About this policy
Paternoster (PATER NOSTER), Seoul, Korea, runs Luminacle and protects your personal data under Korea’s Personal Information Protection Act. This policy covers luminacle.com, the customer dashboard (app.luminacle.com) and the customer sites we host.
1. What we collect, why, and for how long
| When | Data | Purpose | Kept |
|---|---|---|---|
| Consultation request | Name, title (optional), company, email, message, the estimate you built, a hash of your IP address | Answering you, quotes and contracts, preventing abuse | 1 year after the conversation ends; for the contract term if you sign |
| Customers and the dashboard | Kakao account email and nickname, business details, contact name, email and phone, invoices, edit requests and chat messages | Performing the contract, sign-in, billing, notices | 30 days after cancelling; payment records 5 years as Korean law requires |
| Site analytics (luminacle.com) | A random visitor ID, pages viewed, clicks, referrer, device type, country | Understanding visits | Up to 180 days. No IP address or contact details; nothing is recorded for visitors from the UK, EU or Switzerland |
| Chatbot | Your questions and the answers | Answering, improving answers | 1 year after the last message |
2. Visitors to customer sites
For inquiries and bookings that visitors leave on a customer site, the customer is the controller and we process the data on their behalf, only to run their site and dashboard, never for our own marketing. It is deleted when the customer deletes it or 30 days after their plan ends. Visitors can exercise their rights with the customer; requests sent to us are passed on.
4. Processors and transfers outside Korea
We use these processors: Supabase (database and sign-in, Seoul region), Vercel (hosting), Kakao (sign-in and KakaoTalk channel), Solapi (KakaoTalk notices), Resend (email delivery), Zoho (our mailbox), Google and OpenAI (chatbot answers) and Toss Payments (card payments, once card billing is in use). Data is sent to the providers outside Korea listed below when the service is used:
| Recipient | Country | Data |
|---|---|---|
| Supabase Inc. (supabase.com/privacy) | USA (stored in Seoul, Korea) | all items in sections 1 and 2 |
| Vercel Inc. (vercel.com/legal/privacy-policy) | USA (runs in Seoul first) | data passing through requests, access logs |
| Resend, Inc. (resend.com/legal/privacy-policy) | USA | recipient email address, message content |
| Zoho Corporation (zoho.com/privacy.html) | USA | emails you send us |
| Google LLC (policies.google.com/privacy) | USA | chatbot messages (emails and numbers masked) |
| OpenAI, L.L.C. (openai.com/policies/privacy-policy) | USA | chatbot messages (only during a Google outage) |
5. Your rights
You can ask to see, correct or delete your data, or to stop its processing, at any time by writing to support@luminacle.com. We respond within 10 days. If you are in the UK or EU you may also complain to your local data protection authority.
6. Security
Phone numbers and contact details are encrypted with AES-256-GCM. Files are stored without public addresses and shown only through short-lived signed links. All traffic uses TLS, row-level access control keeps each customer to their own data, and we never store passwords (sign-in is through Kakao).
8. Contact
Privacy officer: Hanmiru Lee, support@luminacle.com. We post any change to this policy here at least 7 days before it takes effect.
Luminacle · operated by PATER NOSTER · support@luminacle.com
Terms of Service · Refund Policy