Privacy Policy

This Privacy Policy explains how Lumen Listing (“we,” “us,” “our”), a real estate listing media team serving the DMV, collects, uses, and protects information when you visit our website, request a shoot, use our agent portal, or view a photo gallery or property page we deliver (collectively, the “Services”).

1. Information We Collect

Shoot requests

When you submit the free-shoot request form on our home page, we collect the details you enter: your name, email address, phone number, and, optionally, your brokerage, a listing address, and a message. Sending the form is agreement to our Terms of Service, and we record that agreement, including your consent to receive text updates about your request (see Section 2).

Agent accounts

When you create an account in our agent portal, we collect your name, email address, and profile information. If you sign in with Google, this information is provided by Google through OAuth using the email, profile, and openid scopes. We do not receive your Google password and we do not request access to your Gmail, Google Drive, Google Calendar, or any other Google product data.

Payment information

Payments are processed by Stripe, including the card you keep on file for charge-on-delivery billing. We receive transaction metadata (amount, status, last four digits of the card, billing email) but we never see or store full card numbers. Stripe's privacy policy is available at stripe.com/privacy.

Listing media

We create and store the photos and related media from shoots you book: property addresses, listing details you provide, and the delivered files. Delivery galleries and property pages become viewable by anyone who has the link once we deliver them, which is how you share them with your clients.

Visit attribution

If you arrive at our site from a campaign link (for example, a link with UTM tags or an external referrer), we store that campaign context in a single first-party cookie for up to 90 days so we know which channel brought you in. This cookie contains no personal information, and we use no third-party advertising trackers.

Communications

When you contact us by email, text, or through the portal, we retain those messages so we can respond and keep a record of work performed.

2. Text Messages

We send transactional text messages about work you have asked for: booking updates and shoot reminders, up to about four messages per shoot. Consent is part of our Terms of Service: by booking a shoot or sending a request through our site, you agree to receive these texts, and we keep a record of when you agreed and the exact disclosure text in effect at the time. Text updates are never a condition of booking or receiving our services: you can opt out at any time by replying STOP, and the same updates continue by email and in the agent portal. Message and data rates may apply.

3. How We Use Information

We use the information we collect to:

• Respond to shoot requests and schedule shoots.
• Authenticate you and keep your account secure.
• Shoot, edit, and deliver your listing media.
• Process payments and send invoices and receipts.
• Send transactional messages about your bookings and deliveries (and texts only with your consent, as described above).
• Understand which channels bring agents to us.
• Detect and prevent abuse, fraud, and security incidents.
• Comply with legal obligations.

We do not sell your personal information. We do not use your information to train third-party machine learning models.

4. Service Providers

We share information with a small number of vendors that help us operate the Services:

• Clerk: user authentication and session management.
• Convex: application database and real-time sync.
• Railway: application hosting.
• Stripe: payment processing and card-on-file storage.
• Resend: transactional email delivery.
• Cloudinary: photo storage, processing, and delivery.
• Google: OAuth sign-in (only if you choose to sign in with Google).

5. Data Retention

We retain account, booking, and delivery records for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, and reporting obligations. You may request deletion at any time by contacting us via gavin@lumenlisting.com.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us via gavin@lumenlisting.com. We will respond within a reasonable timeframe.

You can revoke our access to your Google account at any time by visiting myaccount.google.com/permissions.

7. Security

We use industry-standard safeguards including HTTPS in transit, encryption at rest for sensitive credentials, signed webhook verification, scoped API keys, and per-customer data isolation in our database. No system is perfect, but we work to keep your information safe.

8. Cookies

We use cookies that are strictly necessary to keep you signed in and to keep the Services functioning, plus the single first-party attribution cookie described above. We do not use advertising cookies and we do not track you across other websites.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the new version at this URL and update the “Last updated” date above. Material changes will also be communicated to active account holders.

11. Contact

Questions or requests? Reach us via gavin@lumenlisting.com.