Privacy Policy

Effective date: August 21, 2026 — draft, pending legal review

This document is a pre-launch draft and has not yet been reviewed by a licensed attorney. It will be updated before NorthStar-Lumen begins collecting subscription payments.

1. Who We Are

NorthStar-Lumen ("NorthStar-Lumen", "we", "us", or "our") operates Lumen, a pricing advisory platform for e-commerce sellers. NorthStar-Lumen is currently operated by its founder as a sole trader pending incorporation.

Contact: support@northstar-lumen.com

2. Geographic Scope — Important Notice

Lumen is currently available to users in the United States and other countries outside the European Economic Area (EEA), United Kingdom, and Switzerland.

Lumen is not directed at, and does not knowingly accept registrations from, residents of the EEA, the United Kingdom, or Switzerland. If you attempt to register from one of these regions, your registration will not be accepted. This limitation is temporary and will be updated when NorthStar-Lumen is ready to meet applicable regional data-protection obligations.

If you are located in the EEA, UK, or Switzerland and believe you have received this policy in error, please contact us at support@northstar-lumen.com and do not create an account.

3. Information We Collect

3.1 Account Information

When you create an account, we collect your name, business email address, and a securely hashed password.

3.2 Marketplace Data You Provide

Lumen's core function is to analyze pricing data you supply. At present, you provide this data by uploading a structured file (e.g. Excel/CSV) containing your product listings (up to 100 ASINs during trial), costs, and competitor prices. In future updates, optional integrations — starting with Keepa for market data and later Amazon SP-API — may be offered. Any such integration will require your explicit authorization.

3.3 Usage and Operational Data

We collect basic operational logs — including request timestamps, feature interactions, and error reports — to run, secure, and improve the service. These logs may include your IP address and browser/device type.

3.4 Payment Data

Payments are processed by Paddle.com, our Merchant of Record and authorized reseller. NorthStar-Lumen does not receive or store your full payment card number, bank details, or billing address. Paddle may share with us limited transaction metadata (e.g., subscription status, last-four digits of your card, and your billing country) necessary to manage your account.

Paddle's privacy practices are described at paddle.com/legal/privacy.

3.5 Session Storage and Tracking

We use your browser's local storage — not cookies — to keep you signed in and secure your session. We do not currently use advertising or behavioral tracking technologies. If we add optional analytics in the future, we will update this policy and give you a choice before any tracking begins.

4. How We Use Your Information

We use the information described above solely to:

Create and manage your account. Analyze the marketplace data you upload and generate pricing opportunities, advice, and explanations — the core service. Process your subscription through Paddle. Send you service-related communications (account confirmations, policy updates, security alerts). Operate, maintain, and improve Lumen.

No cross-customer training. We do not use your marketplace data — including your product costs, pricing, or competitive intelligence — to generate recommendations for any other customer, or to train machine-learning models shared across customers. Your data is used only to serve you.

5. How We Share Your Information

We do not sell your personal data. We share information only with:

Paddle.com — to process payments, taxes, and manage your subscription.

Hosting and infrastructure providers — to store and serve the application. These providers act under confidentiality obligations and have no independent right to use your data.

AI explanation providers (if applicable) — if a third-party AI service is used to generate pricing explanations, it will be listed here before activation. Any such provider will be contractually prohibited from training on your data.

Law enforcement or legal process — only when required by applicable law, court order, or to protect our legal rights.

6. Data Retention

We retain your account and marketplace data for as long as your account is active or as needed to provide the service.

Inactive accounts: If your free trial ends without a subscription, or if you cancel your subscription, your account becomes inactive. We retain your data on our live systems for sixty (60) days so you can resume or export it. After sixty days your account and all associated data are removed from our live systems automatically.

Deletion requests: You may delete your account at any time from your account settings page. Deletion from our live systems is immediate — it is not queued for review. If you would rather contact us at support@northstar-lumen.com, we will action your request within thirty (30) days.

Backups: We keep encrypted backup copies of our database so that a failure, a defect, or an attack cannot cost every customer their data. These copies exist only for disaster recovery. They are encrypted, access-restricted, never queried for any other purpose, and never used to bring a deleted account back.

Backups age out on a fixed schedule: daily copies are kept for thirty (30) days, weekly copies for ninety (90) days, and monthly copies for twelve (12) months. Each copy is measured from the day it was made, so in the ordinary course every copy containing your data is gone within twelve months of your deletion, and the great majority within thirty days of it.

What guarantees this is a mechanism rather than a promise: every deletion is recorded in a deletion ledger that outlives the data itself. If we ever have to restore a backup, the recorded deletions are re-applied automatically as part of the restore, before the system is returned to service. A deleted account cannot reappear.

7. Data Security

We apply reasonable administrative, technical, and organizational measures to protect your data against unauthorized access, loss, or disclosure. These measures include access controls, secure transmission protocols, and regular review of our security practices.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

Specific technical controls (e.g., encryption at rest) will be documented here once verified and confirmed in production. We do not make security claims we cannot substantiate.

8. Your Rights

Regardless of your location, you may:

Request access to the personal data we hold about you. Request correction of inaccurate data. Request deletion of your account and data (see Section 6). Opt out of non-essential communications at any time.

To exercise any of these rights, contact us at support@northstar-lumen.com. We will respond within thirty (30) days.

California residents: Additional rights may apply under the California Consumer Privacy Act (CCPA) as NorthStar-Lumen grows. We will update this section when those rights become applicable.

9. Third-Party Links

Lumen may contain links to third-party websites (e.g., Amazon Seller Central, Paddle). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

10. Children

Lumen is a B2B service intended for business users only. We do not knowingly collect personal data from anyone under the age of 18. If we learn that we have done so, we will delete it promptly. Lumen is not intended for children under 18.

11. Changes to This Policy

If we make a material change to how we collect or use data, we will update the effective date above and notify active accounts by email at least fourteen (14) days before the change takes effect.

12. Contact

Questions or requests regarding this policy: support@northstar-lumen.com