Privacy

Privacy policy

Lume is a private career workspace. This policy explains what data is handled by the app and by the Lume Job Application Assistant browser extension.

Last updated: 10 June 2026

Account data

Lume uses Google or GitHub sign-in to verify your identity and create your session. We store basic account details such as your name, email address, and profile image when they are provided by your sign-in provider. Lume does not request access to your repositories, emails, files, contacts, or provider content.

Workspace data

Lume stores the job applications, contacts, milestones, notes, links, search preferences, saved searches, hidden search results, and imported records that you choose to create. This data is used to show your dashboard, job-search tools, contact list, and application timeline.

Browser extension data

Lume Job Application Assistant reads supported job and profile pages only when the extension is enabled and the user is viewing a supported page. It shows a review step before anything is sent to Lume. Confirmed imports can include job titles, company names, locations, salary text, job descriptions, source links, LinkedIn profile names, profile headlines, profile companies, and profile URLs. The extension uses browser storage to keep the user's connection token, workspace configuration, and enabled or disabled state. Extension data is sent to the user's configured Lume workspace over HTTPS and is not sold.

Browser extension permissions

Lume Job Application Assistant requests access only to supported job and profile URLs so it can read job and profile details for import. It requests access to Lume URLs so the website and extension can connect, exchange the user's extension token, and send confirmed imports to the user's workspace. It uses Chrome storage to remember the connection token and enabled state between browser sessions.

Sharing and storage

We do not sell your data. Data is shared only with the service providers required to run Lume, such as hosting, authentication, database, and analytics providers. Extension imports are sent to your configured Lume workspace over HTTPS.

Your control

You can edit or delete records in Lume, disconnect the browser extension, and revoke extension tokens from the extension settings page. Disconnecting the extension stops future imports from that browser until it is connected again.