Privacy Policy
Version 2026-09-28 · Effective September 28, 2026
What Create Lume collects
Create Lume collects the information needed to operate your account and nonprofit workspace. This can include account and contact information, organization profile data, grant records, uploaded evidence and documents, application work, notification preferences, support requests, usage and security logs, and billing identifiers or subscription status received from Stripe.
Create Lume uses Stripe-hosted payment flows. Create Lume does not intentionally store full payment-card numbers in the application database.
How information is used
We use information to authenticate users, maintain organization workspaces, find and match funding opportunities, provide grant-readiness and drafting tools, deliver notifications, process subscriptions and donations, operate support, prevent abuse, troubleshoot failures, measure product usage, and improve service reliability.
AI features
When you use an AI-assisted feature, relevant prompts, grant materials, and organization evidence may be sent to the configured AI provider so the requested feature can run. Create Lume also records operational usage metadata such as feature, model route, token usage, estimated cost, and success or failure. See the AI & Data Use disclosure for additional detail.
Service providers
Create Lume uses service providers needed to run the product, including cloud hosting and database services, payment processing, email delivery, and AI/model services. Providers receive only the information reasonably needed for the function they perform, subject to their applicable terms and Create Lume configuration.
Organization isolation and access
Customer organization data is scoped to the authenticated organization. Platform administrators may access records when needed to operate, secure, support, audit, or troubleshoot the service.
Retention
Cancellation does not promise immediate deletion. Create Lume may retain account, billing, audit, support, grant-work, backup, and security records when needed for operations, fraud prevention, financial records, dispute handling, legal obligations, recovery, or other legitimate service needs.
Your requests
Use the Support page for access, correction, deletion, privacy, or account questions. We may need to verify identity and organization authority before acting on a request.
Security
Create Lume uses authentication, tenant scoping, audit controls, encrypted HTTPS transport, managed cloud services, and guarded deployment processes. No online service can guarantee absolute security; please report suspected security issues through Support and do not submit passwords, payment card numbers, or other secrets.
Changes
We may update this policy as the service changes. Material revisions will receive a new policy version and updated effective date.