Privacy Policy

This policy applies to visitors to our website, people who contact us or request early access, staff of hotels who sign in to Lumen, and guests of hotels whose data is held in Lumen on the hotel's behalf.

For our website, contact requests and staff accounts, Symphia decides how information is used and is responsible for it.

When Lumen holds hotel data, including information about hotel guests, we process it on behalf of that hotel and under its instructions. If you are a guest, please send privacy requests to the hotel you stayed with. We will help the hotel respond.

When you contact us. Your name, email address, hotel or group, number of rooms and anything you write in your message.

When you sign in. Your email address and account details. Sign-in codes are stored only in hashed form. We record the IP address and browser information of each sign-in request to protect accounts.

When you visit the website. Our servers process basic technical information, such as IP address and browser type, in order to deliver pages and keep the Service secure. The public website uses no analytics or advertising tools.

Hotel data. When a hotel connects its property management system, Lumen reads and stores a copy of that hotel's setup, rooms and room status, reservations, charges, payments, nightly prices and guest records. Guest records include name, contact details, address, language, VIP status and staff notes. Lumen does not copy identity documents.

• to reply to you and discuss early access;
• to provide the Service to hotels and show each hotel its own data;
• to send sign-in codes;
• to secure the Service, prevent abuse and troubleshoot problems; and
• to meet legal obligations.

We share information only as needed to run the Service:

• Amazon Web Services hosts the Service.
• Our email provider delivers sign-in codes and contact requests.
• The hotel's property management provider is the source of the hotel data that Lumen reads. Lumen does not write to it.
• Authorities or advisers, where the law requires it or to protect rights and safety.
• A successor in connection with a merger, acquisition or sale of assets, subject to this policy.

While a hotel runs read-only, Lumen does not send guest data to any AI provider, payment provider or messaging provider, and it sends nothing to guests.

The Service uses TLS in transit and an encrypted disk at rest, and it reads hotels' live systems with read-only access. No method of storage or transmission is perfectly secure. See our Security page for what is true today.

The Service is hosted in the United States.

We keep contact requests for as long as needed to respond and to keep a record of our conversation. Hotel data is held for as long as the hotel is connected, and removed when the hotel asks us to stop. We may keep information longer where the law requires it.

Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, and to object to some uses of it. To make a request about information we control, email support@symphia.ai. If your request is about your stay at a hotel, please contact that hotel. We may need to verify your identity.

The public website sets no cookies. See our Cookie Notice for what the signed-in app stores.

The Service is for businesses and is not directed to children. We do not knowingly collect information from children under 16 for our own purposes.

We will update this policy as Lumen changes, and update the date above. If a change is material we will tell the hotels using Lumen.

Symphia LLC. Email support@symphia.ai.