Privacy
What we hold, and why.
Booking a creator means telling us where you are and paying someone to show up. Becoming a creator means showing us your ID. This is exactly what that involves, what we do with it, and how to get it back or get it deleted.
- Effective
- Applies to
- Everyone who uses LumiQ
1. Who we are
LumiQ is a marketplace for booking photographers, videographers, make-up artists, bands, DJs and musicians. This policy explains how LumiQ handles personal data for everyone who uses it — customers who book, creators who get booked, and anyone who watches the public reels feed.
We operate in the United States and Nigeria. For people in Nigeria, LumiQ is the data controller under the Nigeria Data Protection Act 2023. For people in the United States, LumiQ is the business responsible for the personal information described here.
Questions about anything below, or a request about your own data, go to privacy@lumiqapp.com. We answer every one.
2. What we collect
We collect only what a booking, a payout or a safe marketplace actually needs. Grouped by why it exists:
| Category | What it is | Why we hold it |
|---|---|---|
| Account | Email address, name, a hashed password (never the password itself), your role, and — if you turn it on — a two-factor secret. | To create and secure your account, and to send you booking and account mail. |
| Bookings | The address and its coordinates, date and time, the category and scope, and the status history of the job. | To match you with creators nearby, and so your creator can get to the right place at the right time. |
| Messages | The messages you exchange with the other side of a booking. | To run the booking, and to investigate a dispute or a safety report. |
| Payments | A payment reference from Stripe or Paystack, the amount and currency, and the card brand and expiry shown on your saved methods. We never receive or store your full card number. | To take payment, issue refunds, and keep the double-entry ledger that proves who is owed what. |
| Creator profile | Display name, service area, categories and rates, portfolio, and the payout account name held by our payment provider. | To list you publicly, price your work, and pay you. |
| Identity (creators) | A government ID document, a selfie, and a liveness and face-match result — handled by our verification provider. See clause 4. | To confirm a creator is who they say they are before they enter a stranger’s home. |
| Delivered work | The photos and video a creator delivers to you, plus attendance proof for an on-site job. | To deliver your gallery and to resolve a dispute about whether a shoot happened. |
| Reels | Reels a creator publishes, and the likes, saves, comments, follows and reports on them. | To run the public feed and to keep it free of abuse. |
| Usage | Which reels you watched and for how long, and the interests we infer from that. | To rank the feed. This is the only profiling we do, and it never affects pricing. |
| Security | IP address, user agent, session records, and an audit log of sensitive account and money actions. | To detect fraud and account takeover, and to reconstruct what happened when something goes wrong. |
| Safety | Reports you make about a person, a reel or a review, and what our team found. | To investigate harm and remove people who cause it. |
3. Where your location comes from
Matching needs a location so we can find creators near you. Browsing works without one. You choose how we get a location: share your device location, or type a city. Typing a city works everywhere the app does, and we never fall back to device location if you decline it.
The address you enter for a booking is different — it is part of the job. We keep it with the booking and share it with the creator assigned to you, because that is where they have to go.
4. Identity verification and biometrics
Creators verify their identity before they can claim paid work. Verification is run by Didit, our identity provider. You are shown their notice and consent before anything is captured, and the check happens on their systems — LumiQ never receives your ID image or your selfie.
What LumiQ stores is the outcome: a session reference, the workflow used, the status, the attempt number, and the date you passed. Nothing biometric is stored on LumiQ’s servers.
Didit processes a scan of your face geometry to run the liveness check and to match your selfie against your ID. In Illinois, Texas and Washington, that is a biometric identifier with specific rules, so here is the disclosure those laws require.
Biometric notice and consent. Your face scan is collected for one purpose only: to confirm that you are the person on the ID document you presented, and that you are physically present. It is never sold, leased, traded or otherwise profited from. It is held by Didit for no longer than the period needed to complete verification and satisfy the record-keeping obligations that apply to identity checks, and in any event no more than three years after your last interaction with LumiQ — after which it is permanently destroyed. You give your written consent to this on the verification screen before capture, and you can decline. Declining means you cannot claim paid work on LumiQ; it does not affect a customer account.
5. How we use it
- To run the service: create your account, match a booking, take payment, deliver your files, and pay creators out.
- To keep the marketplace honest: verify creator identity, detect fraud, investigate safety reports and disputes, and maintain the audit log.
- To tell you things you need to know: booking updates, delivery, payout and account notices. These are part of the service and are not marketing.
- To rank the reels feed from what you watch. You can clear this by closing your account; it is never used to set your price.
- To meet legal obligations — tax, accounting, anti-fraud and lawful requests.
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
6. Our lawful basis for using it
Where the law asks us to name a lawful basis — Nigeria under the NDPA, and anyone in the EU or UK whose data reaches us — these are the ones we rely on.
| Basis | What it covers |
|---|---|
| Performance of a contract | Everything booking, payment, delivery and payout related. Without it there is no service to provide. |
| Legitimate interests | Security, fraud prevention, safety investigations and ranking the reels feed. We have weighed each against your interests and recorded why it is proportionate. |
| Consent | Device location, and biometric identity verification. Both are optional and both can be withdrawn. |
| Legal obligation | Tax, accounting and anti-fraud records, and responding to lawful requests. |
7. Who else sees it
The other side of your booking sees what the booking requires. A creator assigned to you sees your name, the address, the time, the scope, and your messages. You see the creator’s profile, rates and work. A creator you have not been matched with sees nothing about you.
