was added, its creators by Instagram username, its competitors, and the payments it logs (what each was for, its kind, amount, day, who it was for and a note). And Lumi's read of each running campaign each day: what is working, what needs attention, its recommendations and what the comments say.
Notifications. What the app tells you, such as a creator or manager accepting your invite: a title, a short message, a link, the picture of the person or business it is about, and whether you have read it. When we also email it to you, we record whether that email went out.

From Instagram, when a creator connects their account

A creator connects their own Instagram professional account through Instagram Login, Meta's official connection, on Instagram's own page. You choose there whether to allow access. We ask for three permissions, and this is exactly what each one lets us read:

instagram_business_basic: your account's id, username, name, account type, bio and website, and follower, following and post counts; your newest posts, up to 100: the caption, type, link, media link, time posted, and the number of likes and comments; and the stories you have up when we refresh: their type, caption, link and time posted.
instagram_business_manage_comments: the comments on those posts. We keep the text and time of up to 25 recent comments on each post, never who wrote them. The creator's Comments page shows their newest comments with each commenter's username, read live from Instagram and kept nowhere, and from it the creator and their team can add a comment to one of their posts, reply to a comment, change the words of their own comments (Instagram shows a changed comment as a new one), delete their own comments, and hide or show a comment. Each happens on Instagram only when they press the button for it, and we keep a record of which comment was acted on, by whom and when, never its words.
instagram_business_manage_insights: how many of your followers, of the people who engaged with your posts and of the people your posts reached fall into each age range, gender, country and city. Instagram gives these as totals; they never name anyone. For each of your posts, Instagram's own count of its views, the people it reached, its likes, comments, saves and shares, and the follows, profile visits and profile taps it brought, and for a Reel, how long people watch it and how often they skip it. For each story you have up when we refresh, its views, reach, replies, shares, how people moved through it, and the follows and profile visits it brought. And your account's numbers for the last 30 days: reach and views (from followers and others, and by kind of post), accounts engaged and interactions, follows and unfollows, profile views, website clicks and link taps, your reach and follower count by day, and when your followers are online.

Instagram gives us an access token that lets us read these again. We store it encrypted (AES-256-GCM) and use it to refresh your numbers every five days while you stay connected, or sooner when you or your talent manager or agency ask (once a day). It is never shown to anyone, sent to your browser, or written to our logs.

From Instagram, on a campaign

Someone on the team running a campaign can connect the brand's own Instagram professional account the same way, through Instagram Login. Anyone outside the brand can connect only the account the brand itself gave as its Instagram on Lumienzo. We ask for three permissions, and this is exactly what each one lets us read:

instagram_business_basic: the account's id, username and profile picture, and its posts and stories, so the team can pick the campaign's: their type, caption, link, media link and time posted.
instagram_business_manage_insights: for each post and story picked for a campaign, Instagram's own count of its views, the people it reached, its likes, comments, saves, shares and interactions, the follows and profile visits it brought, a Reel's average watch time and a story's replies; and how many of the people who engaged with the account, that it reached or that follow it fall into each age range, gender, country and city. Instagram gives these as totals; they never name anyone.
instagram_business_manage_comments: the comments on the posts picked for a campaign. Lumi sorts each one into a kind, such as a question, a complaint or someone who wants to buy, and we keep only how many fall in each kind, never the words or who wrote them.

The brand's access token is stored encrypted like a creator's, on the brand's workspace, and every campaign for that brand uses it. Someone at the brand, or the team that connected it, can disconnect it, and the brand can connect or reconnect it from its own Settings.

When a creator says yes to a campaign, we read the same things through their own connection, only for the posts and stories picked for that campaign. While a campaign they are on is running, we keep each story they post, its details and numbers but never the story itself, until 30 days after it ends, so the team can still add it once it is gone from Instagram. We read a post's numbers every few hours while it is new and less often as it ages, and keep them for each day. We never copy a photo or a video: we show Instagram's own picture link while it works, and a story's only while the story is up.

Public Instagram information

Through Meta's Business Discovery feature, we read what any Instagram professional account already shows publicly: its name, bio, website, follower and post counts, profile picture, and recent posts and Reels. We read it for accounts people name to us: a creator's own account, a brand's, agency's, talent manager's or creative pro's own account, and the creators a talent manager or an agency adds to their roster, and the accounts a team names as a campaign's competitors, with the campaign's brand, read the same public way so they can be compared. Lumi watches a short part of some Reels and looks at some photos while it writes a profile, and does not keep those files. Because Instagram's picture links expire, we keep a copy of a creator's profile picture to show on their profile.

