Privacy Policy

We collect the following types of information when you use Luzo AI:

Account Information

When you sign up or sign in via Google OAuth, we receive your name, email address, and Google profile picture. We store these in your user profile to identify your account and personalize your experience.

Business Profile Data

When you create a business profile, we store the information you provide — such as your business name, industry, target audience, and content preferences — to generate relevant AI content plans.

Content and Usage Data

We store the content plans, posts, and execution plans you generate through the app so you can access them across sessions. We may also collect basic usage data (such as features used and actions taken) to improve the product.

Payment Information

If you subscribe to a paid plan, payment details (card number, billing address) are handled directly by Stripe and are never stored on our servers. We only store your subscription status and plan tier.

We use the information we collect to:

• Create and manage your Luzo AI account
• Authenticate you securely via Google OAuth
• Generate AI-powered content plans tailored to your business
• Save and retrieve your content plans and history
• Process subscription payments and manage your plan
• Send transactional emails (e.g. account confirmation, billing receipts)
• Improve the quality and relevance of AI-generated content
• Respond to support requests and inquiries
• Comply with legal obligations

We do not sell your personal data to third parties, and we do not use your data for advertising purposes.

Luzo AI uses Google OAuth 2.0 to allow you to sign in with your Google account. When you authenticate with Google, we request access to the following scopes:

• Your name (to display in your profile)
• Your email address (to identify your account)
• Your profile picture (to personalize your account)

We do not request access to your Google Drive, Gmail, contacts, calendar, or any other Google service beyond basic profile identification.

The data obtained through Google OAuth is used solely to create and maintain your Luzo AI account. We do not share this data with third parties except as described in this policy (e.g. Supabase for secure storage).

You can revoke Luzo AI's access to your Google account at any time by visiting Google Account Permissions. Revoking access does not automatically delete your Luzo AI account or data — see Section 7 for account deletion.

Luzo AI uses third-party AI services (including Google Gemini) to generate content plans based on the inputs you provide. When you generate content, your business profile information and content preferences are sent to these AI services as prompts.

Please be aware of the following:

• Do not include sensitive personal information (such as passwords, financial details, or private personal data) in your business profile or content generation inputs.
• AI-generated content is produced automatically and may not always be accurate, complete, or suitable for your specific needs. You are responsible for reviewing and approving all content before publishing.
• Third-party AI providers may have their own data retention and usage policies.

Paid subscriptions (Pro and VIP plans) are processed by Stripe, a PCI-DSS compliant payment processor. Luzo AI never receives, stores, or has access to your full card number, CVV, or other sensitive payment details.

When you subscribe, we store the following in our database:

• Your subscription plan (free, pro, or vip)
• Your subscription status (active, cancelled, etc.)
• Your current billing period end date
• A Stripe customer ID (an opaque reference used to manage your subscription)

For questions about billing or to request a refund, contact us at luzoaisupport@gmail.com. Stripe's privacy policy is available at stripe.com/privacy.

Your data is stored securely using Supabase, which provides a PostgreSQL database with row-level security (RLS). This means your data is isolated — each user can only access their own account data.

Our security measures include:

• All data is transmitted over HTTPS (TLS encryption in transit)
• Authentication is handled via Supabase Auth with Google OAuth — we never store passwords
• Row-level security policies in the database enforce per-user data isolation
• API keys and secrets are stored as environment variables, never in source code
• Payment data is handled exclusively by Stripe (PCI-DSS Level 1 certified)

While we take reasonable steps to protect your data, no system is completely secure. If you believe your account has been compromised, contact us immediately at luzoaisupport@gmail.com.

You have the following rights regarding your data:

• Access — you can view the data associated with your account at any time within the app.
• Correction — you can update your business profile and account information at any time.
• Deletion — you can request deletion of your account and all associated data.
• Data portability — you can request a copy of your data by contacting us.
• Opt-out — you can cancel your subscription at any time; your plan downgrades at the end of the billing period.

How to Delete Your Account

To request deletion of your account and all associated data, email us at luzoaisupport@gmail.com with the subject line "Account Deletion Request" and include the email address associated with your account. We will process your request within 30 days.

Deleting your account will permanently remove your profile, business data, content plans, favorites, and subscription record. This action cannot be undone. If you have an active paid subscription, we recommend cancelling it first to avoid further charges.

Luzo AI uses cookies and browser local storage to maintain your session and keep you signed in between visits. These are strictly necessary for the app to function and cannot be disabled without signing out.

We do not currently use third-party analytics services (such as Google Analytics) or tracking cookies for advertising. If this changes in the future, this policy will be updated and you will be notified.

We may update this Privacy Policy from time to time as our product and legal requirements evolve. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email at least 14 days before significant changes take effect

Your continued use of Luzo AI after a policy update constitutes acceptance of the revised terms. We encourage you to review this page periodically.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.