Privacy Policy
Platform privacy terms for salon operations and messaging.
This Privacy Policy explains how Luma collects, uses, stores, and protects information when businesses use the platform and when individuals interact with Luma-powered workflows, communications, and customer experiences.
Last updated: April 22, 2026
Information we collect
We collect the information needed to operate salon software and related communications. That may include names, email addresses, mobile phone numbers, account credentials, appointment details, membership and package information, visit history, transaction records, support interactions, and customer or staff information entered into the platform by a business using Luma.
We also collect payment-related information needed to support billing and transaction workflows through approved payment providers, along with technical information such as browser type, device information, IP address, cookies, and usage logs.
How we use information
We use information to provide and operate the platform, authenticate users, manage appointments, memberships, packages, billing, reporting, and device-aware workflows, maintain audit history, provide customer support, and improve platform reliability and security.
We may also use contact information to send service-related notices, billing alerts, account notifications, support communications, product updates, and marketing communications where consent has been provided or where otherwise permitted by law.
SMS and mobile information
Luma may be used to send transactional and promotional text messages, including account notifications, billing notices, reminders, support updates, product updates, and promotional offers. Message frequency varies. Message and data rates may apply depending on the recipient's mobile plan.
Businesses using Luma are responsible for obtaining any legally required consent before sending marketing or promotional text messages through the platform. Text recipients can opt out at any time by replying STOP and can request help by replying HELP.
Mobile information will not be shared or sold to third parties for marketing purposes. Text messaging originator opt-in data, consent records, and related mobile numbers are not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes.
How we share information
We share information only as reasonably necessary to run the platform and support our customers. That includes service providers for hosting, infrastructure, communications delivery, analytics, payment operations, customer support, and security.
We may also disclose information when required by law, to enforce our agreements, to investigate or prevent misuse, to protect users and the public, or in connection with a merger, financing, or sale of assets.
Cookies and tracking
Luma websites and platform experiences may use cookies and similar technologies to remember preferences, maintain sessions, support analytics, measure traffic, and improve site and product performance.
Security and retention
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain information for as long as needed to provide the service, maintain billing and audit records, resolve disputes, enforce agreements, and comply with legal obligations.
Requests to update or delete information
Authorized users may update account information through the platform. End-customer requests to access, correct, or delete information should generally be directed to the business that collected the information through Luma.
Where platform assistance is required, businesses using Luma may submit requests through their existing Luma support channel. We may retain certain information where needed for legal, security, billing, audit, or compliance purposes.
Children's privacy
Luma is intended for business use and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through public-facing experiences.
Policy updates
We may update this Privacy Policy from time to time. When we do, we will revise the effective date on this page and, when appropriate, provide additional notice through the service.
Contact
Privacy questions should be directed through your existing Luma support channel or through the Luma website.