Privacy Policy
Effective August 22, 2026 · under legal review · Lueur Technologies LLC, Seattle, WA
Lueur Technologies LLC (“Lueur,” “we,” “us”) operates a booking and waitlist platform connecting clients with independent med spa and aesthetic providers. This policy covers the personal information we handle. Your health information is covered by our separate Consumer Health Data Privacy Policy.
1. Information we collect
- Account information — name, email address, and phone number if you provide it.
- Booking and waitlist activity — appointments, waitlist entries, offers, and your responses.
- Payment information — processed by Stripe; we never store full card numbers.
- Device and usage data — how you use the app and website, and approximate region. We never use location to target you near a clinic.
- Communications and consents — messages with us and records of the consents you give.
- Health information you provide — governed by the Consumer Health Data Privacy Policy, not this one.
2. How we use it
To provide and improve the service, fill cancelled appointments, process payments, send booking and account messages, send marketing messages only with your consent, prevent fraud, secure the platform, and comply with law.
3. How we share it
- With your provider, to deliver the appointments you book.
- With service providers under contract — hosting (Vercel, Supabase), email (Resend), payments (Stripe), and our in-app assistant (Anthropic) — limited to what each needs.
- For legal and safety reasons when required.
We do not sell your personal information, and we do not sell health data.
4. Your choices and rights
You can access and update your information in the app, unsubscribe from marketing with one click in any marketing email or in your account settings, withdraw consents, and request deletion by emailing hello@lueurapp.com. Washington residents have additional rights for health data — see the Consumer Health Data Privacy Policy.
5. Security
We use encryption in transit and at rest, least-privilege access, and audit logging. Card details are handled entirely by Stripe, a PCI-DSS Level 1 service provider. No system is perfectly secure.
6. Location
We do not use geofencing or device location to track you near a clinic, to collect health data, or to send you health-related offers.
7. Retention
We keep information as long as needed to provide the service and meet legal obligations. Health data is retained as described in the Consumer Health Data Privacy Policy.
8. Children
Lueur is for adults 18 and older. We do not knowingly collect information from anyone under 18.
9. Changes and contact
We will post changes here with a new effective date. Questions: hello@lueurapp.com. Lueur Technologies LLC, Seattle, WA.