1. Who we are
Lumyn AI Ltd ("we", "us", or "our") is the controller for personal data we collect about users of the MarketFlow AI website, app, and related services (the "Service"). MarketFlow AI is our trading name. Lumyn AI Ltd is registered in Ghana.
Privacy contact: softcode25@gmail.com. For the registered office / principal place of business, email that address and we will provide it.
2. Information we collect
We may collect the following categories of information:
- Account information: name, email address, company name, password (stored securely hashed), and profile details you provide when registering.
- Business data: contacts, leads, campaign content, scheduled posts, CRM records, and analytics you upload or create in the platform.
- Connected account data: when you connect social media accounts (e.g. Facebook, Instagram via Meta), we receive tokens and profile/page information needed to publish on your behalf.
- Usage data: log data, device/browser type, IP address, pages visited, and feature usage to improve security and performance.
- Communications: messages you send to our support team.
- Payment information: we do not store full card numbers. International card and billing details are collected by Paddle as Merchant of Record. Ghana payments are collected by Paystack.
3. How we use your information
We use your information to:
- Provide, operate, and maintain the MarketFlow AI service (performance of a contract)
- Authenticate your account and secure the platform (legitimate interests: security)
- Publish and schedule content on connected social channels at your direction
- Send campaigns and messages you configure (e.g. WhatsApp marketing)
- Generate AI-assisted marketing content based on your inputs
- Improve our products, fix bugs, and develop new features (legitimate interests)
- Send service-related notices (e.g. account, billing, security alerts)
- Comply with legal obligations
4. Legal bases for processing
Where applicable under GDPR or similar laws, we process data based on: performance of our contract with you, your consent (e.g. connecting third-party accounts and non-essential cookies), our legitimate interests in operating, securing, and improving the service, and compliance with legal obligations.
5. Sharing your information
We do not sell your personal data. We may share information with:
- Service providers / subprocessors: hosting, email, analytics, and AI providers that help us run the platform under contractual data protection terms
- Merchant of record (Paddle): for international sale of the Service, subscription management and payments, tax compliance, and invoicing. See Paddle's privacy policy. Paddle is an independent controller for payment data it collects at checkout.
- Paystack: for Ghana GHS payments, as our payment processor
- Social and messaging platforms: Meta (Facebook/Instagram), WhatsApp Business API, TikTok, and other integrations you explicitly connect
- Team members: within your organization according to roles you assign in the app
- Professional advisers and authorities: when required by law, court order, or to protect rights and safety
6. Cookies
We use cookies and similar technologies. Essential cookies keep you signed in, remember billing-country preference, and protect the Service. We may use analytics cookies to understand how the site is used. You can control non-essential cookies through your browser settings. Blocking essential cookies may prevent login and checkout from working.
7. Data retention
We retain account and workspace data while your account is active. After a verified deletion request, we delete or anonymize personal data within 30 days, except records we must keep for tax, accounting, security, or dispute resolution (typically up to 7 years for billing records, or shorter where the law allows). Data that is no longer needed is deleted or anonymized.
See our User Data Deletion Instructions and Cookie Policy.
8. Security
We implement technical and organizational measures including encryption in transit, access controls, and secure authentication. No method of transmission over the internet is 100% secure; we encourage strong passwords and prompt reporting of suspected unauthorized access.
9. Your rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
- Lodge a complaint with a data protection authority (including, where applicable, a UK or EEA supervisory authority)
To exercise these rights, email softcode25@gmail.com or follow the steps on our data deletion page. We aim to respond within one month.
10. International transfers
Your data may be processed in countries other than Ghana, including where our hosting, AI, and payment providers (including Paddle) operate. Where required, we use appropriate safeguards such as standard contractual clauses.
11. Children
MarketFlow AI is not intended for users under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided personal data.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated by email or in-app notice.
13. Contact
Lumyn AI Ltd (trading as MarketFlow AI)
Registered in Ghana
Email: softcode25@gmail.com