1. Introduction
This Privacy Policy explains how Luzora collects, uses, stores, shares, protects, and deletes personal information when you use the Luzora browser extension, Luzora websites, password reset pages, data deletion pages, newsletter forms, support channels, and related services. In this Policy, "Luzora", "we", "us", and "our" refer to the team or legal entity responsible for providing Luzora.
Luzora is a browser-first recurring task manager. It helps you save website routines as tasks, schedule recurring reminders, open saved task links, track completions, and sync your account across supported browsers. Because Luzora works close to your browser, we want this Policy to be clear about what the extension can see, when it can see it, and what we do not collect.
By using Luzora, you acknowledge that we will handle personal information as described in this Policy. If you do not agree with this Policy, please do not use Luzora.
2. Plain-language privacy commitments
These commitments are central to how Luzora is designed:
-
2.1 User action first
Luzora inspects the current page only when you open the extension, use Add current website, trigger Luzora Bolt, save a page, or otherwise ask Luzora to work with the active page.
-
2.2 No sensitive-field reading
Luzora is not designed to read passwords, payment details, card numbers, bank details, seed phrases, private keys, API keys, secret tokens, private form values, or hidden sensitive form values.
-
2.3 No sale of task data
We do not sell your task titles, saved links, project names, reminder settings, or completion history.
-
2.4 Purpose-limited browser data
Data from browser permissions is used to provide user-facing Luzora features, such as saving the current page as a task, opening saved links, displaying reminders, syncing tasks, and improving reliability.
-
2.5 Do not store secrets in Luzora
Luzora is for tasks, routines, and website follow-ups. Do not save passwords, API keys, private keys, seed phrases, card details, bank information, or other sensitive secrets in task titles, folders, notes, project names, or links.
3. Who this Policy applies to
This Policy applies to visitors, extension users, account holders, newsletter subscribers, referral users, people who contact support, and anyone who uses a Luzora page or service that links to this Policy.
Some privacy laws use terms such as "personal information", "personal data", "personally identifiable information", "controller", "processor", "business", or "service provider". When we use "personal information" in this Policy, we mean information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to an individual or household, as those terms are understood under applicable privacy laws.
4. Information you provide directly
We collect information you choose to provide to Luzora, including:
-
4.1 Account information
Email address, account identifiers, authentication status, password reset requests, and related account information. Passwords are handled by Supabase Auth. We do not intentionally store your raw password in Luzora-owned task or profile tables.
-
4.2 Profile information
Username, avatar emoji, avatar background color, language preference, referral information, username change count, and other profile settings you create or update.
-
4.3 Task and project information
Tasks, task titles, project names, website or app names, folder names, saved links, domains, URLs, favicons, schedules, start dates, one-time dates, recurrence rules, task times, custom dates, paused states, edits, task versions, task completion history, and related task metadata.
-
4.4 Settings and preferences
Notification preferences, daily summary time, snooze duration, shortcut preferences, language settings, local UI state, and other choices you make in the extension.
-
4.5 Newsletter information
Email addresses submitted through Luzora newsletter forms, together with limited submission metadata such as the page URL, referrer, and user agent.
-
4.6 Support and feedback
Information you send to us by email, feedback forms, surveys, social messages, bug reports, screenshots, or other communications, including your email address and the contents of your message.
-
4.7 Deletion requests and feedback
If you request deletion or delete your account, we may collect the deletion reason, optional explanation, deletion timestamp, and related request information. Deletion feedback may be retained in an anonymous or non-account-identifying form.
5. Information collected through browser permissions
Luzora is a browser extension and uses browser permissions to provide its core features. Browser stores may describe these permissions broadly. The descriptions below explain how Luzora uses them.
-
5.1 Active tab
Luzora uses active tab access when you interact with the extension or trigger Luzora Bolt. This helps Luzora detect the current page you are choosing to save or use as a task source.
-
5.2 Tabs
Luzora may read the active tab's title, URL, favicon, and related metadata where available. Luzora also uses tab access to open saved task links and extension-related pages when you ask it to do so.
-
5.3 Scripting
When you use current-page features, Luzora may run a safe page-inspection script in the active tab. This can read limited page signals such as title, URL, favicon, metadata, headings, visible labels, and common page patterns to suggest a useful task. Luzora does not use this permission to read passwords, payment details, private form values, or hidden sensitive form values.
-
5.4 Storage
Luzora uses browser storage to keep local session data, draft task progress, local task cache, preferences, notification settings, shortcut settings, language settings, avatar settings, toast state, and analytics identifiers.
-
5.5 Alarms and notifications
Luzora uses alarms and notifications to schedule task reminders, daily task summaries, snoozed reminders, badge counts, and test notifications. Browser notifications may display task titles or reminder text on your device screen.
