AdLumoEx policies
Privacy Notice
Last updated: September 21, 2026
You are reading this saved policy version. It does not replace the terms recorded in an existing signed booking.
About this notice
This notice explains what information AdLumoEx collects, why we use it, when we share it, and the choices available to you when you visit the site, join the launch waitlist, apply for school access, or use the school sponsorship marketplace.
AdLumoEx is an adult business marketplace, not a student account system. School representatives and Advertisers must not submit student education records or student personal information. Email-only waitlist signup does not create an AdLumoEx account.
Information we collect
- Waitlist information: your email address, consent source and version, and related timestamps.
- Account information: name, email address, profile image and session information provided through Google sign-in, together with account access selections and activity recorded by AdLumoEx.
- Policy acknowledgment records: the account, acknowledgment time and wording, exact document identifiers and versions, and integrity hashes linked to the saved policy text. Earlier timestamp-only acknowledgments remain historical records; they are not relabeled as acceptance of a later document version.
- School access and organization information: application details, organization and school names, organization type, work contact information, job title, website, address, application answers, membership role, join requests, approvals, denials, join-code activity, and related audit history.
- Advertiser and marketplace information: business profiles, campaign information, school sponsorship listings, locations, audience estimates, Creative, saved activity, sponsorship interest, booking and contract activity, uploaded content, proof, and messages.
- Artwork and order records: design briefs, logos, reference files, supplied artwork, finished-design versions, file names, types, sizes and integrity records; selected services and flight dates; agreement versions, electronic signatures and consent evidence; and production, installation-service and administrative review records where those features apply to the booking.
- Payment information: transaction and payout status received from Stripe, Stripe customer and connected-account references, fee and ledger records, refund status, and payout status. Advertisers provide payment details directly to Stripe. School organization Owners provide identity, legal-entity, bank, and tax information through Stripe’s hosted Connect onboarding. AdLumoEx receives account references, verification requirements, limited business and payout status, and transaction records, but does not store raw card numbers, CVCs, or bank-account credentials.
- Moderation, technical, and support information: moderation results, reports, support tickets, ordinary request and device information, security and diagnostic records, IP or request metadata where available, and information you provide when requesting support.
- Cookies and preferences: necessary authentication and session cookies and limited preferences, such as your selected time zone.
How we use information
We use information to operate and secure AdLumoEx, authenticate users, manage the launch waitlist, evaluate school-access applications, create and administer organization workspaces, enforce roles, publish school sponsorship listings, support matching and booking workflows, prepare and deliver purchased design or production services, create contracts, process payments and payouts, moderate content, send operational notices, respond to support requests, prevent fraud, maintain audit records, meet legal obligations, and improve the service.
Who can see marketplace information
- Public school sponsorship listings can display the School Organization’s name and profile, listing title and description, school or campus information, location details, pricing, term, audience estimates, restrictions, and approved photos. Location details can include a street address and supplied map coordinates. The public listing does not identify the individual employee who drafted it.
- Published organization or advertiser profiles can display selected business contact information, addresses, profile media, team or contact names, and selected campaign information. Signed-in account discovery tools may expose limited user identity information such as name, handle, profile image, and verification status.
- Organization Owners and Admins can access organization records and manage members within their permissions. Members receive more limited access. Authorized organization administrators may see activity performed for the organization. Organization records remain associated with the School Organization after an employee’s role changes or their access ends.
- When an Advertiser and School Organization interact, each side can see information reasonably needed to evaluate interest, communicate, contract, pay, install the Placement, review proof, and resolve issues.
- Private artwork and reference files submitted through an itemized order's restricted upload tools are separate from public listing and profile images. The booking Advertiser and authorized AdLumoEx administrators can access the files permitted by their role. School review can include campaign information and file details provided in that workflow; school membership alone does not grant unrestricted access to private artwork files.
- Where finished-design delivery is available, the booking Advertiser can download files selected in recorded design versions. An internal upload is not automatically a delivered version. Restricted downloads can use temporary access links; anyone with a working link may be able to use it until it expires, so do not share the link with unauthorized people.
- AdLumoEx administrators and support personnel can access records when needed for review, support, security, moderation, payment operations, dispute resolution, or legal compliance.
Service providers and other disclosures
We disclose information as needed to providers supporting Google authentication, Vercel hosting, Supabase databases and public or restricted file storage, Stripe payments and payouts, Mapbox geocoding, map-tile services, Resend email delivery, and OpenAI image moderation for advertiser business-profile media. A new advertiser profile image can be sent in full, together with limited source and internal record identifiers, to the moderation provider for a safety decision. Providers process information under their own terms and our service arrangements.
We may also disclose information when required by law, legal process, safety needs, fraud prevention, enforcement of our agreements, protection of rights, or a business transaction involving AdLumoEx. We do not sell personal information or use student personal information for behavioral advertising.
Launch and product emails
If you join the waitlist with email only, we store the email address, consent source and version, and related timestamps so we can send AdLumoEx launch and product updates. Email-only signup does not create an account. You can use the unsubscribe option in those messages or contact us. We retain the minimum information needed to honor an unsubscribe or delivery suppression and do not reactivate it through the public signup form.
Account holders may also receive operational communications about applications, membership requests, bookings, contracts, payments, proof, security, and policy changes. Some service communications cannot be disabled while an account or active booking remains open.
Retention and security
We keep information for as long as reasonably necessary to provide the service, maintain transaction and consent records, document organization authority, resolve disputes, prevent fraud, meet legal, tax, and accounting obligations, and honor communication choices. Retention periods vary by record type, account status, and legal need.
We use reasonable administrative, technical, and organizational safeguards, including role-based workspace controls and restricted storage for certain non-public files. Listing, placement, and proof images can be stored at a shareable or publicly accessible asset URL and must be treated as potentially public. Uploaded images may retain embedded file metadata, including device or location metadata, so users should remove unnecessary metadata before uploading. No online system can be guaranteed completely secure. Users are responsible for protecting their Google account, join codes, and organization access.
Your choices
You may ask to access, correct, or delete personal information, or object to certain uses, subject to applicable law, organization ownership, and records we must retain. You may update public organization and business information through authorized account tools and unsubscribe from marketing updates at any time. We may need to verify your identity and authority before completing a request.
Children and student information
AdLumoEx accounts and marketplace services are intended for adults and are not directed to children under 18. We do not offer accounts designed for students or seek personal information directly from students. Account holders represent that they are authorized adults.
School Organizations and Advertisers must not upload student education records or student personal information, including names, faces, voices, contact information, student IDs, grades, attendance, schedules, transportation details, health or disciplinary information, or other information that identifies a student. Listing and proof photos must not show identifiable students, student badges, license plates, access credentials, or similar information. If student-related content is necessary for a purpose outside the current marketplace workflow, do not upload it to AdLumoEx; the School Organization must first obtain its own legal and policy review and use a separately approved process. Contact us promptly if you believe student or child information was submitted improperly.
Contact and changes
We may update this notice as AdLumoEx changes. The date above shows the latest revision. Questions and privacy requests can be sent to:
