Privacy policy

Lux Social Studio is run by Victoria Lang, a sole trader trading as Lux Innovations (a registered business name), in the Northern Territory, Australia. ABN 35 124 439 083.

To ask about your information, email info@luxinnovations.com.au.

We have chosen to be covered by the Privacy Act 1988 (Cth), and we follow the Australian Privacy Principles.

We only collect what the app needs to work.

• Your account: your email address, and your name if you give it.
• Your brand: what you type in Brand setup, such as your business name, what you sell, your audience, your voice, your colours, fonts and logo.
• What you make: ideas, scripts, captions, plans, carousels, and the videos and photos you upload.
• Face photos: only if you choose to add them (see section 4).
• Connected accounts: which social accounts you connect, and how your posts perform. We never get your social media passwords.
• Payments: your plan, its status and your Stripe customer number. Stripe holds your card details, not us.
• Free trial: when you start a free trial, we keep a one-way code made from your email address and your card, so each person gets one trial. It can't be turned back into your email or card details.
• Usage: how many AI calls and edits you use, so we can apply your plan's limits and work out our costs.
• Waitlist: your email, and your first name, niche and where you heard about us if you give them.
• Technical: sign-in cookies and the normal records our servers keep, such as the time of a request.

Voice typing: when you speak an idea instead of typing it, your browser's own speech service turns it into text (for example Google in Chrome, or Apple in Safari). We only receive the text.

• To run the app: plan, write, edit and post your content.
• To keep other people's faces, including children's, out of anything sent to an outside AI service.
• To take payments and apply your plan.
• To give each person one free trial.
• To send you sign-in links and messages about your account.
• To keep the app safe, fix problems and understand what it costs to run.

Face matching is optional. If you add 3 to 5 photos of your own face, the app uses them to tell your face apart from anyone else's in your videos and photos. That lets it blur everyone else before a video goes to an outside AI service.

Under Australian privacy law, information used to recognise someone's face is sensitive information. We only collect it with your clear consent: you choose to add the photos, and the app asks you to tick "I agree" first, and keeps a record of when. You can say no and still use the app.

• Only add photos of yourself. Never add photos of anyone else.
• The matching runs on our own computer, not on an outside AI service.
• Your face photos are never sent to an outside AI service.
• Only the workspace owner can add or remove face photos.
• You can remove them, or withdraw your consent, at any time in Brand setup → Your face. Withdrawing deletes all your face photos. Deleting your account deletes them too.

If you don't add face photos, the app treats every face as someone else's, so nothing goes to the outside video AI.

Many of our users film at home, so children may be in shot. We built the app so their faces never reach an outside AI service.

• Before any video goes to Google Gemini, our own computer checks every frame. Every face that isn't confidently yours is blurred, in a small, low-quality copy. Only that blurred copy is sent.
• If the check can't run, or doesn't finish cleanly, nothing is sent.
• Voices, and arms or hands in shot, can stay in the copy.
• Finished Reels and photos are checked the same way, on our own computer. If anyone else's face is in them, or the check can't run, the post waits until the workspace owner says it's fine to post.

You are responsible for what you post. Only post children, or anyone else, when you have the right to, and when it's safe for them.

Lux Social Studio is for adults running a business. You must be 18 or over to make an account.

We use outside AI services to write and edit for you. Each one only gets what it needs:

• Anthropic (Claude) gets text only. It never gets your videos, photos or face photos.
• Google (Gemini) only gets the blurred, low-quality copy described in section 5. We use Google's paid service.
• Speech in your videos is turned into text on our own computer.

Check what the AI writes before you post it. It can get things wrong.

We use these services to run the app. Some of them store or handle information outside Australia, for example in the United States. We choose services with strong security, and only share what each one needs.