6. Luzora Bolt and page inspection
Luzora Bolt helps create a task from the current page. It may use the active tab title, URL, favicon, page metadata, headings, visible labels, and known page patterns to suggest a task. This is intended to reduce manual copying and typing.
Page inspection happens for the page you are actively using with Luzora. Luzora does not use Bolt to build a full browsing history, run background surveillance of every website you visit, or sell web browsing activity. Saved links and page details are stored only when they become part of a task, project, or related Luzora record.
7. Natural-language task entry
Luzora can parse natural-language task text to infer dates, times, recurrence, websites, project names, and related task details. The current natural-language parsing runs locally in the extension bundle. Task text is not sent to an AI provider for parsing in the current product.
If Luzora later adds cloud AI or third-party AI processing, we will update this Policy before using that feature in a way that changes how personal information is processed.
8. Information collected automatically
When you use Luzora, we may collect limited technical and usage information, including:
-
8.1 Device and browser information
Browser type, operating system, extension version, language, approximate device information, and other technical information needed to operate, secure, and troubleshoot Luzora.
-
8.2 Usage metadata
Feature usage, screen views, task count, project count, completion count, last active timestamp, session duration, sync status, first task created timestamp, first completion timestamp, password reset request status, and similar product usage metrics.
-
8.3 Logs and security data
Server logs, request metadata, authentication events, error reports, and security-related records that help us protect users, detect abuse, debug problems, and maintain the service.
-
8.4 Website form metadata
For website forms such as newsletter signup, we may collect the email submitted, page URL, referrer, user agent, and submission timestamp.
9. Product analytics
Luzora may use PostHog, Google Analytics, and Vercel Web Analytics for product and website analytics. Analytics help us understand how features are used, whether sync and reminders are reliable, which pages people visit, which screens need improvement, and how to make Luzora more useful.
We design analytics to avoid sending sensitive task content. Our analytics wrapper filters property names and values that look like emails, passwords, tokens, secrets, API keys, private keys, task titles, task links, URLs, folder names, project names, website names, or domains. We may still collect event names, timestamps, extension version, screen names, page paths, feature usage, task counts, completion counts, settings changes, session duration, and sync status.
If you contact us about analytics deletion or privacy choices, we will review your request based on the information available to us and the capabilities of our analytics provider.
10. Cookies and similar technologies
The Luzora website may use cookies, local storage, or similar technologies for site functionality, security, analytics, or preferences. The browser extension also uses browser storage for extension functionality. You can control browser cookies and storage through your browser settings, but disabling storage may affect website or extension features.
11. How we use personal information
We use personal information for the following purposes:
-
11.1 Provide Luzora
Create and manage accounts, authenticate users, sync tasks, save projects, store completion history, process task edits, open saved links, maintain preferences, and deliver the extension features you request.
-
11.2 Operate browser features
Detect the active page when you choose to save it, suggest tasks through Luzora Bolt, store local drafts, show reminders, update badge counts, and open task links.
-
11.3 Communicate with you
Send account-related messages, password reset emails, security notices, account deletion confirmations, support replies, product updates, and newsletter messages where applicable.
-
11.4 Improve the product
Understand product usage, diagnose bugs, improve reliability, develop new features, measure onboarding, analyze aggregate usage, and evaluate user feedback.
-
11.5 Protect Luzora and users
Prevent fraud, abuse, spam, unauthorized access, security incidents, policy violations, or misuse of Luzora and related systems.
-
11.6 Comply with law
Meet legal obligations, respond to lawful requests, enforce our Terms, resolve disputes, preserve records where required, and protect our legal rights.
12. Legal bases for processing
Where laws such as the GDPR or UK GDPR apply, we rely on one or more legal bases to process personal information. These may include performance of a contract when we provide Luzora to you, legitimate interests in operating and improving Luzora, consent where required, compliance with legal obligations, and protection of legal rights or safety.
You may withdraw consent where processing is based on consent. Withdrawing consent does not affect processing that occurred before withdrawal, and some features may no longer work if the information is required to provide them.
13. How we share personal information
We do not sell your task data. We may share personal information in the limited circumstances below:
-
13.1 Service providers
We use service providers to host, store, process, secure, analyze, and support Luzora. These providers may process personal information only as needed to provide services to us, subject to their terms and policies.
-
13.2 Supabase
Supabase provides authentication, account management, database storage, password reset, Edge Functions, and sync infrastructure for Luzora.
-
13.3 PostHog
PostHog provides product analytics that help us understand feature usage and improve Luzora. We use filtering to reduce the chance that task content or sensitive information is included in analytics.
-
13.4 Google Analytics
Google Analytics may provide website analytics that help us understand page views, traffic sources, browser information, approximate region, device type, and basic site usage. We do not use Google Analytics to intentionally collect task content, passwords, saved task links, or private form values.
-
13.5 Vercel Web Analytics
Vercel Web Analytics may provide privacy-focused website analytics for pages hosted on Vercel, including page views, referrers, device information, browser information, and approximate region. We do not use Vercel Web Analytics to intentionally collect task content, passwords, saved task links, or private form values.
