Skip to content

Privacy Policy

Last updated: October 3, 2026

LumeLogix ("we", "our", or "us") provides a free AI-readiness scanner for websites. This Privacy Policy explains what data we collect, how we use it, and your rights.

What we collect

From free scans

  • Website URL: The URL you submit for scanning
  • Website content: We crawl your public homepage and up to 10 linked pages (HTML, robots.txt, sitemap.xml, and linked resources), similar to how search engine crawlers work
  • Business information: We infer your business name, category, and location from your website content, or use what you provide
  • IP address: We log your IP address temporarily for rate limiting (to prevent abuse) and daily scan caps
  • Scan results: We store the complete scan results, including your score, issues found, fixes, and AI mention test results

From optional account sign-up

If you create an account for the $29/month monitoring plan:

  • Email address: Used for account sign-in and alerts
  • Google profile information: If you sign in with Google, we receive your email address and profile information from Google
  • Payment information: Processed by Stripe (we never see or store your card details)
  • Session data: We store login sessions to keep you signed in
  • Site monitoring data: URLs and locations of sites you monitor, scan history, and alert preferences

Cookies

We use essential cookies for authentication (keeping you signed in) and Google Analytics cookies to understand how visitors use our site. We do not use advertising or tracking cookies for marketing purposes.

How we use your data

  • To provide the scan: Crawl your public pages, analyze technical setup, check AI crawler access, and score your site's AI-readiness
  • For AI mention testing: We send limited data to OpenAI (business name, category, location) to test whether AI assistants mention your business in answers. The free scan runs 3 sample queries; the monitoring plan runs more comprehensive queries weekly.
  • To generate fixes: Create actionable fixes, downloadable files (llms.txt, JSON-LD schema), and a public shareable report
  • For rate limiting: Prevent abuse by limiting scans per IP address (100 per day by default)
  • For monitoring (paid plan): Weekly automatic rescans, score history, AI mention tracking over time, and email alerts when your score drops
  • For billing (paid plan): Process payments via Stripe
  • For analytics: Google Analytics helps us understand site usage and improve the service

Who can access your data

  • Public reports: Anyone with your report link (lumelogix.com/r/[scan-id]) can view the full scan results. Only share this link with people you trust.
  • OpenAI: Receives your business name, category, and location for AI mention testing. OpenAI's use of this data is governed by their terms of use.
  • Google Analytics: Collects anonymized usage data to help us understand how visitors use the site. Google's use of this data is governed by their privacy policy.
  • Stripe: Processes payments for the monitoring plan. Stripe handles all card data; we never see or store it.
  • [PLACEHOLDER: Legal entity name]: Stores all data on our servers (MySQL database hosted on [PLACEHOLDER: hosting provider and region]).

We do not sell your data or share it with third parties for their own marketing.

Data storage and retention

We store data in a MySQL database:

  • Scan results: Stored indefinitely to power public report pages and site monitoring history
  • Rate limit data: IP addresses and request counts, reset daily
  • Account data: Stored while your account is active
  • Session data: Expires automatically after a period of inactivity

[PLACEHOLDER: Specific retention periods for deleted accounts, canceled subscriptions, and old scan data - owner to define]

Your rights

You can:

  • Request deletion of your scan data or account
  • Request a copy of your data
  • Cancel your monitoring subscription at any time (via your account dashboard or by contacting us)

To exercise these rights, contact us via our Contact page.

Security

We use industry-standard security practices including HTTPS encryption, secure session management, rate limiting, and SQL parameterization to prevent injection attacks. Payment processing is handled entirely by Stripe.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and may notify you via email if you have an account.

Contact

Questions about this Privacy Policy? See our Contact page.

Governing law

[PLACEHOLDER: Jurisdiction/governing law - owner to define based on legal entity location]