Legal documents
Privacy notice
This is lumHUB’s full privacy notice. It explains who processes your personal data, what data it is, what we use it for, who it is shared with, and how you can access it, correct it or ask us to delete it. It is written to be understood without a law degree.
In short
- Your files stay with youThe tools process images, PDFs and codes in your browser. We do not receive or store them.
- Measurement is optionalIt only starts if you accept, and you can change your mind at any time from «Measurement preferences» in the footer.
- No third-party advertisingWe do not sell your data or show third-party ads. Google Analytics only runs if you allow measurement, and never for advertising.
- Your rights, by emailTo access, correct, delete or object, write to contacto@lum360.com.
Who is responsible
LUM360 is the controller of your personal data on lumHUB (lumhub.app), a LUM360 product.
- Address: Supermanzana 320, Manzana 1, Lote 3, Cancún, Quintana Roo, Mexico.
- Email for privacy and rights requests: contacto@lum360.com.
- Phone and WhatsApp: +52 998 222 3447.
“We” means LUM360. This notice is based on Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and, for visitors from the European Union, on the General Data Protection Regulation (GDPR) where it applies.
What data we process and when
We only process the data each situation needs. This table summarises what happens when you use lumHUB:
| When you… | What data we process | What for |
|---|---|---|
| Browse lumHUB | Technical connection data: IP address, browser, system, date, time and requested page. They are kept in server logs and in temporary rate-limit counters. | Show the site, protect it from abuse and fix faults. |
| Use a tool, game or course | Your files and texts are not sent to lumHUB. If you have an account, allowed output preferences (format, quality, size), a history of exports you started without names or content, and your progress and records are synced. Course notes stay in your browser. | Provide the tool and keep your progress across devices. |
| Allow measurement | Aggregated usage data described in “Optional first-party measurement”. | Improve lumHUB. Only with your permission. |
| Create an account | Verified email address, name and, if you add one, a profile photo, plus your sign-in method. On lumHUB we store your profile (display name, bio, colour, language and appearance), favourites, achievements and streak, synced progress and the suggestions you send. | Create and maintain your account and handle your requests. |
| Register or manage a business | Listing data: name, category, description, localities and branches, address, phone, WhatsApp, website, social links, opening hours, catalogue, photos and FAQs; the account of the person managing it, and the history of reviews and moderation decisions. | Review, publish and maintain the listing. Anything you publish can be seen by anyone. |
| Use the guide assistant | The text you type and a short session context (topic, filters and selected listings). The history is only saved if you tick the box. | Answer your question. |
| Send a suggestion | Your message, its type, the module you wrote from and your account if you are signed in. | Review bugs, ideas and feedback. |
| Write to us by email, WhatsApp or phone | What you share with us: name, contact method and message. | Handle your message. |
| Contact a business from its listing | If you allowed measurement, we count the click on the button (channel and listing). The message or call happens on WhatsApp, your phone or another service and does not go through lumHUB. | Know which listings and channels are used. |
Sensitive data and minors
We do not ask for sensitive personal data (health, racial or ethnic origin, beliefs, sex life, biometric data or similar). Please do not write it in the assistant, in suggestions or in listings.
lumHUB is not aimed at people under 18 and does not knowingly create accounts or business listings for minors. If you believe a minor has given us data, write to us and we will delete it.
What we use your data for
Necessary purposes
- Provide, maintain and protect the site, tools, games and courses.
- Create your account, sign you in and sync your progress.
- Review, publish and moderate business listings.
- Answer the assistant, suggestions and your requests.
- Meet legal obligations and honour your rights.
Optional purpose
- Measure in aggregate how lumHUB is used so we can improve it. Only with your permission.
We do not use your data to profile you for advertising, we do not sell it and we do not hand it to third parties for their own marketing.
Optional first-party measurement
If you allow it, we measure in aggregate with lumHUB’s own tools:
- Pages, usage, visible time and scrolling.
- Directory searches (normalised, without emails or phone numbers), filters, listing views and contacts.
- Performance (bucketed Web Vitals) and errors: only a fingerprint of the message, the file and line, and the route family of broken links.
- Steps in tools, games and courses: file format family and size range, duration range, failure kind and lesson passed or not, never names or content.
- The submission of a business listing for review, use of the command palette, the live map and the share buttons (only the action, the result group, the locality or the network, never what you type).
- Also the week in which you allowed measurement (a Monday shared by everyone who accepted that week), broad source and campaign tags, screen class, theme and clicks to LUM360.
Measurement does not store file content, chat text, IP or account identity. The measurement identifier changes every day. Detailed events are deleted after 180 days and errors after 90; daily summaries without identifiers are kept for up to 37 months. If you turn it off, the events tied to your current session are deleted.
With the same permission we use Google Analytics 4 (by Google, through Google Tag Manager) for aggregated statistics on visits, referral source, device and approximate region, plus a copy of the events listed above with the same closed values. We never send Google typed searches, text, files, emails, phone numbers or account identity, and we strip from addresses any parameters that could contain them. Google Analytics uses the _ga and _ga_95MK010SJZ cookies and receives your IP address to deliver the data and estimate your region, but does not store it; it keeps event data for 14 months and may process it outside Mexico. Google signals, ad personalisation and remarketing are turned off. If you withdraw permission, we stop loading it and delete its cookies.
