Privacy Policy

Lumsyl is a planning tool for the self-employed. Anyone can explore a worked example on this site without an account. Entering your own figures and saving a plan requires one, and accounts are currently invite-only.

This policy covers the launch list, accounts and saved plans, and the usage measurement that runs on every visit. Reading the worked example collects nothing beyond that measurement: you give us nothing by looking at it.

What we collect

If you join the launch list, we store four things:

• Your email address, as you typed it.
• Which page you signed up from — knowing the page tells us which topics people care about.
• The date and time you signed up.
• Whether we have sent you the welcome email, and when — so that we do not send it twice.

Those four fields are the whole launch-list record. We do not ask for your name.

If you have an account

We store your email address, the date the account was created, and which plan the account is on — free or paid. Those three fields are the whole account record. You sign in with a link we email you, so there is no password for us to hold.

The plans you save are stored under your account. A plan holds the figures you enter to model your situation — income, filing status, household details, business structure, contributions, withholding and estimated payments. You enter those figures to get an estimate; we store them so your plan is there when you return.

We do not connect to your bank or to any other financial account, we do not ask for your Social Security number, and there is nothing to upload. Card details go to Stripe and never reach us.

Why we collect it

We use your address on the launch list to tell you when early access opens, and to understand which parts of the product people care about. Nothing else. We do not sell your address, share it for advertising, or add you to unrelated mailing lists.

We use your account record to sign you in, to know which plan you are on, and to write to you about your account or your subscription. We store saved plans for one reason: so the tool can show you your plan when you come back. What is in a saved plan is not sold, not shared for advertising, and not used to build a profile of you.

Usage analytics

We measure how the site performs and which pages are visited, using Vercel Web Analytics and Vercel Speed Insights. They record the page viewed, the referring site, approximate country, and page-load speed. They set no cookies, build no profile of you, and do not follow you to other sites. We measure this whether or not you join the list, and none of it is connected to your email address.

No third party collects information about your online activities over time or across other websites through this site.

The site stores two things in your browser. Your light or dark theme preference stays on your device and is never sent to us. If you sign in, we set a session cookie so that you stay signed in as you move between pages, and that cookie is cleared when you sign out. We set no advertising cookies and no cross-site tracking cookies.

Who else can see it

The services that operate this site, and only as far as their work requires:

• Supabase — the database that stores the launch list, and the accounts and saved plans described above. Supabase also runs sign-in, issuing the link we email you and verifying that link when you click it.
• Stripe — payment processing. If you subscribe, we give Stripe your email address so that Stripe can bill you and send the receipt; your card details go to Stripe and never reach us. Stripe holds the customer and subscription records. Our own database keeps only whether the account is on the free or the paid plan.
• Vercel — hosting, and the analytics described above.
• Resend — email delivery, which requires handling your address in order to send to it. Sign-in links and launch-list email both go out this way.
• Google Workspace — our own email. When you write to one of the addresses on this site, your message arrives there, and that is where we reply from.
• Sentry — error monitoring, which tells us when something breaks. We have configured it not to receive the contents of your requests, your email address, or your cookies. It does record the country a failing request came from.

We will also disclose information where the law requires it. Beyond the services listed above, no one else receives your information.

Where it is held

Lumsyl is operated from the United States, and the services above store and process your information there. If you use this site from another country, your information still travels to the United States.

We do not sell your information

We have never sold personal information and do not intend to. Nevada residents may submit a verified request regarding the sale of covered information to privacy@lumsyl.com, our designated request address.

How we protect it

The launch list and saved plans are kept in a database the public site cannot read. Reaching that database requires a credential held only on the server and never sent to your browser. Each account’s plans are scoped to that account by a rule the database itself enforces, so a request for someone else’s plan returns nothing rather than the plan. The site is served exclusively over HTTPS. Signing in uses a single-use emailed link, so there is no password to be guessed, reused, or leaked from somewhere else.

No system is completely secure, and none of the measures above is a guarantee that your information cannot be reached by someone who should not have it.

How long we keep it

We keep your launch-list address until you ask us to remove it, or until the list is retired. Every launch-list email we send includes a way to unsubscribe. Sign-in links and messages about your own account are not marketing and cannot be unsubscribed from — they are how the account works; closing the account is what ends them.

A saved plan is kept until you delete it. You can delete a plan yourself, from inside the tool, at any time — including a plan your subscription no longer opens. Your account and the plans in it are kept for as long as the account exists; if you ask us to close it, we delete the account and everything in it within 30 days.

Deleting a plan or an account removes it from the live database. A copy may survive for a short period in the routine backups our providers take, and is overwritten as those backups roll over. Error reports and usage measurements are kept by the services described above on their own schedules; neither is tied to your account.

Reviewing, correcting, or removing your information

Email privacy@lumsyl.com and tell us what you would like done: you can ask what we hold about you, ask us to correct anything that is wrong, or ask us to delete what we hold. We will confirm once the request is complete.

Two things you can do yourself, without asking us:

• Delete a saved plan — from inside the tool, at any time.
• Download a plan as a file — also from inside the tool, and download works on every plan you have, including ones your subscription no longer opens.

To close your account, email us and say so. There is no button for it yet: we handle the request by hand, delete the account and everything in it within 30 days, and confirm once the deletion is done. Download anything you want to keep first.

No reason is required for any of these requests, and we will not treat you differently for making one.

Children

This site is not directed at children. You must be at least 18 to create an account or join the launch list, and we do not knowingly collect information from anyone under 13. If you believe a child has given us information, write to us and we will delete it.

Who is responsible

Lumsyl is operated by Lumsyl LLC, a Nevada limited liability company. Send privacy questions to privacy@lumsyl.com; anything else to hello@lumsyl.com.

Changes

When this policy changes, the date at the top changes with it. If a change is significant — a new service that receives your information, or a change to what we do with what we already hold — we will say so on the site rather than quietly revising this page.