LumeraStack is operated by LumeraStack. We provide digital business card services at vcard.lumerastack.com. For privacy enquiries, contact us via WhatsApp at +94 78 496 0686.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have regarding your data. By using LumeraStack, you agree to the practices described here.
We collect different categories of data depending on how you interact with our platform:
| Data Category | Examples | Purpose |
|---|---|---|
| Account Data | Name, email, username, password (hashed) | Account creation and authentication |
| Profile Data | Job title, company, phone, bio, social links, profile photo | Building your public digital card |
| Lead Data | Visitor name, phone, email, message (submitted by your visitors) | Lead capture on behalf of card owner |
| Usage Data | Profile view counts, vCard download counts, monthly view resets | Analytics and plan limit enforcement |
| Technical Data | IP address (rate limiting), browser type, request timestamps | Security, abuse prevention, rate limiting |
| Payment Data | Plan type, NFC card order details (via WhatsApp) | Subscription and order management |
We do not collect payment card details directly — NFC card orders are handled via WhatsApp communication and processed through separate payment channels.
We use the data we collect to:
We do not sell your personal data to third parties. We do not use your data for advertising profiling.
When visitors submit their contact information through your profile's lead capture form, that data is:
LumeraStack accepts no responsibility for visitor data collected through lead capture features. As the card owner, you are the sole data controller for all data submitted by your visitors. You are fully responsible for having a lawful basis for that collection, informing visitors of how their data will be used, and complying with all applicable privacy laws. LumeraStack acts only as a technical data processor. Once you export data, LumeraStack has no further responsibility for it whatsoever.
We use the following trusted third-party services to operate the platform:
| Service | Purpose | Data Shared |
|---|---|---|
| Cloudinary | Image hosting and optimisation | Profile photos, cover images, gallery images |
| MongoDB Atlas | Database hosting | All account and profile data |
| WhatsApp (Meta) | NFC card order processing and support | Name, contact details shared voluntarily by you |
| Google Fonts | Typography delivery | Your IP address (standard CDN request) |
Each third-party service operates under its own privacy policy and data processing terms. We only share the minimum data necessary to provide our services.
LumeraStack uses the following cookies:
token) — An HTTP-only, secure, signed JWT used to maintain your login session. Expires in 7 days.companyToken) — Same as above, for Enterprise admin sessions.We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required beyond what is described here.
We take data security seriously. Our platform implements:
Despite these measures, no system is 100% secure. We cannot guarantee absolute security and are not liable for unauthorised access beyond our control. Please report any suspected security vulnerabilities to us immediately.
Depending on your location and applicable law, you may have the right to:
To exercise any of these rights, contact us via WhatsApp at +94 78 496 0686. We will respond within 30 days.
LumeraStack is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to our platform, please contact us immediately and we will delete that data promptly.
We may update this Privacy Policy at any time, at our sole discretion, without prior notice. Changes take effect immediately upon being posted to this page. The "Last updated" date at the top reflects when the latest revision was made. Your continued use of the service after any update constitutes your full acceptance of the revised policy. It is your responsibility to check this page regularly. If you do not agree to the revised policy, you must stop using the service.
LumeraStack also reserves the right to stop, suspend, or discontinue the LumeraStack service — or any part of it — at any time, with or without notice, and without liability to you or any third party.
For any privacy-related questions, data requests, or to report a security concern: