How Lumra handles your information.

1. Who we are

Lumra Guard operates Lumra, a pre-payment invoice verification service designed to help businesses verify supplier bank details before approving payment.

In this policy, “Lumra”, “we”, “us” and “our” refer to Lumra Guard as the operator of the Lumra website and service.

2. What information we collect

We may collect and process the following kinds of information:

• account information such as name, email address and login details
• business information connected to your use of the service
• supplier identity details such as supplier names, ABNs and domains
• invoice-related information entered or processed through the service
• bank-detail information used for verification workflows
• scan history, verification events and audit trail records
• technical and usage information such as browser type, device information, logs and diagnostics

3. How we collect information

We collect information when you:

• create an account or update your profile
• connect Lumra to third-party services such as Xero
• enter invoice, supplier or bank-detail information into the platform
• use password reset, login or account settings features
• contact us or submit enquiries through the website
• use the website and service in the ordinary course

4. How we use information

We use information to:

• provide and operate the Lumra service
• verify supplier payment details and generate scan results
• maintain scan history and audit trail records
• manage user accounts, authentication and security
• communicate with users about service-related matters
• improve reliability, performance and usability
• monitor, investigate and protect against misuse, fraud or security issues
• comply with legal obligations

5. Xero and third-party services

If you connect Lumra to Xero or another third-party service, we may receive and process information from that service in order to provide the workflow you have requested.

Your use of third-party services is also subject to the privacy terms and policies of those providers.

6. Data storage and security

We take reasonable steps to protect information against misuse, interference, loss and unauthorised access, modification or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Disclosure of information

We may disclose information:

• to service providers who help us operate the website and service
• where required by law, regulation or legal process
• to protect our rights, users, systems or the public
• in connection with a sale, transfer or restructure of the business, subject to appropriate safeguards

We do not sell personal information to advertisers.

8. Data retention

We retain information for as long as reasonably necessary to provide the service, maintain records, meet legal obligations, resolve disputes and enforce our agreements.

9. Access and correction

You may request access to personal information we hold about you, and you may ask us to correct inaccurate or outdated information, subject to legal and operational limits.

10. Cookies and analytics

We may use cookies or similar technologies to support site functionality, security, analytics and user experience. You can usually control cookies through your browser settings.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page, with the updated effective date shown above.

12. Contact us

If you have questions about this Privacy Policy or how your information is handled, please contact us at:

[INSERT CONTACT EMAIL]