Privacy Policy

This policy applies to everyone who uses Lusion: the website at lusion.io, the Lusion app for iPhone, the email we send, and the services behind them. It covers visitors, people with an account, and members of a workspace someone else created.

Lusion is operated by Wonder Global Inc (“Lusion”, “we”). When we say “you”, we mean the person using the service; when we say “your brand”, we mean the business or project you set up inside Lusion.

You must be at least 18 years old to hold a Lusion account. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we delete it.

Your account

• Email address and name, from the sign-up form or from Apple or Google when you sign in with them. Apple lets you hide your email; we then hold the relay address Apple gives us.
• A user id we create for you, and the settings you choose (notification preferences, appearance).

Your brand

• What you tell us about the brand: name, website, social handles, description, audience, colours, fonts, voice, values, rules, a content focus and key dates.
• Logos, product photos, reference pictures and photos of the people who appear in your content, when you add them. Only add photos you have the right to use.
• What you ask Lusion to make, and the edits you ask for.

What Lusion makes

• The pictures, captions, carousels, text posts and videos generated for your brand, and your reactions to them (likes, saves, skips, edits, shares). Reactions shape what is made next.

Purchases

• On the web, payments go through Stripe; we keep the plan, its status and dates, and a Stripe customer reference. We never see your card number.
• In the iPhone app, subscriptions go through Apple; we receive the plan, its status and dates from Apple via RevenueCat. We never see your Apple ID payment details.

Device and usage

• A push notification token, if you allow notifications, so the morning set can reach your phone.
• Product analytics: which screens are opened and which features are used, with a device identifier, through Mixpanel. This is not used to track you across other companies’ apps or websites.
• Crash reports, through Sentry, so we can fix what breaks. These are not linked to your identity.
• Server logs with IP address, browser or app version and request times, kept for security and debugging.

• To run Lusion: to plan and make content for your brand every night, to show it to you, and to make the edits you ask for.
• To learn your taste from your reactions, so what we make for your brand improves. This learning stays with your brand.
• To bill you and to keep your plan in step with Stripe or Apple.
• To send you the emails and notifications you have chosen: the morning set, a piece that is ready, billing receipts, and account messages we must send. You can turn off everything else in Settings or with the unsubscribe link.
• To keep the service secure, to prevent abuse, and to meet our legal obligations.

We do not sell your personal data. We do not use your brand’s data, photos or generated content to advertise to you or to anyone else.

Lusion makes content with machine-learning models run by third-party providers, currently OpenAI and Google. To make a piece, we send them the words, brand details and pictures needed for that piece. They process the data to return the result and, under our agreements with them, do not use it to train their models.

Generated content can be wrong, odd or off brand. Review a piece before you publish it. You decide what goes out under your name.

We share personal data only with the companies that help us run Lusion, and only what each needs:

• Supabase, which hosts our database, file storage and sign-in.
• Vercel, which hosts the website and the API.
• OpenAI and Google, which run the models that make content.
• Stripe, for payments on the web; Apple and RevenueCat, for subscriptions in the app.
• Resend, which delivers our email; Expo, which delivers push notifications.
• Mixpanel, for product analytics; Sentry, for crash reports.

We may also disclose data when the law requires it, to protect someone’s safety, or as part of a sale or merger of the company, in which case this policy continues to apply.

People you invite to your workspace can see the brands, content and activity in that workspace.

Data is stored on Supabase and Vercel infrastructure in the United States and the European Union, encrypted in transit and at rest. Access inside Lusion is limited to the people who need it to run the service. If you are outside those regions, your data is transferred there to provide the service.

• Account and brand data: for as long as you have an account.
• Generated content: until you delete the piece, the brand or the account.
• Billing records: seven years, as tax law requires, in Stripe or Apple’s systems and in our own ledger.
• Analytics and logs: up to 13 months.
• Push tokens: until you turn notifications off, sign out, or delete the account.

Wherever you live, you can ask us to show you the personal data we hold about you, correct it, export it, restrict how we use it, or delete it. Email hello@lusion.io from the address on your account and we answer within 30 days. If you are in the EU, UK or another jurisdiction with a data authority, you can also complain to it.

You can change your name, email preferences and notification settings yourself in Settings on the web or on the Profile tab in the app.

You can delete your account yourself at any time:

• In the app: Profile, then Delete account, at the bottom.
• On the web: Settings, then Delete account.
• Or email hello@lusion.io from your account address.

Deleting the account removes your profile, your brands and everything Lusion made for them, your uploads, your push tokens and your analytics identity. Active subscriptions must be cancelled with Apple or in Stripe’s billing portal first; deleting the account does not cancel them. Deletion completes within 30 days. We keep only what the law makes us keep, such as billing records, and only for as long as it requires.

The website uses cookies to keep you signed in and to remember your preferences. Analytics use a first-party identifier. We do not use advertising cookies.

When we change this policy in a way that matters, we tell you by email or in the app before the change takes effect. The date at the top shows the current version.

Wonder Global Inc, the operator of Lusion. Email hello@lusion.io for anything about this policy or your data.