Privacy Policy
Last updated: May 13, 2026
1. Introduction
Apurve Vidha ("we," "us," or "our") operates Lumaforge, an AI filmmaking studio platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By using the Service, you consent to the practices described in this Policy.
2. Information We Collect
2.1 Information You Provide
- Account data: Name, email address, and profile information provided during sign-up via Clerk.
- Payment data: Billing details are processed by Razorpay. We store only transaction IDs, amounts, and invoice records — never raw card numbers.
- Content you upload: Reference images, audio files, scripts, and project data you create or upload while using the Service.
- Communications: Messages you send to our support team.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, generation history, model selections, and session durations.
- Device & log data: IP address, browser type, operating system, and error logs.
- Cookies: We use essential session cookies for authentication (via Clerk). We do not use advertising or tracking cookies.
3. How We Use Your Information
- To provide, operate, and improve the Service
- To process payments and maintain wallet balances
- To enforce tier limits and access controls
- To send transactional emails (invoices, payment confirmations, account alerts)
- To generate and render AI content using your prompts and reference images
- To detect fraud and abuse
- To comply with legal obligations
We do not use your content to train AI models. Your projects and uploaded files are processed solely to provide the Service to you.
4. Third-Party Services & Data Sharing
To provide the Service, we share data with the following third-party processors:
| Provider | Purpose | Data Shared |
|---|---|---|
| Clerk | Authentication | Email, name, session tokens |
| Razorpay | Payment processing | Name, email, billing amount |
| fal.ai | Video & image generation | Prompts, reference images |
| ElevenLabs | Voice generation | Text dialogue content |
| Anthropic | AI prompt generation | Reference images, shot intent |
| PiAPI | AI music generation (optional) | Music prompt text |
| Railway | Hosting & storage | All app data, generated files |
We do not sell your personal data to any third party.
5. Data Retention
- Account data: Retained while your account is active and for 90 days after deletion.
- Project files & generated videos: Retained as long as your account is active. You can delete projects at any time.
- Invoice & transaction records: Retained for 7 years as required by Indian GST/financial regulations.
- Logs: Retained for 30 days.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update inaccurate or incomplete information.
- Deletion: Request deletion of your account and associated data (subject to legal retention obligations).
- Portability: Receive your data in a machine-readable format.
- Objection: Object to certain types of processing.
To exercise any of these rights, email us at legal@lumaforge.studio. We will respond within 30 days.
7. Security
We implement industry-standard security measures including HTTPS, encrypted storage, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access caused by factors outside our control.
8. Children's Privacy
The Service is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a person under 18, we will delete it promptly.
9. International Transfers
Our servers are hosted in the United States (via Railway). Your data may be processed in countries with different data protection laws than your country of residence. By using the Service, you consent to this transfer. We ensure that any international transfers are subject to appropriate safeguards.
10. Cookies & Tracking
We use strictly necessary cookies for authentication sessions via Clerk. We do not use advertising cookies, third-party analytics cookies, or behavioral tracking pixels. You may disable cookies in your browser settings, but this may prevent the Service from functioning correctly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.
12. Contact Us
For privacy-related questions or to exercise your rights, contact us at: