Lumier Pictures Privacy Policy
This Privacy Policy describes how Lumier Pictures, Inc. ("we," "us") collects, uses, and protects your information when you use Lumier Pictures, an AI-assisted film production platform that helps creators write scripts, generate visual content, produce audio, and distribute their work.
1. Information We Collect
- Account data: Email address, name, OAuth provider ID (Google/Apple). When you sign in with Google, we receive your name, email address, and profile picture from your Google Account. We use this information only to create and identify your account and to sign you in. We do not share it with third parties except the service providers listed below, and we never sell it.
- Public filmmaker page (optional): A public filmmaker page showing your name, photo, username and published films exists only after you turn it on in My Profile, publish to Lumier Club or open your profile to commissions; it is off by default and you can switch it off again at any time.
- Project data: Scripts, scene descriptions, generated images and videos, audio files, character references. Stored in Supabase (us-west-2 region).
- Billing data: Subscription status, credit balance, Stripe customer ID. We do not store card numbers. Stripe handles payment data under PCI-DSS compliance.
- Usage data: Render counts, feature usage, session duration. Used to improve the Service and enforce plan limits.
- Optional product measurement: When enabled, page-performance metrics and basic project-progress events use a session identifier linked to your account after sign-in. These events exclude scripts, project names and media. You can opt out through the homepage measurement preferences. Do Not Track and Global Privacy Control signals are honored. Internal venture reporting receives aggregates.
- Site analytics (optional): With your permission, PostHog records a limited set of public page visits, actions and campaign-placement codes. An anonymous key is kept in this tab to count a public journey; it is never attached to your contact details, account or billing record. Session replay and private workspace measurement are off. Essential only keeps analytics off, and you can change your choice using Analytics preferences. Do Not Track and Global Privacy Control override an earlier acceptance.
- Error data: Crash reports and error logs via Sentry to diagnose bugs.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To authenticate you and keep your account secure.
- To enforce plan limits and process billing.
- To send transactional emails (receipts, trial expiry notices).
- To diagnose technical issues.
- We do not sell your data. We do not use your content to train AI models without explicit opt-in.
3. Face and voice data
Some features work from a real person’s face or voice. This section says what is kept, why, where, for how long, and how to delete it.
- Reference photos: the portraits you upload for a character, the Self Actor photo turnaround, and the portraits the app generates.
- Facial DNA text: a written description of a face’s structure (32 parameters) that Identity Lock produces from a portrait. It is stored with the character and sent with prompts to the image and video engines you render with.
- Face descriptors: a 128-number face template computed in your browser from a character’s portrait when you run Identity QC, stored with the character so later takes can be compared with it.
- Voice samples and clones: the recordings you make or upload for cloning, the cloned voice held at ElevenLabs, and the voice-consent text you accepted, stored with the voice id.
- Camera takes: an Act It Out clip of up to 20 seconds, sent once to describe the delivery and not stored.
- Likeness attestation: the version you accepted, when, and from which account, stored with the production.
Purpose: to keep a character’s face consistent across shots (Identity Lock, Identity QC), to let dialogue be spoken in a cloned voice, and to turn a performed take into direction. We do not use face or voice data to recognise people across accounts, for advertising, or to train models. A real person’s photo or take is analysed only after you confirm the likeness attestation.
Where it is stored: face descriptors, Facial DNA text and the attestation live inside your production record in Supabase (the region named under Project data above); photos and voice samples live in our media storage there, under links that are not listed anywhere but can be opened by anyone who has the link; your Cast Master registry keeps a per-account copy of each actor (Facial DNA text included, the face descriptor is not copied) so you can reuse actors across productions; cloned voices are held at ElevenLabs.
Retention: for as long as the character, the production or the voice exists. Deleting a character removes its Facial DNA text and face descriptor from the production and from your Cast Master registry; deleting a production removes all of its characters and their face data; the thirty-day Trash holds scene photos and clips, never face or voice data. Deleting your account removes the rest within 30 days.
How to delete: remove the actor in the Casting Board, or delete the production from Productions. To delete a cloned voice, a stored photo or voice sample, or your whole account, email legal@lumierpictures.com and we will complete the deletion, including at ElevenLabs, within 30 days.
4. Who receives your data
These are the companies and services that receive your data, what each receives, and where their own privacy policy lives. Our servers send to the first group; the second group is contacted by your browser directly, so each of them sees your IP address and browser details.
- Supabase: your account (email, name, OAuth id, and your phone number if you sign in by text message; the one-time code is delivered by the text-message gateway configured in Supabase Auth), your productions as JSON (scripts, characters, Facial DNA text, face descriptors, the likeness attestation), the media you upload or generate, your Cast Master registry, credits and billing state, and voice-ownership records with the consent text you accepted (supabase.com/privacy)
- Google (Gemini, Veo, Imagen, Vertex AI): scripts, scene text, character descriptions, reference portraits for Identity Lock analysis, Act It Out takes, and prompts with reference frames for image and video generation; a YouTube link you paste for a video study is fetched from YouTube by our server (policies.google.com/privacy)
- Google Maps Street View: the address or place name you type, for a location reference still, when enabled (policies.google.com/privacy)
- Kling AI: prompts and reference images for video generation, processed in Singapore (platform.klingai.com)
- BytePlus (Seedance, Seedream, OmniHuman): prompts, Facial DNA text, reference portraits, first and last frames, voice-lock reference audio, and the plate and dialogue audio for lip sync, processed in the Asia-Pacific region; your selected video for a 4K Master through AI MediaKit when enabled (byteplus.com/en/privacy)
- Topaz Labs: your selected source video for a 4K Master when Topaz upscaling is enabled (topazlabs.com/privacy)
- Luma Agents: your selected source video and frame-expansion request when you choose AI video reframing (lumalabs.ai/legal/privacy-policy)
- Higgsfield: prompts and reference images for video generation (higgsfield.ai/privacy)
- ElevenLabs: dialogue text, voice samples you record or upload for cloning, and the resulting voice ids (elevenlabs.io/privacy)
- Replicate: audio you separate into stems and other audio or video inference inputs (replicate.com/privacy)
- OpenAI: prompts and reference images for image generation and edits, and some text tasks (openai.com/policies/privacy-policy)
- Anthropic: script text and production notes on the Claude, Director’s Cut and Claude Fable tiers (anthropic.com/privacy)
- DeepSeek: your premise, brief and script pages, only on the DeepSeek tier after you agree to its notice; DeepSeek is based in China and stores what it receives on servers in China (cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html)
- Suno (via sunoapi.org): music prompts and lyrics (sunoapi.org)
- Freesound: sound-effect search queries (freesound.org/help/privacy)
- fal.ai: the video clip you choose for foley from picture, when that engine is enabled (fal.ai/privacy)
- Stripe: billing identity and subscription state; card numbers never reach our servers (stripe.com/privacy)
- Resend: your email address, name and plan, for transactional and lifecycle email (resend.com/legal/privacy-policy)
- Vercel: hosting and edge logs (IP address, browser details), and optional Web Analytics (vercel.com/legal/privacy-policy)
- Amazon Web Services (Remotion Lambda): timeline JSON and media links for a cloud render, when cloud rendering is enabled (aws.amazon.com/privacy)
- Gilded Edge Group (our parent company): a reference number for your waitlist entry, without your name or email (gildedge.com)
Contacted by your browser directly:
- Sentry: error reports from the app in your browser, which may include request metadata (sentry.io/privacy)
- PostHog: optional anonymous analytics on public pages after you accept analytics (posthog.com/privacy)
- Google Fonts: font files on every page, so Google sees your IP address and browser details (policies.google.com/privacy)
- unpkg.com: the PDF reader worker when you upload a PDF script; the script itself is not sent (cloudflare.com/privacypolicy)
- Unsplash: mood-board search terms when the stock search is configured, and decorative images (unsplash.com/privacy)
- picsum.photos: placeholder images for production templates (picsum.photos)
- Your browser’s speech service (Apple, Google or Microsoft): audio while you dictate, handled by the browser’s own speech recognition (the browser vendor’s policy)
5. Data Retention
Optional product-measurement events use a scheduled 90-day retention window. Account-linked events are deleted when the account is deleted.
We retain your account and project data for as long as your account is active. You may request deletion of your account and all associated data by emailing legal@lumierpictures.com. We will process deletion within 30 days.
6. Your Rights (GDPR / CCPA)
- Right to access, correct, or delete your personal data.
- Right to data portability. You can export your projects at any time from the app.
- Right to opt out of non-essential communications.
- California residents: you have the right to know what personal information we collect and to opt out of its sale (we do not sell personal information).
To exercise these rights, email legal@lumierpictures.com.
7. Security
All data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel. We conduct regular security reviews.
8. Changes
We will notify you of material changes to this policy by email or in-app notice 30 days before they take effect.
9. Contact
Privacy questions: legal@lumierpictures.com