Security & data
What we do with data, plainly.
LumenGrow handles two kinds of data: yours, and the prospects you work with. Here is how we treat both, without certifications we don't hold.
Credentials encrypted at rest
SMTP passwords and OAuth tokens for connected mailboxes are encrypted and used only to send and sync on your behalf.
AI on the provider you choose
AI features run on our model, hosted on Microsoft Azure OpenAI, or on your own key with the provider you pick — Anthropic, OpenAI, any OpenAI-compatible endpoint, or your own Ollama server. Prospect data and message content go to the one in use and no other.
No data resale
We don't sell your data, and we don't sell or resell the prospect data you bring or reveal.
Card details stay with the processor
Payments go through Stripe or PayPal. We never see or store your full card number.
Workspace separation
Leads, campaigns, mailboxes and opt-out lists belong to one workspace and aren't shared with others.
Scoped, rate-limited API keys
API keys are read-only unless you grant more, and each one is rate-limited.
Who controls what.
Your account data
For data about you and your team, such as name, email and billing details, LumenGrow is the controller.
Your prospect data
For the contacts you upload, enrich or message, you are the controller and we process it on your instructions. You need a lawful basis to contact them.
If you're a prospect or a site owner.
Remove your data
If your business email is in our contact database, you can delete it and stop it from being added again.
Open the opt-out formUnsubscribe from an email
Every campaign email has a one-click unsubscribe. Using it, or replying “stop”, prevents that sender from emailing you again.
Stop our crawler
LumenGrowBot reads public pages of companies our customers watch. Send us your domain and we'll stop.
About LumenGrowBotSecurity question or a vulnerability to report? Contact us. A person reads every message.