Websites and files you point us to

When a brand or a creative pro gives us their website, links or files, or someone sets a brand up with them, Lumi reads them to write a short description of the business. We read only the pages and files that business gave us. To show a website or a link as a card, our server opens it once and keeps its title, a line about it and a copy of its picture. It never signs in anywhere, and it does not open links to services that need a sign-in, such as Google Drive or Dropbox.

Collected automatically

Security records. When you use the app, our servers record your IP address, browser user agent and the time you open your account and take sensitive actions (such as deleting an account), to keep accounts safe and to prove what happened.
Visit statistics. Our host, Cloudflare, counts visits with Cloudflare Web Analytics, which uses no cookies and does not follow you to other websites. We see totals such as page views, referring sites, browsers and countries.
Request logs. Cloudflare, which hosts and protects the Service, records standard request logs (IP address, user agent, time and address requested) to keep it available and secure.

On our website

Email updates. If you sign up for updates, Buttondown stores your email address and sends our emails. Every one has an unsubscribe link.
Images. Some photos on lumienzo.com load from Unsplash, which receives your IP address when your browser fetches them.

How we use it

To run your account and workspace, and to let your teammates in.
To verify a creator's audience, so brands get the creator's real numbers straight from Instagram instead of an estimate.
To have Lumi write a profile of a creator or business, which you see, edit and approve before it is used.
To match creators and brands. Lumi turns a finished creator's profile, bio, recent captions and audience into a private index for suggesting creators for campaigns. What they will never promote and what they charge are left out of that index.
To show a creator's profile page to the brands, agencies and talent managers on Lumienzo while the creator takes brand deals, with Lumi's read: a short summary Lumi writes from their posts, comment text and audience, and from the opening seconds of a few of their Reels, which it listens to only for the languages they speak and does not keep. Lumi never quotes a comment or says who wrote one.
To let a creator and their team read and answer the comments on the creator's own posts from their Comments page.
To track a campaign: to count its posts' and stories' numbers from Instagram, show who they reach, compare the brand with the competitors the team names on what their public posts show, and have Lumi read the campaign each day and write what is working, what needs attention and what to do next. Lumi never quotes a comment or says who wrote one.
To send the emails you ask for, such as a teammate's invite, a manager's invite to a creator, a creator's invite to their manager or agency, or updates you signed up for.
To tell you, in the app and by email, when something needs you or changed for you, such as a creator or manager accepting your invite. Every one of these emails has an unsubscribe link.
To keep the Service secure, prevent abuse, and fix problems.
To meet our legal obligations.

Where the GDPR or UK GDPR applies, we rely on contract to provide the Service you signed up for, on consent for the Instagram connection and for update emails (you can withdraw either at any time), on legitimate interests for security, abuse prevention, the matching index and Lumi's read (balanced against your rights, and you can object), and on legal obligation where the law requires us to keep something.

Lumi's AI

Lumi's writing and matching run on Google's Gemini models through Google Cloud's Vertex AI. Google processes that content only to give us an answer and does not use it to train its models. We do not train any AI model on your data or on anything we receive from Instagram. The profile Lumi writes about you is shown to you first, and you can change or delete it. Lumi's read on a creator's profile page is marked as written by AI, and the creator sees it on their own page; they can object to it by writing to team@lumienzo.com. Lumi also sorts the comments on a campaign's posts and writes a short read of each running campaign every day, from its numbers and the days before.

