Privacy policy
Who is responsible for your data
- Company
- Luminari ERP
About this policy
Luminari ERP runs a business management system for its clients, its team and its marketing work. This page explains what personal data the system holds, who handles it for us, how long we keep it and how you can ask us to delete it.
We keep only what we need to serve our clients and to run the business, and we do not sell personal data.
What data we keep
- Contact details of clients and people who ask about our services: name, phone numbers, email addresses, company and the notes and messages exchanged with us.
- Messages and call records between us and clients or leads, including WhatsApp conversations and their attachments.
- Business records: quotes, contracts, invoices, payments, projects, tasks and the files delivered to clients.
- Our team members: name, work email, role and sign-in security information.
- Social media accounts that a client lets us manage: the account name and the access key given by the platform, the posts we schedule and publish for the client, their reviews and their performance figures.
- Technical records for security: sign-in events, the time and the network address of important actions.
Connected platforms and service providers
The services below can be connected to our system. Each one receives only what is needed for its purpose, and each has its own privacy policy.
| Company | Services | What it is used for | Its privacy policy |
|---|---|---|---|
| WhatsApp (Meta) | Sending and receiving WhatsApp messages with clients and leads, with their attachments. | Read it | |
| Meta Platforms | Facebook, Instagram, Threads | Publishing posts and reading performance figures for the Facebook Pages, Instagram business accounts and Threads profiles that clients connect. | Read it |
| Google Business Profile | Publishing posts, reading reviews and replying to them, and reading performance figures for Google Business Profile locations that clients connect. | Read it |
Other service providers
We also use a hosting provider for our servers and an email provider to send messages. They process data only on our instructions.
How long we keep it
We keep personal data while the person is our client or lead and for as long as the law requires us to keep business and tax records. Access keys to social platforms are kept only while the account is connected and are deleted when it is disconnected.
Data we no longer need is deleted or made anonymous. Backups are encrypted and replaced on a regular schedule.
Disconnecting from Facebook, Instagram, Threads and Google
When someone removes our app from their Facebook, Instagram or Threads settings, or asks Meta to delete their data, Meta tells our system. We then disconnect the account at once, delete the stored access keys and the details we received from the platform, and keep a confirmation code. You can check the state of a request on its status page with that code. The status page shows no personal data.
Your rights and how to ask for deletion
You may ask us to show you the data we hold about you, to correct it, or to delete it. Write to us at the contact details above, using the same phone number or email we know you by, and we will answer within a reasonable time.
To remove our access to a Facebook, Instagram or Threads account, remove our app in that platform's settings. Its deletion request is sent to us automatically and we will delete what we received from it.