Privacy policy

Oxlume (oxlume.com) is the data controller for this website and the Oxlume app. Until the company is incorporated, Oxlume is operated by its founder, Viktor Mamchur. The legal entity and registered address will be stated here on incorporation. Contact: privacy@oxlume.com.

• Account data: name, email, business name, city, preferred language.
• Content you upload: photos, clips, menus, price lists, and the text you write to the planner.
• Platform data through official APIs: your public profile, permission tokens and post performance (views, reach, profile visits).
• Usage data: which videos you approve or edit, app events, device type.
• Website data: our host may log your IP address, browser type and the pages requested, for security and troubleshooting. What you type into a contact form is used only to reply to you.

• To plan, compose, review and publish your content (performance of contract).
• To improve the planner for your business (performance of contract) and, in anonymised form, for all businesses (legitimate interest; you can object).
• To send product emails about the beta you applied for (legitimate interest; unsubscribe at any time).
• To keep the service secure and prevent abuse (legitimate interest).
• To meet legal duties such as tax and accounting (legal obligation).
• Where we ask for consent, for example to show your content as an example, you can withdraw it at any time.

Your images are processed by vision and language models to build your videos. Model providers process data under business terms that do not allow training on it. Your images are never used to produce content for another customer and never used to train public models. Every post that contains AI-edited or AI-generated material is labelled as such, visibly and in metadata.

If your photos or clips show identifiable people, you must have their consent. The app asks you to confirm consent for each photo, and the reviewer flags faces without a recorded confirmation. We do not use facial recognition to identify people.

We do not sell personal data. We share it only with providers that help us run the service, under data processing agreements: cloud hosting, AI model providers, email delivery, payment processing, and the platforms you connect (Instagram and Facebook by Meta, Google, TikTok). Those platforms receive only the content you approve for publishing and handle it under their own privacy policies.

EU data centres. Where data is processed or accessed outside the EU, for example by a model provider or by our team working remotely, standard contractual clauses or equivalent safeguards apply.

For the life of your account plus 30 days. Export is available from the app at any time. Disconnect your accounts and your media is deleted within 30 days. Contact form entries are deleted after 12 months unless they lead to an account.

Media is stored encrypted, every access is logged and limited to named team members, and connections use TLS. No system is perfectly secure. If a breach affects your data in a way the law requires us to report, we will tell you and the authorities without undue delay. Please report vulnerabilities to security@oxlume.com.

Access, correction, deletion, portability, restriction and objection, under the GDPR and, for UK users, the UK GDPR. Write to privacy@oxlume.com. You may complain to your national data protection authority; in the UK, this is the ICO.

This website stores in your browser only your language preference and any roadmap votes. No analytics cookies, no advertising cookies.

Oxlume is for business owners and is not directed at anyone under 18. We do not knowingly collect data from children.

We will update this policy as the service develops. Material changes are announced by email to account holders at least 14 days before they take effect. The effective date is at the top of this page. Questions: privacy@oxlume.com.