Who sees it

Your workspace. Members of your workspace see your workspace's profile, files and team, and the notifications sent to the workspace. Each file opens through a link made for one member, which stops working within two hours and as soon as that person leaves the team.
Brands, agencies and talent managers on Lumienzo. While a creator takes brand deals, they can open the creator's profile page: their name, picture and Instagram handle, follower count, how a typical recent post does (its views, likes, comments, saves and shares, how many people it reaches and how long people watch a Reel), how often they post and their recent posts, their audience numbers (the share of women and men, age groups and how many are under 18, top countries, and top cities, each with its state and about how many followers live there), the paragraph about them, what they offer brands, who handles their brand deals, and Lumi's read. The page never shows what the creator will never promote, what they charge, whether they take barter deals, or their contact details. A creator who turns brand deals off is hidden from them.
Campaign partners. When a brand shortlists a creator for one of its campaigns, that brand also sees what the creator charges, which their profile page never shows. Brands that have not shortlisted them never see it. Nobody ever sees your Instagram access token, and nobody can see who wrote the comments on your posts, because we never keep that.
A campaign's people. The team running a campaign and the brand it is for see all of it. A creator on it, and their talent manager or agency, see it once the creator says yes, and then only what it is about, its days, its overall numbers, what its comments say and their own posts, never its money or another creator's numbers.
People running a campaign. Creators, talent managers, agencies and creative pros setting up a campaign can find a brand on Lumienzo by typing its name, and see only its name, logo, website and Instagram.
Creators looking for their manager or agency. A creator can find a talent manager or agency on Lumienzo by typing its name, and sees only its name, logo and website.
A creator's talent manager or agency. A talent manager or agency the creator names sees the creator's name, Instagram handle and picture, follower and post counts, how often their followers like or comment, their audience numbers (the share of women and men, the main age group and top countries) and what they offer brands, so they can answer. Once both have said yes, they also see the paragraph about the creator, what they will never promote, what they charge and whether they are taking brand deals, and they can change those answers and turn the creator's brand deals on or off for them. The creator is told in the app each time, and can change any of it back. A creator has one at a time and can end it whenever they want, on their My manager page or by naming someone else, and the manager or agency can take a creator off their roster.
Our service providers, who process data only on our instructions and under contracts that require them to protect it:
- Altarium Consulting Private Limited (India), our affiliate: operates our app on Meta's platform, the connection that reads Instagram, on our behalf.
- Google Cloud (Google LLC): hosting, database, file storage, and the Gemini models behind Lumi, in the United States.
- Clerk: access to your account with your email address or Google account.
- Cloudflare: hosting and delivery of our website and app, request logs, and cookie-free visit statistics.
- Resend: sending the emails the app sends, such as a teammate's invite, a manager's invite to a creator, a creator's invite to their manager, or a notification.
- Slack: our team's workspace, where we get a notice when you finish setting up, with the details you gave and, for a creator, their Instagram handle, picture, follower and post counts, average likes and comments, and a summary of who follows them, so we can welcome you and, for a creator whose manager or agency is not on Lumienzo, contact them.
- Buttondown: update emails from our website.
- Unsplash: images on our website.
Meta is where Instagram data comes from. We send Meta only what its APIs need to answer: your access token and the request itself.
When the law requires it, or to protect people's safety, or as part of a merger or sale of our business, in which case this policy keeps applying to your information. If a government body, the police or a court asks us for someone's information, we check that the request is lawful, challenge it if it is not, share only the minimum the law requires, and keep a record of each request, who made it, how we answered and the legal reasons.

We do not sell or rent personal information, and we do not share it with data brokers or advertising networks.

Instagram and Meta

Our app on Meta's platform is operated on our behalf by our affiliate, Altarium Consulting Private Limited, a company registered in India. Altarium handles what we receive from Instagram only to run the Service for us and only as this policy describes, and Lumienzo, Inc. remains responsible for it.

We access Instagram only through Meta's official APIs, and only with the permissions you approve on Instagram's own screen. Our use of information we receive from Instagram follows the Meta Platform Terms and Developer Policies. In particular, we use it only to provide the Service you asked for, we never sell or license it, we never use it for advertising or to track people, and we delete it when you ask (see below). You can withdraw our access at any time in Instagram under Settings and activity, then Website permissions, then Apps and websites.

How long we keep it

Your account and profile: until you delete your account, then deleted at once.
Your Instagram access token: until you delete your account or remove Lumienzo from Instagram, then deleted at once.
Your Instagram numbers, posts, stories and comment text: we keep only the latest copy, with the answers Instagram sent for it as a backup, so they are kept even when Instagram cannot be reached. We replace it each time we refresh your numbers while you stay connected, and delete it at once when you delete your account or remove Lumienzo from Instagram. Earlier answers Instagram sent us are deleted within nine days. We never keep copies of the photos or videos in your posts or stories.
Lumi's read and the posts on your profile page: we keep the latest, write a new read at most every 15 days after your Instagram numbers are replaced, or sooner when you or your talent manager or agency ask for one (once a day), and delete both when you delete your account or remove Lumienzo from Instagram.
The matching index: deleted with your account or your Instagram data. Index entries that no longer have a lawful basis are deleted within 90 days.
Invites: an invite nobody accepted is deleted 30 days after it expires.
A campaign: until its team deletes it or its workspace is deleted, with its posts' numbers by day, its payments and Lumi's reads of it, each read kept for up to 400 days.
When an Instagram account leaves: when its owner removes Lumienzo from Instagram, asks Meta to delete their data or deletes their account, its posts on every campaign and their numbers are deleted; only where another account's posts stay on a campaign does a total that names nobody stay in that campaign's numbers. When it is a creator's, Lumi's reads of every campaign they were on are deleted too, and Lumi writes the next without them.
Stories kept for campaigns: deleted 30 days after each ends, unless a campaign uses it.
Who an account on a campaign reaches: the latest only, deleted 30 days after it was last read once no campaign counts it.
Competitors' public numbers: deleted 30 days after no campaign watches them.
A creator's invite to a campaign: deleted once the creator joins Lumienzo with that Instagram account, or 30 days after the invite lapses, 14 days after it was last sent, or when the workspace that sent it is deleted.
A creator's invite from their manager: the link works for 14 days. When the creator accepts it or says yes to that manager in the app, the phone number moves to their profile if they have none, and the invite's email address and phone number are deleted then; an invite nobody accepted is deleted 30 days after it expires, or when the manager takes that creator off their roster.
A brand someone set up: kept until someone at the brand joins and owns it, or until whoever set it up deletes it or their own account.
Representation details a creator entered: kept while that creator's brand deals are paused waiting for that manager or agency to join; otherwise deleted after 180 days if they never join.
Notices to our team in Slack: deleted when you delete your account.
Notifications: deleted after 180 days, or when you delete your account. A notification about someone is deleted when they delete theirs.
Security records: kept as evidence of what happened to an account. They hold no content, and after an account is deleted they no longer contain its email address.
Request logs: kept for a limited period for security and troubleshooting, then deleted.
Update emails: until you unsubscribe or ask us to delete your address.

