Last updated: December 23, 2025
This Privacy Policy describes how BRONEER NEIL (hereinafter "we", "our" or "Lummy") collects, uses, stores and protects your personal data when you use the lummy.fr website and its services.
We are committed to protecting your privacy and complying with applicable personal data protection regulations, including the General Data Protection Regulation (GDPR) and the French Data Protection Act.
The data controller for your personal data is:
When creating your account, we collect:
When you use our image generation services, we collect:
For paid transactions:
Automatically collected during your visit:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Provision of image generation service | Contract performance |
| Payment processing and billing | Contract performance and legal obligations |
| Service improvement and new feature development | Legitimate interest |
| Statistical analysis and audience measurement | Legitimate interest (with consent for cookies) |
| Communication about our services and news | Consent (unsubscribe available) |
| Fraud prevention and security | Legitimate interest and legal obligations |
Your personal data may be transmitted to the following categories of recipients:
Transfers outside the European Union: Some of our processors are located in the United States. These transfers are subject to appropriate safeguards (standard contractual clauses, Privacy Shield certifications, etc.) in accordance with GDPR.
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 1 year (legal requirement) |
| Uploaded and generated images | 30 days maximum (or deletion on request) |
| Payment data and invoices | 10 years (accounting and tax obligations) |
| Connection logs and technical data | 12 months maximum |
| Cookies | 13 months maximum |
In accordance with GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
To exercise your rights, you can:
We are committed to responding to your request within a maximum of one month. Proof of identity may be requested to verify your identity.
Right to lodge a complaint: You also have the right to lodge a complaint with the French National Commission on Informatics and Liberty (CNIL) if you believe that the processing of your data constitutes a violation of regulations:www.cnil.fr
We implement all appropriate technical and organizational measures to protect your personal data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access:
Despite these measures, no method of transmission over the Internet or electronic storage is completely secure. We therefore cannot guarantee absolute security.
We use cookies and similar technologies to improve your experience on our site. For more information about our use of cookies, see our Cookie Policy.
Our service is intended for persons aged 18 and over. We do not knowingly collect personal data from minors under 18. If you believe a minor has provided us with personal data, please contact us immediately.
We may modify this Privacy Policy from time to time. Any modification will be published on this page with an updated "Last Updated" date.
For significant changes, we will notify you by email or via a notification on the site. We encourage you to regularly consult this page to stay informed about our data protection practices.
For any questions regarding this Privacy Policy or the processing of your personal data, you can contact us: