Privacy Policy
This policy describes what information Luminography, operated by RKBradford Corporation ("we", "us"), collects through the admin console and display devices (together, the "Service"), and how it's used. By creating an account or using the Service, you agree to this policy.
1. Information We Collect
Account information
When you create an account, we collect your email address and, if you sign in with Google, the name and profile information Google shares as part of that sign-in. Passwords are stored using standard ASP.NET Identity hashing — we never see or store your password in plain text.
Screens and display data
Each display you register gets a unique device identifier, and we store the screen's name, theme, orientation, brightness, and other settings you configure for it. Display devices connect to our servers to receive live updates and do not require you to sign in on the screen itself.
Content you provide
Depending on which display themes you use, you may provide us with content to show on your screens, including:
- Photos you upload to your photo library (stored in Azure Blob Storage)
- Calendar feed addresses (iCal/webcal URLs) you add so a screen can show your events
- Property or household information for a Welcome Screen (guest names, Wi-Fi network name and password, check-in instructions, house rules) — this is sensitive information you choose to display; store it only if you're comfortable with it appearing on that screen
- Chores, shopping lists, countdown events, and similar content you type in
Connected third-party accounts
Some themes let you connect an external account so a screen can show live data from it. We only request the access each integration needs, and only fetch data for the account you connect. The integrations currently available are:
- Google Calendar — reads your calendar events to show on the Agenda and Calendar themes
- Google Tasks — reads your task lists for dashboard widgets
- Google Photos — reads photos from albums you choose for photo-based themes
- Google Places — used to look up local points of interest near a property's location for certain themes
- Google Nest — reads thermostat status and lets you adjust it from a Welcome Screen, if you connect a Nest account
- Spotify — reads your currently-playing track to show on the Music theme
- Unsplash — used to source stock background photos for certain themes; this does not involve your personal account, only a shared API connection we maintain
Billing information
If you upgrade to a paid plan, payment is processed by Stripe. We never see or store your full card number — we keep only your subscription status and a Stripe-issued customer reference so we can manage your plan.
Usage and analytics data
We use Google Analytics to understand overall usage of the admin console (pages visited, general traffic patterns). We do not use it on display devices, and it is not used to build advertising profiles.
Cookies
The admin console uses a session cookie to keep you signed in. Display devices do not sign in and instead keep an anonymous device identifier in the browser's local storage on the device itself, not a cookie.
2. How We Use Your Information
We use the information above to:
- Operate the Service — register your screens, apply your settings, and deliver live updates
- Fetch and display the content you've asked a screen to show (calendar events, photos, weather, etc.)
- Process billing for paid plans
- Send you service-related email (e.g. account verification, billing receipts)
- Maintain the security of the Service and investigate abuse
- Understand aggregate usage so we can improve the product
We do not sell your personal information, and we do not use your content to serve ads.
3. How We Share Your Information
We share information with the third-party services necessary to run the Service, each acting on our behalf under their own privacy terms:
- Microsoft Azure — hosting, our database, and photo storage
- Stripe — payment processing
- SendGrid — sending transactional email
- Google, Spotify, Unsplash — as described above, for the themes that connect to them
- Weather, sports, and news data providers (e.g. Open-Meteo, the National Weather Service, ESPN, TMDb, newsdata.io) — these provide read-only public data to display on relevant themes and do not receive your personal information
We may also disclose information if required by law, or to protect the rights, property, or safety of Luminography, our users, or the public.
4. Data Retention and Deletion
You can delete your account from Manage Account in the admin console. This removes your sign-in credentials. If you'd also like your screens, uploaded photos, calendar connections, and billing records fully erased, contact us at support@luminography.io and we'll process that manually.
5. Data Security
We use industry-standard measures to protect your information, including encrypted connections (HTTPS/WSS), hashed passwords, and signed, expiring URLs for private media. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
7. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to withdraw consent for a connected third-party account at any time by disconnecting it in the admin console. To exercise these rights, contact us at support@luminography.io.
8. International Data Transfers
Our servers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
9. Changes to This Policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do, and post material changes here.
10. Contact Us
Questions about this policy? Reach us at support@luminography.io.