Delete your data

There are three ways, and each one is final.

Delete your account in the app. Open Settings, choose Delete your account, and confirm. Anyone still setting up: choose Exit onboarding and confirm. We delete your account, your profile, your workspace if you are its only member, any brand you set up that nobody at it has joined, your files, everything we received from Instagram, and your account with Clerk.
Remove Lumienzo from Instagram. In Instagram, go to Settings and activity, then Website permissions, then Apps and websites, choose Lumienzo and remove it. Meta tells us, and we delete everything we received from your Instagram: the access token, your posts, stories, comment text, audience and account numbers, the backup of what Instagram sent us, the profile Lumi wrote from them, Lumi's read of your profile page, and the copy of your profile picture. A brand's account connected for its campaigns is disconnected the same way, and its posts' numbers are deleted from every campaign. If you also ask Meta to delete your data, you get a confirmation code and a page that shows when the deletion is done. Your Lumienzo account stays, and you can connect again or delete it.
Email us. Write to team@lumienzo.com from the email address on your account with the subject "Delete my data". We confirm when it is done, within 30 days. Anyone can use this route.

Security records are kept after a deletion as evidence that it happened, without your email address. Deleted data can remain in our encrypted database backups for up to 7 days, until they are replaced.

Your rights

Depending on where you live, you can ask us for a copy of your personal information, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format, and you can withdraw consent at any time. Under the GDPR and UK GDPR you can also complain to your data protection authority. California residents have the rights to know, delete and correct their personal information, to opt out of its sale or sharing, and not to be treated differently for using these rights. We do not sell or share personal information as California law defines those words.

We give these rights to everyone, wherever they live, and where the law that applies to you gives you more, you have those too. You can also complain to the data protection or consumer authority where you live.

You can change your answers yourself in Settings. For anything else, email team@lumienzo.com with the subject "Privacy request" and we will answer within the time the law allows.

Cookies and similar technology

We use no advertising or analytics cookies. The app keeps your session in your browser's storage so you stay in, and Clerk, our identity provider, sets the cookies it needs to keep you in. Our visit statistics need no cookies at all. Because nothing we use is for tracking, we show no cookie banner.

Security

Everything travels over HTTPS. Instagram access tokens are encrypted with AES-256-GCM before they are stored, and Google Cloud encrypts our database and files at rest. Access to production systems is limited to the people who need it, and important account actions are recorded in an append-only log. Read more on our security page, and report a problem to team@lumienzo.com.

International transfers

Lumienzo is a US company and the Service runs on Google Cloud in the United States, so your information is processed there. Cloudflare, which delivers the Service, passes your connection through its data center nearest you. People on our team in Canada and India may access your information from there to run the Service, as may our affiliate Altarium Consulting Private Limited in India, which operates our app on Meta's platform. Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on the EU Standard Contractual Clauses and the UK Addendum, with our providers' equivalent safeguards.

Children

The Service is for people 18 and older. We do not knowingly collect personal information from anyone younger. If you think a child has given us information, write to team@lumienzo.com and we will delete it.

Changes to this policy

We will update this policy as the Service changes. When we make a material change we will update the date at the top, and where we can reach you we will tell you first. Where the law requires fresh consent, we will ask before the new use begins.

Contact us

Lumienzo, Inc.

2093 Philadelphia Pike #7740, Claymont, DE 19703, USA

team@lumienzo.com

Privacy Policy