Privacy Policy
Updated on Jun 10, 2025
Lumos AI respects your privacy and is committed to protecting your personal information. Your privacy is important to us. Please read this policy carefully to understand how we collect, use, and disclose your information, and what choices you have with respect to your information.
1. Who We Are
We are Lumos AI, a company focused on delivering AI observability and evaluation tools for healthcare and life-science applications.
2. Scope and Applicability
This policy describes how Lumos AI collects, uses, shares or otherwise processes information relating to individuals and the rights associated with that processing. A reference to “Lumos”, “Lumos AI”, “we”, “us” or the “Company” is a reference to Lumos AI Labs Corp. and its affiliates involved in the collection, use, sharing, or other processing of personal information. Where applicable, Lumos AI Labs Corp. is the controller.
This Privacy Policy applies to the personal information we collect when you use our websites (such as www.lumos.ai) and our products, services, and applications (collectively, the “Services”), when you attend a Lumos AI event, or otherwise interact with us. This Privacy Policy does not apply to the extent we process personal information in the role of processor or service provider on behalf of our customers. Customers are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements, or other obligations relating to such Customers’ use or collection of personal information in connection with the use of our Services by individuals with whom our Customers interact. If you are an individual who interacts with a Customer using our Services or you otherwise believe that a Customer uses our Services to process your personal information, and you contact us regarding this data, you will be directed to contact the applicable Customer for assistance with any requests or questions relating to your personal information, including without limitation any requests to access, amend or erase your personal information.
3. Personal Information We Collect
When we talk about “personal information” or “personal data,” we’re talking about a broad range of information. Data protection laws around the world define this concept in different ways, but in general, we mean any information that relates to an identifiable, living individual person.
In addition, some data protection laws and privacy laws in certain jurisdictions differentiate between “controllers” and “processors” of personal data. A controller decides why and how to process personal data. A processor does not make decisions about personal data; it only processes personal data on behalf of a controller based on the controller’s instructions.
A. Personal Information You Provide Us Directly.
We collect personal information you provide directly to us when interacting with us or using the Services. We use this information to provide, improve, promote, and protect the Services. Providing this information is voluntary but may be necessary in certain cases, such as for account registration. In such cases, if the information is not provided, Scale may not be able to provide the user with the requested Services. The information we collect may include the following:
Account registration details Contact information (e.g., name, email)
Communication preferences
Uploaded files and content
Information shared via support or surveys
Additionally, this includes the following categories:
Payment Data: Billing information collected to process your payment for use of the Services, such as:
Credit card details
Billing address
Marketing and Communications Data: Contact information collected when you express interest in our Services, sign up for an event or webinar, or download content. This may include:
First and last name
Email address
Address
Phone number
B. Information Collected Automatically:
Personal Information We Collect From You Automatically. We use typical tools and services, such as log files, cookies, pixel tags, and similar technologies to automatically collect information, which may contain personal information from your devices while you navigate our Services or interact with emails we sent to you. For more information, please visit our Cookie Policy.
C. Information From Third Parties:
Personal Information We Collect From Third Parties. We may also collect personal data from third-party sources such as authentication partners and public databases for the purposes of user authentication and marketing activities. For example, if you create or log into your Labela account using your Google Account credentials, we will access your name and email for authentication.
4. How and Why We Use Personal Information
We use personal information to operate our services, communicate with you, improve product functionality, ensure legal compliance, and for other legitimate business purposes based on your consent, our contractual obligations, or our legal interests.
5. Personal Information Sharing and Disclosure
We may share your information with:
Account Administrators (if provisioned through an organization)
Service Providers (e.g., billing, hosting, analytics, support)
Affiliates (within the Lumos AI corporate group)
Legal Authorities (if required by law or to protect rights/safety)
In Connection With Business Transfers (e.g., M&A, restructuring)
With Consent (when explicitly granted)
6. Security
Lumos is concerned with safeguarding your information. Lumos employs appropriate and reasonable physical, technological, and administrative security measures. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
7. International Transfer
Your information may be transferred to and stored in countries outside your home jurisdiction. Where applicable, Lumos AI uses appropriate safeguards such as Standard Contractual Clauses.
8. Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in Section 4. How and Why We Use Personal Information. We will retain and use your personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
Because the needs can vary for different data types in the context of different services, actual retention periods can vary significantly. We determine the appropriate retention period for personal information based on the amount, nature and sensitivity of your personal information processed, the potential risk of harm from unauthorized use or disclosure of your personal information and whether we can achieve the purposes of the processing through other means, as well as applicable legal requirements (such as applicable statutes of limitation). After expiry of the applicable retention periods, your personal information will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of that data.
9. Our Policy on Children
Our Services are not directed to individuals under 18. If we become aware that we have collected personal information from a minor, we will delete it.
10. Your Privacy Rights and Choices
Depending on your location, you may have the right to:
Access, correct, or delete your information
Object or restrict certain processing
Withdraw consent
Opt out of marketing communications
11. Information for California Consumers
Under the California Consumer Privacy Act (CCPA), California residents may:
A. How We Collect, Use, and Share Your Personal Information. We collect the following statutory categories (as defined by CCPA) of Personal Information directly from you or automatically from your device:
Identifiers, such as you name, email address, phone number, company name and role, device identifier, IP address, unique browser ID, cookies, beacons, pixel tags, account login, other unique identifiers;
Professional or employment-related information, such as information about your business and your role;
Inference data, such as information about your preferences;
Commercial information, such as your service subscription records, and site engagement;
Internet or network information, such as browsing and search history, site and advertisement interactions;
Financial information, such as credit card and other billing related information;
Geolocation data, such as city, state, and country based on IP address.
The business and commercial purposes for which we collect this information are described in Section 3 of this Privacy Policy; and the categories of third parties to whom we “disclose” the information for a business purpose are described in Section 5 of this Privacy Policy.
B. California Privacy Rights. California law grants California residents consumers certain rights and imposes restrictions on particular business practices as set forth below.
You may request access to, or for a copy of the personal information we have collected, used, disclosed and disclosed about you over the past twelve (12) months.
You may request for us to disclose the purposes for which we use the personal information we collect
You may request for the categories of sources from which we have collected your personal information
You may request that we delete certain personal information we have collected from you.
You have a right not to receive discriminatory treatment for the exercise of your CCPA privacy rights
California consumers have the right to opt-out of the sale of their personal information. We do not and will not sell your personal information. We may provide third parties with certain personal information to provide or improve our products and services, for example to deliver products or services at your request. In such cases, we require those third parties to handle the information in accordance with applicable laws and regulations.