LUMI SHOWS

PRIVACY POLICY - UNITED STATES

Version

1.0

Effective Date

July 21, 2026

Data Controller

Alexes Navarro Garcia, an individual operating under the trade name Lumi Shows

Business Address

273 E Jackson St, Apt A, Rialto, CA 92376, USA

Privacy Contact

support-us@lumishows.com

Account Deletion

https://lumishows.com/account-deletion

Controlling Language

English

1. Scope, Operator, and Acceptance

This Privacy Policy explains how Alexes Navarro Garcia, an individual operating under the trade name Lumi Shows ("Lumi," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information through the Lumi Shows mobile application, websites, live-commerce marketplace, auctions, Buy Now purchases, seller tools, messaging, Coins, digital gifts, support, and related services (the "Platform").

This Policy applies to buyers, sellers, streamers, viewers, account holders, and visitors using the United States version of the Platform. It does not replace notices provided by independent sellers, payment processors, carriers, identity-verification providers, or other third parties for their own processing.

By using the Platform, you acknowledge the practices described in this Policy. Where consent is required, Lumi will request it through an appropriate notice or affirmative action.

1.1 No Sale or Behavioral Advertising Sharing

Based on the current Platform configuration, Lumi does not sell personal information and does not share personal information for cross-context behavioral advertising. Lumi does not use an advertising identifier or confirmed third-party advertising SDK. If these practices change, this Policy and applicable privacy disclosures will be updated before the change is used.

1.2 Age Requirement

Lumi is intended only for people who are at least eighteen (18) years old. Lumi does not knowingly permit minors to create accounts or participate in transactions.

2. Personal Information We Collect

2.1 Account and Profile Information

Name, display name, username, email address, phone number, password hash, role, language, region, currency, date of birth or adult attestation, account status, verification status, and authentication or recovery information.

Profile photo, banner, biography, seller store name, social or profile fields, follows, favorites, and other profile settings.

2.2 Seller, Identity, and KYC Information

Seller application information, legal consents, business information, tax information, seller origin address, payout status, and risk-review information.

Government identification, identity-document images, proof of address, selfie or liveness information when enabled, document metadata, and information used to verify identity, age, ownership, eligibility, fraud risk, or legal compliance.

2.3 Commerce and Financial Activity

Listings, product descriptions and media, auctions, bids, Buy Now orders, purchases, cancellations, refunds, disputes, chargebacks, shipment status, seller earnings, settlement records, wallet activity, Coins, digital gifts, funded-balance provenance, and related transaction history.

Payment and payout references such as Stripe customer, PaymentIntent, charge, refund, dispute, Connect account, payout, transfer, and status identifiers.

Lumi does not appear to receive or store complete payment-card numbers, card security codes, or complete bank credentials. Those details are entered into and processed by Stripe or another authorized payment provider. Lumi may receive limited identifiers, status, last-four digits, card brand, or similar payment metadata.

2.4 Shipping and Fulfillment Information

Recipient and sender names, phone numbers, shipping and billing addresses, delivery instructions, parcel details, tracking information, label information, carrier events, and evidence of delivery or handoff.

2.5 User Content and Communications

Live video and audio, live-chat messages, private or support messages, comments, reactions, product photos and videos, reports, blocks, moderation records, dispute evidence, support tickets, and communications with buyers, sellers, or Lumi.

2.6 Device, Network, and Technical Information

IP address, user agent, device or hashed device identifier, operating system, app version and build, session and authentication records, cookies, local storage, security logs, audit events, push-notification token, crash or error information generated by the Platform, and timestamps.

The current Platform audit did not confirm use of IDFA, Android Advertising ID, cross-app tracking, third-party advertising analytics, or a third-party crash-reporting SDK.

2.7 Device Permissions

Camera and microphone access when you create listings, upload media, verify identity, or host a live stream.

Photo library, file, or document access when you choose media or verification documents.

Notification permission and push token when you enable push notifications.

Lumi does not collect precise device location based on the current implementation. Addresses you enter for shipping, billing, seller origin, or identity verification are still location-related personal information.