• Supabase: Our database, sign-in and file storage. What it gets: Your account, your workspace and brand details, your posts, face photos (if you add them) and other files.
• Cloudflare: Stores your videos and images (R2), and checks that waitlist sign-ups are people, not bots (Turnstile). What it gets: Your videos, images and finished posts. On the waitlist page, technical details from your browser.
• Anthropic (Claude): Writes and checks hooks, scripts, captions, carousels and plans. What it gets: Text only: your brand details, ideas, scripts, captions and the words spoken in your videos (a written transcript). Never your videos, photos or face photos.
• Google (Gemini): Watches a copy of a video to help plan the edit. What it gets: A small, low-quality copy of your video with every face that isn't yours blurred on our own computer first (see "Children and other people in your videos"). We use Google's paid service.
• ElevenLabs: Turns speech into text. What it gets: The sound from a video. Off by default: speech is turned into text on our own computer. ElevenLabs is only used if we switch it on.
• Zernio: Connects your social accounts and posts for you. What it gets: The posts you schedule (video, images, captions), the accounts you connect and the results of your posts.
• Stripe: Takes payments. What it gets: Your name, email, card details and billing address. Your card details go straight to Stripe; we never see or store them.
• Vercel: Hosts the app's website. What it gets: Every page you open and what you send through it, with your browser's technical details (such as your IP address). Your videos and images go straight to Cloudflare instead. Only once the app is hosted online; until then it runs on our own computer.
• Resend: Sends our emails: sign-in links and the free-trial reminders. What it gets: Your email address, your first name if you gave it, and the words of the email. Only once it's set up; until then sign-in emails are sent by Supabase.
• Higgsfield: Makes an AI image when you ask for one in the Library. What it gets: The words describing the image. Never your photos, videos or face photos. Off unless AI images are switched on.
• Apple, Google or Mozilla (push notifications): Delivers a notification to your phone or browser, for example when an edit is ready. What it gets: The notification, encrypted so only your device can read it, and when it was sent. Only if you turn notifications on.
• [the cloud computer that edits videos: to be added]: Runs the video editing in the cloud once it moves off our own computer. What it gets: Your videos while they're being edited, and the same text Anthropic gets. Not used yet: videos are edited on our own computer.

When you post, your content also goes to the social platforms you choose (such as Instagram, Facebook or TikTok), under their own privacy policies.

We never sell your information, and we never use it for advertising.

The cloud is a conveyor belt, not a library. Keep your own copy of everything you post.

• Raw video takes: deleted once every edit made from them is approved.
• Finished posts (videos, carousel images and photos): deleted from the cloud 7 days after they go out. The app reminds you to download them first.
• Working files on our own computer: cleared after 7 days.
• Your account, brand, plans and words: kept while your account is open, and deleted when you delete it.
• Payment records: kept as long as Australian tax law requires.
• Free-trial code: kept even if you delete your account, only to stop repeat free trials.
• Waitlist: kept until you unsubscribe or ask us to remove you, and for 2 years at most.

A copy: Settings → Download all my data gives you your information in one file.

Deleting: the workspace owner can delete the account in Settings → Delete my account. It stops any paid plan first, then deletes your workspace, brands, posts, face photos and files straight away, and your sign-in too. It can't be undone. The one thing we keep is the free-trial code (section 8), only to stop repeat trials.

Our database provider may keep backup copies for a short time. They are removed on its normal schedule.

You can also email info@luxinnovations.com.au and we'll do it for you.

You can see and change most of your information in the app. To ask for anything else we hold about you, or to fix something that's wrong, email info@luxinnovations.com.au. We'll reply within 30 days.

• Each workspace can only see its own information. The database checks this on every request.
• Files are private. Links to them expire.
• Our secret keys stay on our servers, never in your browser.

No system is perfect. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC) as soon as we can.

We use cookies to keep you signed in and to remember small choices, such as the brand and month you were looking at. We don't use advertising or tracking cookies.

If you're unhappy with how we've handled your information, email info@luxinnovations.com.au. Tell us what happened and what you'd like us to do. We'll reply within 30 days.

If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

If we change this policy, we'll update the date at the top. If a change matters, we'll tell you in the app or by email first. See also our Terms and Refund policy.