Last updated July 21, 2026
Lumin SCM (“Lumin,” “we,” “us”) provides a business supply-chain visibility platform that tracks shipments, imports freight documents, and calculates landed cost. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to app.luminscm.com and related services (the “Service”).
For information about your own account and use of the Service, Lumin is the controller. For business data you bring into the Service — shipments, tracking numbers, freight documents, and the contents of emails you connect — Lumin acts as a processor on your behalf, handling that data only to provide the Service to you. Where you are subject to GDPR or similar laws, our Data Processing terms supplement this Policy.
When you connect Gmail, Lumin requests read-only access to your messages solely to find and extract shipment details (carriers, tracking numbers, dates, addresses, and document contents) so we can track those shipments for you. We do not use Gmail data for advertising, and we do not sell it.
Lumin’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we only use Google user data to provide and improve user-facing features of the Service; we do not transfer it except as necessary to provide those features, for security, or to comply with law; we do not use it for advertising; and we do not allow humans to read it unless we have your consent for specific messages, it is necessary for security or to comply with law, or the data has been aggregated and anonymized. You can disconnect Gmail at any time in Settings → Integrations.
We do not sell your personal information. We share data with vendors who process it on our behalf to run the Service, under contracts that limit their use of it:
We may also disclose information to comply with law, protect rights and safety, or in connection with a merger or acquisition (with notice where required).
We retain account and business data for as long as your account is active and as needed to provide the Service. When you delete a shipment or document, it is removed from active systems. When you close your account, we delete or anonymize your data within a commercially reasonable period, except where retention is required by law. Backups are retained on a rolling basis and then overwritten.
Data is encrypted in transit (TLS). Access to production systems is restricted and credentials are stored as secrets. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.
We are based in the United States and process data there. If you access the Service from outside the U.S., you consent to that transfer, subject to appropriate safeguards where required.
Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain uses. California residents (CCPA/CPRA) have the right to know the categories of personal information we collect (identifiers, commercial information, internet activity, and business contact data), to access and delete it, and to opt out of “sale” or “sharing” — we do not sell or share your personal information as those terms are defined. To exercise any right, contact us at privacy@luminscm.com. We do not discriminate against you for exercising these rights.
We use strictly necessary cookies to keep you signed in and secure the Service. We do not use third-party advertising cookies.
The Service is for business use and is not directed to individuals under 16. We do not knowingly collect data from children.
We may update this Policy; we will revise the “Last updated” date and, for material changes, provide notice through the Service.
Questions? Email privacy@luminscm.com.