Privacy policy

Last updated: 12 November 2026.

1. The short version

• PostLumina never uploads your footage, sound or project files. It processes them on your machine and does not copy or look at them.
• The website keeps an account for you (email, sign-in method) so that you can download the app, sign in to it, start a trial, buy Pro and manage your devices. The app needs that sign-in to run.
• When the "Help improve PostLumina" switch is on, the app sends usage data: small structured events (what kind of edit ran, whether it worked, which tools were used) together with the content of the request your assistant passes to PostLumina. Frames, audio and transcripts are never sent. We use this data only to operate and improve PostLumina. We do not sell it, and we do not pass it to third parties for their own use. The switch is on by default; the first launch tells you about it, and it stays in the app's Settings, next to "View what's been collected".
• Payments are handled by Creem, the merchant of record. We never see your card details.
• The website measures visits with Google Analytics, which uses cookies. We do not use advertising cookies.
• You can delete your account yourself in Settings. We erase your personal data within 30 days.

The rest of this page is the full statement.

2. Who is responsible

PostLumina (the website at postlumina.com and the PostLumina desktop app) is operated by Lucky Code Studio (Business Registration No. 636-59-00277), located at 76 Keunumul-ro, Mapo-gu, Seoul, Republic of Korea ("PostLumina", "we"). We are the controller of the personal data described here.

Privacy questions, requests and complaints: support@postlumina.com. We answer within 3 business days.

For users in the Republic of Korea, privacy requests and complaints go to the privacy officer (개인정보 보호책임자) of Lucky Code Studio at support@postlumina.com, or by post at the address above.

3. What we collect, why, and for how long

3.1 Your account

Legal basis (where one is required): performing our contract with you; our legitimate interest in keeping the service secure.

3.2 Your devices and licences

When you connect the app to your account, we record for each device: a device ID generated by the app, the device name you see in the app, the platform (macOS or Windows), the app version, when it was connected, when it last checked in, and the country derived from the IP address of that check-in. We do not store the IP address itself with the device.

We also keep the licence records we issue to each device: plan (trial, Pro, pilot), when it was issued and when it expires, and if we revoked it, when and why.

Why: a Pro seat covers 2 devices, so we have to know which devices are connected. Licences are what the app checks to decide whether Pro features are on.

Kept: until you remove the device in Settings → Devices or delete your account. Licence records, including revoked and expired ones, are kept with your account for fraud prevention and deleted with it.

3.3 Usage data ("Help improve PostLumina")

"Help improve PostLumina" is on by default. The privacy step of the first launch shows this choice and lets you turn it off there, and you can change it at any time in the app's Settings. While it is on, the app keeps a queue of usage records and sends them once a day at most. They hold two kinds of data.

Structured events. Each event has a type and a small set of fields, for example:

• a workflow or recipe was saved or recorded: its kind and its shape (the tool or the filters it uses and their settings), its tags, how many iterations it took, the verdict (feasible or partial), how many samples were approved or rejected, the ffmpeg version;
• a workflow or recipe was run: how many items it ran on (as a bucket such as "1–10", never an exact file list), how many completed or failed, error codes, how the run ended (delivered, redone, failed or abandoned) and how many rounds of samples it took (as a bucket);
• a result was delivered and you reacted: whether you accepted it, asked for it to be redone or set a standard;
• a request was assessed: the capability class, the means chosen, how many reasons and alternatives were offered;
• an expression was refused: the issue codes and filter names.

Requests and corrections. When your assistant asks PostLumina to do something, it passes the request along in words. When a result is delivered and you say what should change, the assistant passes that correction along too. The app includes each text with the event it belongs to, up to 300 characters each. It is sent as it was passed, so it can include details that were typed into it, such as a name or a file name. PostLumina does not see your conversation with the assistant; it receives only the request the assistant passes to it.

What is never sent. Footage, frames, thumbnails, audio and transcripts. The structured fields do not carry file names or paths.

