Privacy Policy

What Lumio does

Lumio is a Chrome extension and dashboard that (1) transfers your conversation from one AI assistant (Claude, ChatGPT, Gemini) to another when you choose to, and (2) tracks your AI usage as session and token statistics. It only runs on claude.ai, chatgpt.com, gemini.google.com, and Lumio's own site.

What we collect and store

For each conversation you have on a supported AI site, we store:

• Session metadata — platform, model name, conversation link, message count, timestamps.
• Token estimates — approximate input/output token counts per day.
• A first-line preview — up to 150 characters of your first message, so you can recognize conversations in your dashboard.
• Transfer history — source, destination, mode, message count, and a short preview when you transfer a conversation.
• Account basics — your email and name from sign-in.
• Provider API keys (optional, if you add them) — encrypted with AES-256-GCM before storage; never shown again, never sent to your browser or the extension.

What we do NOT do

• We do not store your conversation content on our servers. Full transcripts are read in your browser and passed directly into the AI you're transferring to. When you choose “Smart summary,” the transcript is processed transiently to generate the briefing and is not retained.
• We do not sell or share your data with anyone, ever.
• We do not use your data for advertising or creditworthiness purposes, and we don't transfer it except as needed to provide the features above.

Where your data lives

Data is stored in a Supabase (PostgreSQL) database with row-level security — each account can only ever read its own rows. The extension authenticates every request with your personal key.

Deleting your data

Settings → “Delete all my data” permanently removes every session, token record, transfer, health log, and stored API key — immediately and completely. Uninstalling the extension stops all collection instantly.

Contact

Questions or requests: pvh2108@columbia.edu