Privacy Policy

1. Introduction

OXIVANE LLC ("Lumopay," "we," "us," or "our") provides a payment facilitation platform that helps businesses accept card payments. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our marketing site, dashboard, and related services (collectively, the "Services").

2. Information we collect

We collect information in three broad ways:

• Information you give us — such as your name, business details, email address, and the know-your-business (KYB) information required to verify a merchant account.
• Information collected automatically — such as device type, browser, IP address, and usage events, gathered through cookies and similar technologies.
• Information from partners — such as identity and risk signals returned by our payment processor during onboarding.

3. How payment data is handled

Card payments are processed by Stripe. Sensitive card details are tokenized in the customer's browser using Stripe.js and sent directly to Stripe over an encrypted connection. Lumopay does not receive, transmit, or store full card numbers, CVC codes, or other raw cardholder data on its own servers. We retain only non-sensitive references — such as a payment token, the last four digits, and a transaction identifier — needed to display and reconcile activity.

4. How we use information

We use the information we collect to:

• provide, operate, and improve the Services;
• verify identity and prevent fraud, abuse, and money laundering;
• process payments and route payouts;
• communicate with you about your account and support requests;
• comply with legal, tax, and regulatory obligations.

5. Sharing & sub-processors

We do not sell your personal information. We share data only with vendors who help us run the Services, under contractual confidentiality and data-protection terms. Our principal sub-processors include:

• Stripe — payment processing, identity verification, and payouts.
• Vercel — application hosting and delivery.
• Cloudflare — DNS, content delivery, and security.

We may also disclose information when required by law or to protect the rights, safety, and property of Lumopay and others.

6. Cookies

We use strictly necessary cookies to keep you signed in and secure, along with limited analytics cookies to understand how the Services are used. You can control non-essential cookies through your browser settings; disabling them may affect some features.

7. Data retention

We keep personal information for as long as your account is active and as needed to provide the Services. We retain certain records — particularly transaction and compliance data — for longer periods where required by financial regulations, then delete or anonymize it.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Residents of the European Economic Area and the United Kingdom have rights under the GDPR; California residents have rights under the CCPA/CPRA, including the right to know and the right to opt out of sale (which we do not engage in). To exercise any right, contact us using the details below.

9. Security

We protect information with encryption in transit and at rest, least-privilege access controls, and regular review of our systems and sub-processors. No method of transmission or storage is perfectly secure, but we work continuously to keep your data safe.

10. International transfers

We and our sub-processors may process information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect transferred data.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date and, where appropriate, notify you through the Services.

12. Contact

Questions about this policy or your data? Reach us at [email protected].