Behind the service we use a small number of processors. Each is bound by contract to use your data only to provide their service to us:
| Processor | What they do | Where |
|---|---|---|
| Stripe | Card payments, creator payouts and identity of payout accounts | United States and Ireland |
| Paystack | Card and bank payments and creator payouts in Nigeria | Nigeria and South Africa |
| Didit | Identity document, liveness and face-match verification | European Union |
| Resend | Transactional email delivery | United States |
| Tigris Data | Object storage for photos, video and portfolio files | Amsterdam, Netherlands |
| Railway | Application hosting and the database | Netherlands |
| Cloudflare | DNS and network protection | Global edge network |
- We also disclose personal data when the law requires it, when we need to establish or defend a legal claim, or when there is a genuine risk to someone’s safety.
- If LumiQ is ever acquired or merged, your data moves with the service, and we will tell you before it does.
8. Where your data is processed
LumiQ’s servers and file storage are in the Netherlands. If you are in the United States or Nigeria, your personal data is transferred to and processed in the European Union, and some of it also reaches the United States and South Africa through the processors listed above.
For transfers out of Nigeria we rely on the safeguards permitted by the Nigeria Data Protection Act 2023 — contractual protections with each processor that carry the same duties we owe you. For transfers involving the EU or UK we rely on the European Commission’s Standard Contractual Clauses.
9. How long we keep it
| What | How long | Why |
|---|---|---|
| Your account and profile | Until you close it | It is yours while you use it |
| Closed accounts | Anonymised, then the shell is kept | Your name, email and contact details are stripped so the bookings and ledger entries either side of you still add up |
| Bookings, payments and ledger entries | 7 years after the booking ends | Tax, accounting and chargeback obligations in both markets |
| Delivered photos and video | 2 years after delivery, unless you delete them sooner | So you can come back for your gallery |
| Messages | 2 years after the booking ends | Dispute and safety investigations |
| Identity verification outcome | 3 years after your last activity | To prove a creator was verified when they worked |
| Security and audit logs | 2 years | To investigate fraud and account compromise |
| Safety reports | 7 years | A pattern of harm is only visible over time |
| Reels watch history | Until you close your account | Feed ranking only |
10. Your rights and choices
Wherever you are, you can ask us to show you the personal data we hold about you, correct it, delete it, or send you a copy in a portable format. Use Settings for the quick things — your profile, your notification choices, closing your account — and privacy@lumiqapp.com for anything else.
- Nigeria (NDPA 2023): you have the right to be informed, to access, to rectification, to erasure, to restrict or object to processing, to portability, and not to be subject to a decision based solely on automated processing. You may complain to the Nigeria Data Protection Commission.
- California (CCPA/CPRA): you have the right to know, delete, correct, and to limit the use of sensitive personal information; we do not sell or share personal information, so there is nothing to opt out of; and we will never discriminate against you for exercising a right.
- Other US states with privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas and Oregon — give you materially the same rights, and we honour them for every US resident regardless of state.
- Biometric data: you can withdraw your consent to identity verification at any time by emailing privacy@lumiqapp.com. Withdrawing it ends your ability to take paid work.
We answer access, deletion and correction requests within 30 days, and acknowledge them within 10 business days. If a request is complex we may take another 45 days and will tell you why before we do. Verifying who you are is part of the process — we will never hand your data to someone claiming to be you.
11. Closing your account
You can close your account from Settings. We anonymise rather than hard-delete: your name, email, phone and profile details are removed, and what remains is the shape of the bookings and money that passed through — with nothing that points back to you.
We do it that way because a completed booking involves someone else. Deleting a customer outright would corrupt a creator’s earnings history and the ledger that proves they were paid. Anonymising removes you without rewriting their records.
Some things survive a closure: records tied to completed payments, for the tax and accounting periods above, and safety records where there is an open investigation or a genuine risk to someone.
12. How we protect it
- Passwords are hashed, never stored or recoverable in plain text. Two-factor authentication is available on every account and required for staff.
- Your card number never touches LumiQ. Checkout runs against Stripe or Paystack directly.
- Files are served from private storage through short-lived signed links, so a gallery URL cannot be passed around indefinitely.
- Staff access to personal data is permission-gated, and every sensitive action is written to an audit log with the reason the staff member gave.
- No system is perfect. If a breach ever affects your personal data, we will notify the relevant regulator — the Nigeria Data Protection Commission within 72 hours where the NDPA applies — and tell you directly where there is a real risk to you.
14. Children
LumiQ is for adults. You must be at least 18 to hold an account of any kind, because every account can enter a paid booking and a minor cannot form that contract. We do not knowingly collect personal data from children, and if we learn that we have, we delete it.
If a child appears in a shoot you book — a family session, a birthday — the adult who booked it is responsible for consenting on their behalf, and those photos are delivered privately to that adult. They never enter the public reels feed unless the creator has the adult’s permission.
15. Changes to this policy
When we change something that matters, we update the effective date at the top and tell account holders by email before it takes effect. Minor corrections — a clearer sentence, a processor’s new name — we make quietly and date.
16. Contact us
Privacy questions and data requests: privacy@lumiqapp.com. Anything else: hello@lumiqapp.com. Safety: safety@lumiqapp.com.
We are happy to give a postal address on request — email privacy@lumiqapp.com and we will send it.