Privacy Policy

Information you provide: name, email, account credentials, billing details (processed by Stripe), and the topics, scripts and assets you submit to generate videos.

Automatically collected: IP address, device and browser information, pages viewed, and actions taken, via cookies and similar technologies (see our Cookie Policy).

From integrations: when you connect a social account, we receive the tokens and profile data needed to publish on your behalf.

• Provide, operate and improve the service (including generating and publishing your videos)
• Process payments and manage subscriptions
• Communicate with you about your account, updates and support
• Monitor for fraud, abuse and security incidents
• Comply with legal obligations

We rely on the following legal bases: performance of our contract with you, your consent (for example, marketing and non-essential cookies), our legitimate interests, and legal obligations.

We do not sell your personal information. We share it only with:

• Service providers / subprocessors who help us operate — hosting, our payment processor (Stripe), and AI providers used to generate content
• Social platforms you explicitly connect, to publish your content
• Authorities where required by law, or to protect rights and safety
• A successor in the event of a merger, acquisition or asset sale

To generate your videos, the topics and scripts you submit may be sent to third-party AI providers. We instruct providers not to use your content to train their models where that option is available. Do not submit sensitive personal data you do not want processed this way.

We keep your information for as long as your account is active and as needed to provide the service, then for the period required to meet legal, tax and accounting obligations. You can request deletion at any time (see Your rights).

Your information may be processed in countries other than your own, including the United States, where several of our processors (payments, AI generation, hosting) operate. Under PIPEDA this means your information may be accessible to foreign courts and law enforcement. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers outside the EEA/UK, and we remain accountable for information transferred to our processors.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, to object to processing, and to withdraw consent.

To exercise any of these rights, email privacy@lomu.ai. We will respond within 30 days, as PIPEDA requires.

If you are in Canada and are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376). Residents of Quebec, British Columbia and Alberta also have rights under their provincial privacy legislation, and can complain to their provincial commissioner. Elsewhere, you may complain to your local data-protection authority.

Canada's Anti-Spam Legislation (CASL) applies to the commercial messages we send. We send marketing email only with your express or implied consent, always identify ourselves and include our mailing address, and include a working unsubscribe link in every message.

Unsubscribing takes effect within 10 business days and never affects service emails such as receipts, security alerts or publishing failures. To opt out of everything optional, use the link in any message or email privacy@lomu.ai.

We use administrative, technical and physical safeguards designed to protect your information, including encryption in transit. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

The service is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time and will post the new version here with a revised date.

For any privacy question, contact privacy@lomu.ai or write to [Registered business address].