This Privacy Policy explains how Lumos Holdings LLC (“Lumos,” “we,” “us”) collects, uses, and protects information when your agency uses our CRM software and related services (the “Service”). By using the Service you agree to this policy. If you are a client whose information was submitted through an agent’s quote form, see the client Privacy Policy instead — this page is for the agencies and agents who subscribe to the Service.
Information we collect
- Account data: name, email, phone, password (hashed), agency.
- Customer/lead data you enter or import (PII): names, phone numbers, email addresses, mailing addresses, dates of birth, beneficiary names, policy and coverage details.
- Communications: call recordings/transcripts, SMS and email content sent through the Service.
- Usage & device data: log data, IP address, browser type, and cookies needed to run the app.
How we use it
To provide and operate the Service (managing leads, scheduling, calling/texting, payouts), to secure accounts, to provide support, to comply with law, and to improve the product. We do not sell your or your customers’ personal information.
AI processing & analytics
To power the AI dialer, the live-call co-pilot, the AI receptionist, and call analytics, the lead/customer data you enter and your call audio and transcripts are processed by AI subprocessors — including speech-to-text and large-language-model providers (e.g., Deepgram and Google Gemini) and telephony (Twilio). These providers process the data only to deliver those features on our behalf under contract, and do not use it to train their own models without our authorization. We also use aggregated, de-identified usage data (e.g., conversion, talk-time, and coaching metrics) to measure performance and improve the Service. AI calling and texting run only when you launch them — no AI contact happens without an agent starting a campaign, dial, or reply, and individual leads can be excluded or vaulted at any time.
How we protect it
Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Access is restricted by row-level security and role-based permissions. We retain personal data only as long as needed to provide the Service or as required by law, then delete or anonymize it.
Service providers
We share data only with vendors that help us run the Service (e.g., hosting, database, telephony/SMS, email, payments, AI processing) under contracts that require them to protect it.
Communications consent (calls, SMS, email)
You are responsible for having lawful consent to contact the leads and clients you load into the Service, consistent with the TCPA, CAN-SPAM, and applicable state laws. The Service supports opt-out: recipients may reply STOP to text messages (honored automatically and added to your Do-Not-Call suppression list), or tell the agent or AI assistant on a call to be removed. Honor all opt-outs promptly. See our communication preferences & opt-out page.
Your rights
Depending on where you live (e.g., CCPA/CPRA, GDPR), you may have rights to access, correct, delete, or export your personal data, and to opt out of certain processing. To make a request, contact us at darinfoxcroft16@gmail.com. We will verify and respond as required by law.
Children
The Service is not directed to children under 16 and we do not knowingly collect their data.
Changes & contact
We may update this policy; we’ll post the new date above. Questions? Contact Lumos Holdings LLC, 420 7th St, Racine, WI 53403, darinfoxcroft16@gmail.com.