2.8 Information From Third Parties

Google sign-in information, such as Google account subject identifier, email, name, and profile image, when you choose Google authentication.

Payment, fraud, dispute, payout, and identity information from Stripe or another payment provider.

Streaming, notification, shipping, carrier, email, security, and infrastructure events from service providers used to operate the Platform.

3. How We Use Personal Information

Create and secure accounts; authenticate users; provide account recovery; maintain sessions; and prevent unauthorized access.

Operate live streams, auctions, bids, Buy Now purchases, listings, chat, follows, notifications, Coins, digital gifts, seller tools, and support.

Process payments, refunds, disputes, seller settlements, payouts, shipping, labels, tracking, taxes, and transaction records.

Verify age, identity, seller eligibility, payment ownership, business information, tax information, and risk indicators.

Detect and investigate fraud, counterfeit goods, stolen goods, shill bidding, account takeover, payment abuse, harassment, safety concerns, and policy violations.

Moderate user-generated content, enforce Platform rules, resolve disputes, respond to support requests, and protect buyers, sellers, Lumi, and third parties.

Maintain, debug, secure, measure, and improve Platform performance and reliability.

Send transaction, account, security, policy, support, live-event, reminder, and push communications.

Comply with legal, tax, accounting, regulatory, court, law-enforcement, payment-network, and contractual obligations.

4. Payments, Stripe, and Seller Payouts

Lumi uses Stripe and may use other authorized payment providers to process purchases, winning auctions, refunds, disputes, seller onboarding, settlement instructions, and payouts. Stripe acts as an independent service provider or separate controller for portions of its processing under its own privacy notice and terms.

Lumi may send Stripe account details, transaction amounts, order identifiers, customer identifiers, email, billing or shipping information, fraud signals, seller information, and other data necessary to process or protect a transaction. Stripe may return payment status, risk results, charge, refund, dispute, payout, or Connect information.

Stripe is not the seller of marketplace products and does not determine product authenticity, condition, fulfillment, or entitlement to a marketplace remedy. Lumi and sellers remain responsible for their respective obligations.

5. Live Streaming, Notifications, Shipping, and Other Providers

Depending on enabled features, Lumi may use the following categories of service providers:

Amazon Web Services and Amazon IVS for live-video and live-audio streaming, playback, storage, and related infrastructure.

Expo notification services and device platform services for push-token registration and delivery of notification payloads. Notification content may include account, transaction, live-event, support, or message information.

Google for optional Google sign-in and related identity verification.

EasyPost, carriers, and logistics providers when shipping rates, labels, tracking, or delivery services are enabled.

Email and SMTP providers for verification, password recovery, support, and operational notices.

Hosting, database, storage, security, content-delivery, monitoring, and professional service providers necessary to operate and protect the Platform.

A provider may process information in another state or country. Lumi requires service providers to use information only for authorized services and to provide appropriate protection, subject to their own legal obligations.

6. When We Disclose Information

6.1 Buyers, Sellers, and Public Users

Public profile information, listings, product media, live streams, public chat, reactions, and seller information may be visible to other users. Sellers receive buyer, order, delivery, and communication details reasonably necessary to fulfill transactions. Buyers receive seller, listing, shipment, and transaction information reasonably necessary to complete and evaluate a purchase.

6.2 Service Providers

We disclose information to payment, streaming, push-notification, authentication, shipping, email, hosting, storage, security, moderation, support, and professional service providers as necessary to perform services for Lumi.

6.3 Safety, Legal, and Enforcement

We may preserve or disclose information when reasonably necessary to comply with law, legal process, tax or regulatory requirements, court orders, lawful government requests, payment-network rules, fraud investigations, intellectual-property claims, emergencies, or to protect the rights, property, safety, or integrity of users, sellers, third parties, or Lumi.

6.4 Business Changes

Information may be disclosed as part of a financing, reorganization, sale, merger, acquisition, bankruptcy, or transfer of all or part of the Platform, subject to applicable law and appropriate confidentiality protections.

7. Cookies, Sessions, Local Storage, and Similar Technologies

Lumi uses account sessions, authentication tokens, cookies, and local storage to keep users signed in, preserve language or region preferences, secure transactions, maintain cart or navigation state, prevent fraud, and operate the website and mobile application.