Each event carries an installation ID (a random ID the app makes for itself). When the app is signed in to your account, events are also linked to your account and device. When it runs on a pilot licence without an account, they are linked only to the installation ID.

Why: to see which kinds of edits work and which fail, to understand what people ask PostLumina to do, and to fix what it handles badly. We use this data only to operate and improve PostLumina. We do not sell it, we do not pass it to third parties for their own use, and we do not use it for advertising or any other purpose. Only the people who operate the service can access it; the providers in section 4 store it on our behalf.

Legal basis (where one is required): our legitimate interest in improving the product, which you can object to at any time by turning the switch off.

Kept: raw events, including requests and corrections, for 90 days. After that, only daily totals per event type remain (date, type, count), which identify no one.

How to control it:

• In the app, "View what's been collected" shows every record before it is sent, and lets you clear the queue.
• Settings → "Help improve PostLumina" turns it all off. Nothing more is sent after that. When it is off, the app still checks in once a day to refresh its licence, and we record only that a check-in happened.
• To have the records we already hold deleted without deleting your account, email support@postlumina.com.
• Deleting your account deletes them (section 7).

3.4 Downloads

When you download the app from the website we record who downloaded which version, when, the country derived from your IP address, and your browser's user-agent string. Why: licence compliance and to know which versions are in use. Kept: until you delete your account.

3.5 Payments

Pro subscriptions are sold by Creem (Armitage Labs OÜ, Rotermanni 14, Tallinn 10111, Estonia), acting as the merchant of record. Creem collects your payment details, billing address and tax information under its own privacy policy at creem.io. We never receive your card number.

From Creem we receive and keep: the order and subscription identifiers, product, amount and currency, status (paid, refunded, disputed), the email and country you gave at checkout, and the dates of each payment or refund. Why: to turn your Pro licence on and off, to count the months you have paid (for the perpetual-fallback right described in the Terms), to answer billing questions, and to keep the records that tax and accounting law require.

Kept: for as long as tax and accounting law requires after the last transaction (typically 5 to 10 years, depending on the country). These records are kept even if you delete your account, and are then not used for any other purpose.

3.6 Emails we send

We send service emails only: sign-in emails where needed, trial start and trial ending, Pro activation, payment failure, licence revocation, and account deletion. They are sent through Resend (see section 4). We do not send marketing email unless you have asked for it, and you can withdraw that at any time.

If you ask to be told when the Windows version is available, we keep a flag on your account for that single announcement and clear it once the announcement has gone out.

3.7 Support

If you write to support@postlumina.com we keep the correspondence so that we can help you and recognise repeat issues. Kept: 24 months after the last message.

3.8 Website operation and security

Our hosting provider, Cloudflare, records the IP address, user-agent and requested URL of each request for a short period for security and performance. We use IP addresses in rate limiting to protect sign-in, downloads and the app's interfaces from abuse; these entries expire within hours.

3.9 Cookies and similar storage

The website sets these cookies:

The first four are needed for the website to work. The Google Analytics cookies measure website traffic.

We measure website traffic with Google Analytics, so that we can see how many people visit and which pages they read. It receives the address and title of each page you open (the address without anything after a ?), the page you came from, your browser and device type, and an approximate location worked out from your IP address. Google Analytics keeps visit-level data for 2 months; after that only totals remain. Where the cookie notice is shown, the Google Analytics cookies are set only after you accept, and the "Cookie settings" link at the foot of the site lets you change your answer.

We do not use advertising cookies, and we do not use this data for advertising.

3.10 Your assistant (Claude Code or Codex)

PostLumina works with an AI assistant that you run under your own account with Anthropic (Claude Code) or OpenAI (Codex). What that assistant sends to its provider (clip names, formats, plans, logs, and, when it looks at or listens to a clip, sampled still frames and a transcript) goes directly from your machine to that provider under your agreement with them. PostLumina does not receive it, and this policy does not cover it. Please read Anthropic's or OpenAI's privacy terms for that part.