Guide assistant and suggestions
The assistant is a navigation guide based on rules and content published on lumHUB. It does not send your text to an external language-model provider.
- It receives the text you type and keeps a short session context such as topic, filters and selected listings.
- It stops using that context after 20 minutes of inactivity, and you can reset it with “New conversation”.
- Saving message and reply history is optional and requires ticking its box. You can delete your saved conversation from the guide during your session.
- When you send a suggestion, the message is saved in a private inbox that only authorised team members can open.
Who we share your data with
We do not sell your data. We share it only with providers who help us run lumHUB and who process it on our instructions:
| Provider | What for | What data |
|---|---|---|
| Clerk | Sign-up, sign-in and account management. | Email, name, photo, sign-in method and technical session data. It may process them outside Mexico. |
| Hostinger | Hosting of the site and its database. | The data lumHUB stores and technical server logs. |
| Google (Google Analytics and Tag Manager) | Site usage statistics, only if you allow measurement. | Random identifier in a cookie, pages visited, usage events with closed values, technical browser data and approximate region derived from the IP address. It may process them outside Mexico. |
| Google (Google Maps) | Interactive map and route inside lumHUB, only if you press «Load Google map». | Your IP address, the destination and, if you enter one, your starting point; Google may use its own cookies. It may process them outside Mexico. |
We may also disclose data to an authority when a law or a reasoned order requires it, or to protect rights, people’s safety or the integrity of the service. International transfers to Clerk are necessary to provide the account service you request. Transfers to Google only happen if you allow measurement.
When you open a link to WhatsApp, Google Maps, a social network, a business’s site or lum360.com you leave lumHUB and that site’s policies apply. If we change providers we will update this list.
Business listings and other people’s data
If you register a business, you decide which contact and operating details to publish. By submitting the listing you confirm that you have the right to publish that information and that, if it includes other people’s data (for example a colleague’s phone number), you have their permission.
Some listings may be created by our team from information the business itself has made public. If you own a business and want to correct or remove its listing, write to contacto@lum360.com.
How long we keep your data
| Data | Retention |
|---|---|
| Detailed measurement | 180 days (errors, 90). Daily summaries without identifiers, up to 37 months. |
| Technical session | Until you close the browser; the server invalidates it after 30 minutes of inactivity and after 12 hours at most. |
| Account, profile, progress, favourites and achievements | As long as your account exists. They are deleted when we handle your request (see Delete account). |
| Suggestions and saved conversations | As long as needed to handle them and improve the service, or until you ask for deletion. |
| Business listings | While the listing is active; once removed it stops being public. The review and moderation history may be kept as a control record until you ask for deletion, unless the law requires keeping it. |
| Technical server logs | The limited time set by the hosting provider for security and diagnostics. |
| Messages you send us | As long as needed to help you and as required by applicable legal obligations. |
Once the period ends we delete or anonymise the data.
How we protect your data
- Encrypted connection (HTTPS) and a strict content policy that limits what code can run on the site.
- Protected sessions (HttpOnly, SameSite) and protection against forged requests (CSRF).
- Restricted administrative access, with permissions always checked on the server.
- Usage limits and validation of received data to curb abuse.
- Minimal collection: measurement does not store file names, content, IP or account identity.
No system is infallible. If a breach significantly affects your property or moral rights, we will tell you without delay so you can take action.
Your rights and how to exercise them
You can exercise the so-called ARCO rights and related ones at any time:
- Access: know what data of yours we process and how we use it.
- Rectification: correct inaccurate or incomplete data.
- Cancellation: ask us to delete your data when it is no longer needed or is processed improperly, except what the law requires us to keep.
- Objection: object to your data being used for specific purposes.
- Withdraw your consent and limit the use or disclosure of your data.
If you are in the European Union or the European Economic Area you can also request data portability and restriction of processing, and lodge a complaint with your supervisory authority.
How to make a request
- Write to contacto@lum360.com (or use the “Exercise my rights” button on this page), from your account’s email if you have one.
- Give your name, a way to reply to you and which right you want to exercise, with a clear description of the data it concerns.
- Attach a document proving your identity or, if you act for someone else, your representative’s.
- We will reply by the same means, within the period set by law, saying whether your request is granted and how we will carry it out.
It is free of charge. We could only charge justified costs of copying or sending information. If you are not satisfied with our answer, you can go to the Secretaría Anticorrupción y Buen Gobierno, Mexico’s authority for the protection of personal data held by private parties.
To delete your account and its data, see Delete account.
Cookies and local storage
lumHUB uses cookies and local storage, almost all of it to make the site work and remember your preferences. Details of each one and how to control them are in Cookies.
Changes to this notice
We may update this notice when lumHUB or the law changes. We will publish the current version on this page with its number and date. If a change materially alters what we use your data for, we will say so visibly on the site and, where the law requires, ask for your consent again.
Version 1.0 · 2 November 2026: first final version.
Version 1.1 · 4 November 2026: Google Analytics 4, only with your measurement permission.
Version 1.2 · 4 November 2026: interactive Google Maps map in «Directions» and on business pages, only if you load it.
Questions about this document?
Write to us and a member of the LUM360 team will reply. Please do not include passwords or bank details in your message.
- Emailcontacto@lum360.com
- WhatsApp+52 998 222 3447
- Phone+52 998 222 3447
- AddressSupermanzana 320, Manzana 1, Lote 3, Cancún, Quintana Roo, Mexico