Privacy Policy
Privacy Policy
Last updated: July 13, 2026
Information We Collect
When you create an account and use Lumora, we collect the following information:
- Email — Your email address is required for account creation, authentication, and communication
- Name — Your chosen display name for your profile
- Portfolio — The stock symbols, quantities, and average prices you add to your portfolio
- Watchlist — The stocks and instruments you choose to track
- Saved Analyses — AI-generated analysis reports you choose to save
- Preferences — Your theme selection (dark/light/system), timezone, country, bio, and notification settings
- Authentication Data — Hashed password, email verification status, session information, and IP addresses
We do not collect sensitive financial information such as bank account numbers, trading account credentials, or government identification numbers.
How We Use Data
We use your information exclusively for the following purposes:
Authentication
Verify your identity, manage your session, and protect your account from unauthorized access.
Security
Detect and prevent abuse, fraud, and unauthorized access attempts.
AI Analysis
Generate market analysis and research based on the symbols and data you query.
Personalization
Remember your theme, preferences, portfolio data, and saved analyses.
Bug Fixes
Diagnose technical issues, improve performance, and enhance the user experience.
Communication
Send important account notifications, including email verification, password resets, and policy updates.
We do not sell your personal information to third parties. We do not use your data for advertising or marketing purposes beyond our own service communications.
Third Party Services
Lumora relies on a limited set of trusted third-party services to operate. Each service processes only the data necessary for its specific function:
Yahoo Finance
Purpose: Market data, stock prices, technical indicators, and company fundamentals
Data shared: Symbol names and market data queries. No personally identifiable information is shared.
Groq AI (via Llama 3.3)
Purpose: AI-powered analysis generation
Data shared: Stock symbols, market data, and news headlines are sent for AI processing. No personal information (name, email, portfolio contents) is included in AI analysis requests.
Resend
Purpose: Transactional email delivery
Data shared: Email address is shared solely for sending verification codes, password reset links, and account notifications.
Neon (PostgreSQL)
Purpose: Database hosting
Data shared: All account data, preferences, portfolio, watchlist, saved analyses, and chat history are stored securely in our Neon database.
Better Auth
Purpose: Authentication infrastructure
Data shared: Email, hashed password, session tokens, and authentication metadata are processed through Better Auth for secure authentication.
Security
We implement industry-standard security measures to protect your data:
Encryption
All data in transit is encrypted using TLS/HTTPS. Data at rest is encrypted using industry-standard encryption.
HTTPS Everywhere
All communications between your browser and Lumora servers are encrypted end-to-end.
Password Hashing
Passwords are never stored in plain text. They are hashed using bcrypt with strong salt rounds.
Secure Authentication
Authentication uses HTTP-only, secure cookies. OAuth flows use industry-standard protocols.
While we take every reasonable precaution, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
User Rights
You have full control over your data. You can:
Delete account
Permanently remove your account and all associated data from our systems.
Export data
Request a copy of all personal data we hold about you.
Update profile
Modify your name, bio, timezone, country, and profile image at any time.
Delete portfolio
Remove your portfolio holdings individually or entirely.
Delete watchlist
Remove stocks from your watchlist at any time.
Delete saved analyses
Remove individual saved analysis reports from your account.
Most of these actions can be performed directly through your profile settings. For data export or any other requests, contact us at the email below.
Children
Lumora is not intended for users under the age of 18. We do not knowingly collect personal information from individuals under 18 years of age.
If we become aware that a user under 18 has provided us with personal information, we will take steps to delete that information and terminate the account. If you believe a minor has provided us with personal data, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or through the Lumora application.
Your continued use of Lumora after changes take effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the Service and delete your account.
The latest version of this policy will always be available at this page with the “Last updated” date.
Contact
If you have questions about this Privacy Policy, your data, or would like to exercise any of your rights, please contact us: