Luma Motion

Luma Motion Privacy Policy

Effective October 10, 2026

This policy explains how Luma Motion ("we", "us") collects, uses and protects personal information when you use the Luma Motion software, your Luma Motion account, the Luma Motion Store and the website lumamotion.app. We follow the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA") and Canada's anti-spam legislation ("CASL").

1. The short version

  • Luma Motion runs on your computer. Your projects, media and videos stay on your computer. We never see them unless you send them to us yourself, for example in a support request.
  • An account is optional. You need one only to install modules, use a plan or the all-modules pass, or redeem a licence key.
  • We collect what we need to run your account and licences, take payments, stop misuse and answer support. We don't sell personal information and we don't use advertising trackers.
  • We send marketing email only if you opt in, and you can unsubscribe at any time.

2. What we collect

Account details. Your email address, your name (if you give it), and a password managed by our sign-in provider (we never see it in plain text). If you sign in with Google, we receive your name, email address and profile photo from Google. We don't receive access to your Google Drive, contacts or any other Google data.

Computers. When you sign in on a computer, we store an identifier derived from that computer, its name (for example "Studio PC"), its operating system, the Luma Motion version, and when it was first and last used. This is how we keep your account to 2 computers and let you remove one.

Purchases and licences. Your plan, the modules you own or install (with version and date), your all-modules pass status, licence keys you redeem, and records of purchases, refunds and chargebacks. Module files we deliver to you contain an identifier for your account, so that copies shared without permission can be traced.

Payments. Payments are processed by Stripe. Your card details go directly to Stripe and are never stored by us. Stripe gives us the purchase amount, currency, a customer reference and your email address. Stripe's own privacy policy applies to the information it processes.

Email preferences. Whether you agreed to receive news and offers, and when and where you gave or withdrew that consent.

Security records. The IP address of a request and the type of event, kept only for rate limiting and to detect abuse (for example repeated wrong licence keys). These records are deleted automatically, usually within 90 days.

Support and contact. What you send us through the contact form or by email (your name, email address and message), including any files you choose to attach.

What we don't collect. We don't collect your projects, compositions, media, renders, the contents of your DaVinci Resolve projects, or analytics about how you use the editor.

3. Why we use it

We use personal information only to:

  • create and run your account and let you sign in, including with Google;
  • activate plans, modules and the pass on your computers, and keep them working offline;
  • sell licences, take payment, issue receipts, process refunds and handle chargebacks;
  • send account and transactional emails (welcome, purchase confirmation, password reset, security notices). These are not marketing and are always sent;
  • send news and offers, only if you opted in;
  • prevent fraud, unauthorized sharing of licences and modules, and abuse of our services;
  • answer support requests; and
  • meet our legal, tax and accounting obligations.

4. Who we share it with

We share personal information only with service providers that help us run Luma Motion, under contracts that require them to protect it and use it only for us:

  • Google Firebase and Google Cloud (sign-in, database, file storage, hosting of our servers and website);
  • Stripe (payments, receipts, refunds);
  • Resend (sending email, including messages you send through our contact form, and managing the marketing list);
  • Google (only if you choose "Continue with Google").

We may also disclose information when required by law, to protect our rights or prevent fraud, or as part of a merger, acquisition or sale of our business (in which case this policy continues to apply). We do not sell or rent personal information.

5. Where it's stored

Our servers and database are hosted by Google Cloud in the United States (region us-east4), and our service providers may process information in the United States or other countries. Information stored outside Canada is subject to the laws of that country, and may be accessible to its courts and authorities.

6. How long we keep it

We keep account information while your account is open. If you ask us to delete your account, we delete or anonymize your personal information within 30 days, except purchase and tax records, which we must keep for the period required by Canadian tax law (generally 6 years). Security records are deleted automatically, usually within 90 days.

7. Cookies and storage

The website uses only the storage needed to sign you in (our sign-in provider stores your session in your browser) and to complete checkout on Stripe. We don't use advertising or analytics cookies. The Luma Motion app stores your settings, licence and account session on your own computer.

8. Your choices and rights

You can:

  • see and change your name and email preferences in Preferences › Account in Luma Motion;
  • unsubscribe from marketing email with the link in any of those emails or in Preferences › Account;
  • remove a computer from your account in Luma Motion;
  • ask us for access to the personal information we hold about you, or to correct it;
  • withdraw consent (which may mean we can no longer provide parts of the service); and
  • ask us to delete your account.

Email legal@lumamotion.app (or use lumamotion.app/contact) to make a request. We'll answer within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9. Security

We use encryption in transit, signed licences, access controls and rate limiting to protect your information, and we limit access to the people who need it. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify you and the Privacy Commissioner as PIPEDA requires.

10. Children

Luma Motion is not directed at children under 13, and we don't knowingly collect their personal information.

11. Changes

We may update this policy. We'll post the new version here with its effective date, and tell you in the app or by email if the changes are significant.

12. Contact

Privacy Officer, Luma Motion
Toronto, Ontario, Canada
Email: legal@lumamotion.app