✦ Lux

Privacy Policy

Last updated: 2026-06-21

Lux is a self-hosted AI marketing operations platform operated by BEM Solutions LLC ("we", "us"). This policy explains what data Lux collects, how it's used, and your rights.

1. What we collect

When you connect a third-party account (Google, Microsoft, Meta, etc.) to Lux, we receive only the data that you explicitly authorize via the OAuth consent screen. Specifically:

• Google account email (userinfo.email) — to display which account is connected.
• Google Ads campaign data (adwords) — campaign names, IDs, performance metrics, budgets. Used to show your campaigns in Lux and let you pause/budget them.
• Google Calendar events + calendar list (calendar.events, calendar.readonly) — to display your unified calendar and create events when you ask the assistant to schedule something.
• Google Tasks (tasks) — to mirror your tasks into the unified Personal Tasks view and create new tasks when you ask the assistant.
• Gmail message metadata + previews (gmail.readonly) — subject, sender, and first ~2 lines of body, used only by the optional Inbox Triage skill to produce classified summaries (e.g. "client urgent: 3; vendor invoices: 2").

We also collect data you provide directly — campaign descriptions, notes, tasks, calendar entries — and standard server logs (IP, user agent, timestamps) for security and uptime.

2. What we don't collect

• We do not collect full Gmail message bodies long-term. Only the LLM-generated triage summary is persisted, and you can delete it any time.
• We do not use your data to train AI/ML models.
• We do not sell or share your data with third parties for advertising or marketing.
• We do not collect anything you don't explicitly authorize through OAuth or enter into the app.

3. How we use it

Your authorized data is used exclusively to:

• Display your campaigns, calendar, tasks, and email triage in the Lux dashboard.
• Execute actions you request — pause a campaign, create a task, schedule a calendar event.
• Generate AI assistant responses about your own data (e.g. "show me KF performance this week").
• Send you alerts about your own integrations (e.g. "your Google Ads connection expired, want to reconnect?").

4. AI provider usage

Lux uses third-party AI APIs (OpenAI, Anthropic via OpenRouter, ElevenLabs for voice) to power the assistant. When you talk to the assistant, the contents of your turn — plus minimal context about your campaigns/tasks — are sent to the relevant model provider for inference. We use providers that contractually do not train on customer API data.

5. Data storage

Lux is self-hosted on infrastructure operated by BEM Solutions LLC. Your data lives in a SQLite database on our hardware — not in a multi-tenant cloud database. Encryption in transit is via TLS (Cloudflare-proxied). Backups are taken nightly and retained for 30 days.

6. Data deletion

You can disconnect any third-party integration at any time from the Integrations panel — that revokes our OAuth token immediately and stops further data fetching. To delete your account and all associated data, email [email protected]; we will delete within 7 business days. Full step-by-step instructions: Data Deletion.

7. Google API Services User Data Policy

Lux's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Children's privacy

Lux is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as Lux evolves. Material changes will be announced via in-app notification and a notice on this page. The "Last updated" date at the top reflects the most recent revision.

10. SMS & text messaging

BEM Solutions LLC operates an SMS program that sends text messages to people who request contact through a web form on one of our or our clients' websites (for example, a contact, quote, or appointment request). This section describes how that program handles your mobile information.

• What we collect: the mobile phone number you provide and your consent to be contacted by SMS, along with the business you inquired with.
• How we use it: to send you text messages related to your inquiry — replies, scheduling, reminders, and follow-ups. Message frequency varies.
• No sharing for marketing: we do not sell, rent, or share your mobile phone number or SMS opt-in / consent information with any third parties or affiliates for their own marketing or promotional purposes. Mobile opt-in data is used solely to deliver the messages you requested.
• Opt out anytime: reply STOP to any message to unsubscribe, or HELP for assistance. Message & data rates may apply.

Full SMS program terms — including message frequency and rate disclosures — are in our Terms of Service.

11. Contact

Questions, deletion requests, or data concerns: [email protected].