Effective date: 9/1/2026
This policy explains what information Pacific Kai Ventures LLC ("we," "us," "our") collects through Lumea Direct, how we use it, and who we share it with. It covers the Lumea Direct app at app.lumeadirect.com and our website at lumeadirect.com. Questions go to [email protected].
Account information is about you and your team. We decide how to handle it, following this policy.
Customer content is what your agency puts into Lumea Direct, including your clients and their leads. Your agency decides what goes in and why. We handle customer content on your agency's behalf, following our Terms of Service and this policy.
Account and team information
Name, email address, and sign-in details. Clerk handles sign-in for us.
Your role, the agency you belong to, and the workspaces you can open.
Details you add, such as agency name, logo, and business profile fields.
Billing information
Your plan, billing status, trial dates, and payment history.
Stripe processes card payments. We never receive or store your full card number.
Customer content
Client records, contacts, packages, deliverables, notes, tasks, and reports.
Lead records for your clients, including names, phone numbers, email addresses, and the service a person asked about. Many of these clients are dental and therapy practices.
Time entries, pay settings, and pay periods for your team.
Search and Google Business numbers you type in for client reports.
Login URLs, usernames, and email addresses you choose to save for a client's website or Google profile. Never save passwords here.
Lead information sent to Lumea Direct
Lead details sent from tools you connect, such as GoHighLevel webhooks.
Emails sent to your Lumea Direct inbound address, including the message itself.
CSV files you import.
Support information
Support tickets, help questions, and our replies.
Report link activity
When someone opens a shared report link, we count the view and record the first and last view times. We do not record who opened it, their IP address, their browser, or their location.
Run Lumea Direct and show you your data.
Create accounts, sign you in, and keep sessions secure.
Bill you and handle failed payments.
Send service emails, such as team invites, client reports your agency sends, and payment notices.
Turn inbound emails into lead records.
Answer support requests and help questions.
Find and stop abuse, fraud, and security problems.
Fix bugs and improve Lumea Direct.
Follow the law.
We do not sell personal information. We do not use customer content for advertising.
Lumea Direct uses Claude, made by Anthropic, in two places.
Inbound lead emails. When an email arrives at your Lumea Direct address, we send its subject and body to Anthropic to pull out the lead's name, phone, email, and the service asked about.
The help bot. When you ask a question in the app, we send your question and up to five of our published help articles to Anthropic. We do not attach your client records.
Anthropic's commercial terms do not allow it to train its models on this data.
Service providers who run parts of Lumea Direct for us:
Clerk: sign-in and account security
Supabase: database, hosted in Oregon, United States
Stripe: payments
Mailgun: sending and receiving email
Replit: app hosting
Anthropic: the AI processing described in section 4
Each provider gets only the information it needs to do its job for us.
We also share information:
Inside your agency. Team members and client users you invite see data based on their role.
When you choose to. Anyone holding a shared report link can open the report without signing in. Revoke a link in the app to close it.
To follow the law, respond to valid legal requests, or protect the rights and safety of our users and others.
As part of a merger, sale, or reorganization. The new owner must keep protecting your information under this policy.
We use cookies needed to sign you in and keep your session secure. Clerk sets these cookies. Stripe sets its own cookies on payment pages.
We also store three small settings in your browser: a guard against sign-in loops, whether your reminders panel is open, and which onboarding sections you left open.
Lumea Direct runs no analytics, tracking, or advertising scripts.
A business using Lumea Direct, or the agency working for it, controls your information. Contact them to see, correct, or delete it. If you contact us, we pass your request to the right agency and help them answer it.
Account information and customer content: while the account is active, then 90 days after access ends. We delete it at the end of those 90 days.
Accounts locked for failed payment: deleted 90 days after the first failed payment.
Backups: our database provider keeps daily backups for the last 7 days. Deleted data can sit in those backups for up to 7 days.
Personal user records and security log entries: kept after an agency is deleted, with the link to the agency removed.
Billing records at Stripe: kept as long as tax and accounting law requires.
We encrypt data in transit with HTTPS. Our database provider encrypts stored data. We limit access to production systems to people who need it, and we require two-step sign-in on the accounts holding it.
Login URLs and usernames you save for a client are stored as ordinary text. Keep passwords in a password manager, not in Lumea Direct.
No system is perfectly secure. If we learn of a breach affecting your information, we tell affected account owners without undue delay.
We store information in the United States. Our database runs in Oregon.
See and update your account information in the app.
Save your customer content with the CSV downloads in the app.
Ask for a copy of your account information, or ask us to correct or delete it, by emailing [email protected]. We answer within 30 days.
Service emails about your account, billing, and security stay on while your account is open.
State privacy laws may give you more rights depending on where you live.
Lumea Direct is not built to hold protected health information under HIPAA, and we do not sign business associate agreements. Lead records should hold contact details and the service a person asked about, not medical records. See section 13 of our Terms of Service.
Lumea Direct is for businesses. It is not meant for anyone under 18, and we do not knowingly let anyone under 18 create an account.
We post updates on this page and change the date at the top. For a material change, we email account owners before it takes effect.
Pacific Kai Ventures LLC 30 North Gould Street, Suite R Sheridan, WY 82801 [email protected] (949) 484-8435