Lumi does not currently use confirmed advertising cookies or cross-site behavioral advertising technologies. Browser or device settings may allow you to limit cookies, local storage, notifications, camera, microphone, or photo access, but disabling them may prevent related features from working.

8. Data Retention

Lumi retains personal information only for as long as reasonably necessary for the purposes described in this Policy, to provide the Platform, and to satisfy legal, tax, accounting, payment, fraud-prevention, safety, dispute, chargeback, moderation, and recordkeeping obligations.

Retention depends on the type of information and why it is needed. Account credentials, public profile content, active sessions, push tokens, and content not required for retention should be deleted or de-identified after a valid deletion request. Transaction, payment, tax, seller, KYC, fraud, dispute, safety, and audit records may be retained after account deletion when reasonably necessary or legally required.

When retention is no longer necessary, Lumi will delete, de-identify, aggregate, or securely isolate the information. De-identified or aggregated information that cannot reasonably identify an individual may be retained.

9. Account and Data Deletion

You may initiate account deletion from the account or privacy settings in the Lumi mobile application. You may also request deletion without reinstalling the app by visiting https://lumishows.com/account-deletion or contacting support-us@lumishows.com.

After verifying the request and resolving any steps that must occur first, Lumi will delete the account and associated personal information that Lumi is not legally or operationally required to retain. Temporary suspension, deactivation, or freezing is not treated as completed deletion.

Certain records may remain where necessary for legal compliance, taxes, accounting, completed transactions, payment disputes, chargebacks, fraud prevention, marketplace safety, seller obligations, intellectual-property claims, law-enforcement requests, or the establishment, exercise, or defense of legal claims. Retained records will be limited to those purposes and access will be restricted.

Deletion may not remove copies of public or transaction communications already received or lawfully retained by another user, seller, payment provider, carrier, or other independent recipient. Lumi will request deletion from service providers when applicable and reasonably possible.

10. Security

Lumi uses administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access, role-based permissions, HTTPS/TLS transmission, session controls, risk review, restricted KYC and support access, and provider security controls.

No system is completely secure. You are responsible for protecting your password and devices and for notifying Lumi promptly of suspected unauthorized access. Lumi will investigate and provide notices of qualifying security incidents as required by applicable law.

11. Your Choices and Privacy Rights

11.1 Account and Communication Choices

Update account, profile, shipping, and seller information through available settings or support.

Disable push notifications through device settings and unregister tokens through available account controls.

Withdraw optional camera, microphone, photo, file, or notification permissions through device settings.

Request access, correction, deletion, or a copy of information by contacting support-us@lumishows.com.

11.2 United States State Privacy Rights

Depending on your state and whether the applicable law covers Lumi, you may have rights to know or access personal information, correct inaccuracies, request deletion, obtain portability, opt out of sale or certain sharing, limit certain uses of sensitive information, and appeal a denied request. Lumi will not discriminate against you for exercising an applicable privacy right.

Lumi does not currently sell personal information or share it for cross-context behavioral advertising. Requests may require identity verification. Authorized agents may be required to provide proof of authority and the consumer may be asked to verify the request directly.

11.3 Revoking Consent

You may revoke consent for optional processing by changing device permissions, disabling optional features, or contacting support. Revocation does not affect processing already completed and may prevent Lumi from providing a feature that requires the information.

12. International Processing

Lumi is operated from the United States and uses service providers that may process information in the United States or other countries. Privacy laws in those locations may differ from those where you live. Lumi uses contractual, technical, and organizational measures appropriate to the processing and applicable law.

13. Changes to This Policy

Lumi may update this Policy to reflect changes in law, Platform features, providers, data practices, or security controls. The current version will identify its effective date and version number. Material changes may be communicated in the app, on the website, by email, or through renewed consent when required.

14. Contact

Privacy questions, rights requests, complaints, and account-deletion requests may be sent to support-us@lumishows.com.

Lumi ShowsAttn: Privacy273 E Jackson St, Apt ARialto, CA 92376United States