4. Who processes data for us

We share personal data only with the providers below, each under a contract that limits them to acting on our instructions, and with authorities when the law requires it. We do not sell personal data, and we do not share it for advertising.

5. International transfers

We operate from the Republic of Korea, and the providers above process data in the United States, Japan and the European Union. Where data about residents of the European Economic Area, the United Kingdom or Switzerland leaves those areas, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or an adequacy decision, as offered by each provider.

For users in the Republic of Korea (개인정보 국외 이전 고지): the personal data in sections 3.1 to 3.7 is transferred to and stored by Cloudflare (United States and the Asia-Pacific region), Resend (Japan) and Creem (Estonia), continuously over the network, for the purposes stated in those sections and for the retention periods stated there. The website traffic data in section 3.9 is transferred to and stored by Google (United States), continuously over the network, for the purpose and the period stated there. You may refuse the transfer by not using the service; the service cannot be provided without it.

6. Your rights

Wherever you live, you can:

• see what we hold about you, and get a copy;
• correct it;
• delete your account and data (section 7);
• turn usage data off in the app at any time, and ask us to delete the records we hold;
• object to, or ask us to restrict, processing based on our legitimate interests;
• withdraw consent where we relied on it, without affecting what was done before;
• complain to a data-protection authority.

European Economic Area, United Kingdom and Switzerland. The rights above correspond to the GDPR rights of access, rectification, erasure, restriction, portability and objection. You may complain to the supervisory authority of your country of residence. We have not appointed a representative in the EU or UK under Article 27 GDPR; write to us directly at support@postlumina.com.

California and other US states. You have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes other than providing the service. You may use an authorised agent; we will verify the request through your account email.

Republic of Korea. Under the Personal Information Protection Act you may request access, correction, deletion and suspension of processing, and you may complain to the Personal Information Protection Commission or the Privacy Call Centre (118). We take the measures the Act requires to keep personal data safe, and we destroy it as described in section 7.

To use any of these rights, use the controls in Settings or email support@postlumina.com from your account address. We reply within 3 business days and complete requests within one month, extendable where the law allows for complex requests. We may ask you to confirm it is you.

7. Deleting your account

Settings → Account → Delete account. The effect:

• you can no longer sign in, and your connected devices are told at their next check-in and stop working;
• active licences and any remaining trial or subscription period end; subscriptions are cancelled at Creem;
• within 30 days we erase your personal data: account, devices, licences, the raw usage data linked to your account (requests and corrections included), download records and support email history. Your email address is replaced with an anonymous value in any record that must remain.

What remains afterwards: payment records held by Creem and by us for as long as tax and accounting law requires; daily usage totals that identify no one; usage events that were never linked to an account, until their 90 days are up; security logs until their normal expiry.

You can also delete the app's local data (its queue of unsent events and its settings) by removing the app and its data folder on your machine.

8. How we protect data

Traffic to the website and from the app is encrypted (TLS). Device tokens are stored only as hashes; licences are signed with keys that never leave our server; provider secrets are stored encrypted. Access to production systems is limited to the people who operate the service, and sign-in to the administration console requires a named account with a role. No method of transmission or storage is perfectly secure, and we will tell you and the relevant authority without undue delay if a breach affects your data.

9. Children

PostLumina is not directed at children. We do not knowingly collect personal data from anyone under 16 (or under 14 in the Republic of Korea). If you believe a child has created an account, email us and we will delete it.

10. Changes to this policy

When we change this policy we update the date at the top. For changes that matter to you (new kinds of data, new purposes, new providers) we will also tell you by email or in the app before they take effect.

11. Contact

Lucky Code Studio (Business Registration No. 636-59-00277), 76 Keunumul-ro, Mapo-gu, Seoul, Republic of Korea Email: support@postlumina.com