This Privacy Policy describes how Lumisheets ("Lumisheets," "we," "us," or "our") collects, uses, stores, and shares personal information when you visit our website, subscribe to the Lumisheets service, or otherwise interact with us.
Lumisheets provides research resources and shared planning workspaces for members, including counselors, consultants, and parents, and for invited students. We process the account and workspace information needed to provide these features. The information we handle may include student information entered by members or students.
By using our website or subscribing to the service, you confirm that you have read and understood this Privacy Policy.
Lumisheets is operated by its co-founders, based in Bangkok, Thailand and Tokyo, Japan. For all data-protection questions and requests, the controller of your personal information is Lumisheets, contactable at hello@lumisheets.net.
We do not currently have a designated Data Protection Officer; please direct all privacy enquiries to the address above.
We collect the minimum information needed to operate your subscription and the website. Specifically:
Workspace information: Members and students may provide student names, grade levels, interests, academic information, saved opportunities, next steps and deadlines, shared messages, and Road to College inputs and generated profiles. Members may also save private notes. Information marked as private counselor notes is kept separate from the student’s shared workspace.
Optional Google Calendar connection: If you choose to connect Google Calendar, we receive authorization tokens that let Lumisheets create and manage a separate calendar for your Lumisheets events. We store the refresh token encrypted so syncing can continue when you are away. We do not request access to your existing personal calendars or Gmail.
We use personal information for the following purposes, and only these purposes:
We do not sell your personal information. We do not share it with third parties for their own marketing purposes. We share information only with the limited set of service providers needed to operate the service:
Google API data: Lumisheets’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We use calendar authorization only to provide the calendar features a person chooses. We do not use Google API data to train generalized AI models.
We may also disclose information when required by law, to enforce our Terms of Service, to protect our rights or those of others, or in connection with a sale, merger, or transfer of the business (in which case the acquirer would be bound by this Privacy Policy or a substantially equivalent one).
Lumisheets is operated from Thailand and Japan. Our service providers (Google, Squarespace, Outseta, Cloudflare) are based primarily in the United States. As a result, your personal information will be transferred to and processed in countries outside the European Economic Area, the United Kingdom, and other jurisdictions whose data-protection laws may differ from your own.
Where personal information is transferred internationally, we rely on the safeguards offered by each service provider — including Standard Contractual Clauses (where applicable), adequacy decisions, or equivalent legal mechanisms. You can review each provider's transfer mechanisms via the links in Section 4 above.
We retain your personal information only for as long as needed for the purposes described in this Policy:
You may disconnect Google Calendar from Account at any time. This stops synchronization, revokes Lumisheets’ Google authorization, and removes our stored calendar credentials. Existing calendar events remain in your Google account; you can remove those copies in Google Calendar. Copies added manually or downloaded as calendar files are controlled by you and are not automatically updated or removed by Lumisheets.
Permanent account deletion removes the account’s saved work and starts cleanup of its integration credentials. A connected student login is also deleted if it has no other active member connection or independent membership. Students with another active connection or membership retain their other authorized workspaces. Payment and accounting records may be retained separately as described in this policy.
Subject to applicable law, you have the following rights regarding your personal information. To exercise any of them, email us at hello@lumisheets.net. We will respond within thirty (30) days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know the categories of personal information we collect and share, the right to delete, the right to correct, and the right to opt out of any sale or sharing of personal information.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. California residents may exercise their rights by emailing us at hello@lumisheets.net. We will not discriminate against you for exercising any privacy right.
Account access is provided through Outseta; the website is hosted by Squarespace; application services and workspace data are hosted by Cloudflare. Google Calendar integration credentials are encrypted before storage. Access to shared workspaces is checked on the server. Optional calendar events are stored by Google in the calendar you authorize.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. In the event of a personal-data breach affecting you, we will notify you and the relevant authorities as required by applicable law.
Our website uses cookies and similar technologies provided by Squarespace. These include:
We do not use cookies for third-party advertising, retargeting, or social-media tracking. Where required by law, our website displays a cookie banner allowing you to manage non-essential cookie preferences.
You can disable cookies entirely through your browser settings; some site features may not function correctly if you do.
Lumisheets includes invited student accounts and may process information about students who are minors. A counselor, consultant, parent, or other member who enters student information or invites a student must have the authority to do so and obtain any permissions required for that use. Where parental or guardian consent is required, it must be obtained before the student uses the service or their information is submitted. Contact hello@lumisheets.net about student privacy, unauthorized invitations, or requests to remove information.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of the document indicates when it was most recently revised. For material changes, we will notify active subscribers by email at least thirty (30) days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the revised Policy.
Privacy questions, data-rights requests, or complaints: hello@lumisheets.net
General enquiries: hello@lumisheets.net
Lumisheets LLC is a Wyoming limited liability company operated by its co-founders, based in Bangkok, Thailand and Tokyo, Japan.