-
13.6 Resend or email providers
We may use Resend or similar providers to send account-related emails, security emails, deletion confirmations, and other transactional messages.
-
13.7 Browser vendors and extension stores
Your browser vendor or extension store may process information related to extension installation, updates, permissions, browser APIs, and store interactions under their own policies.
-
13.8 Favicon and website icon services
Luzora may display favicons or website icons, including through browser data, stored icon URLs, or services such as Google's favicon service. When an icon is loaded from a third-party service, that service may receive the icon request from your browser.
-
13.9 Legal, safety, and enforcement
We may disclose information if we believe disclosure is required by law, legal process, regulation, security needs, fraud prevention, protection of users, enforcement of our Terms, or protection of our rights and property.
-
13.10 Business transfers
If Luzora is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.
14. Third-party links and social pages
Luzora may link to third-party websites and social platforms, including X, Reddit, YouTube, LinkedIn, browser stores, support tools, and other websites. If you click those links, you leave Luzora and the third party's privacy policy applies. We are not responsible for the privacy practices, security, content, or policies of third-party websites.
15. Local browser storage and synced storage
Some information is stored locally in your browser. This may include session cache, profile cache, task cache, unsaved draft progress, preferences, notification settings, language, shortcut settings, avatar settings, analytics identifiers, and reminder delivery state. Local data may be removed if you uninstall the extension, clear browser data, reset the browser profile, or use browser tools that delete extension storage.
Some information is synced to Supabase so you can access your account and task data across supported browsers. Synced data may include profile data, tasks, projects, links, schedules, task versions, completion history, preferences, and usage metadata.
16. Notifications and on-device visibility
Luzora notifications may show task titles, reminder text, or counts of unfinished tasks on your device screen. Anyone with access to your unlocked device or notification center may be able to see those notifications. You can manage notification preferences in Luzora settings and in your browser or operating system settings.
17. Data retention
We keep personal information for as long as reasonably necessary to provide Luzora, operate our business, comply with legal obligations, resolve disputes, enforce agreements, protect users, prevent abuse, and maintain security.
-
17.1 Account and profile data
Kept while your account is active, unless deleted earlier or retained for a limited legal, security, or operational reason.
-
17.2 Task data
Kept until you delete tasks, clear task data, delete your account, or we delete the data according to our retention practices.
-
17.3 Local browser data
Kept in your browser until overwritten, cleared by you, removed by the browser, or removed when the extension is uninstalled.
-
17.4 Analytics and usage data
Kept according to our analytics settings and provider retention periods, unless deleted or anonymized earlier where required or practical.
-
17.5 Support communications
Kept as long as needed to respond, maintain business records, improve support, and protect legal rights.
-
17.6 Backups and logs
Information may remain in backups, logs, or security records for a limited period after deletion from active systems. We will not use deleted information for ordinary product purposes after deletion is complete.
18. Clear task data
Luzora may offer a Clear tasks and projects feature. Clear task data removes your tasks, projects, folders, saved task links, task versions, and task completion history from Luzora-managed task tables. Your account, profile, preferences, login, and some usage metadata may remain active.
Clearing task data is different from deleting your account. If you want to delete your account, use the account deletion flow or contact us.
19. Account deletion
Deleting your account is intended to permanently remove your Luzora account, profile, tasks, projects, task versions, and task completion records from Luzora-managed active systems. Account deletion may also remove optional usage rows from Luzora-managed tables where implemented.
We may retain limited information where reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, system integrity, backup retention, or anonymous product feedback. For example, anonymous deletion reasons may remain after your account is deleted.
You can request deletion through the extension where available or through the data deletion page linked from this website. If you cannot access your account, contact us at hello.luzora@gmail.com.
20. Your privacy choices and rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal information. You may also have the right to complain to a data protection authority.
You can exercise many choices directly in Luzora by updating your profile, changing notification settings, clearing task data, deleting tasks, logging out, or deleting your account. You can also contact us at hello.luzora@gmail.com.
We may need to verify your identity before fulfilling certain requests. We may decline or limit requests where permitted by law, including where a request is fraudulent, harmful to others, technically impossible, conflicts with legal obligations, or affects rights and freedoms of others.
21. Security
We use reasonable technical and organizational measures designed to protect personal information. These measures may include Supabase Auth, row level security for user-owned data, HTTPS, access controls, service-role key restrictions, password reset flows, current-password checks for sensitive account actions, analytics filtering, and safe page-inspection design.
No method of transmission or storage is completely secure. We cannot guarantee that Luzora or any third-party provider will be free from unauthorized access, misuse, data loss, vulnerabilities, or interruptions. You are responsible for keeping your account credentials secure and for using a trusted device and browser.
22. International transfers
Luzora and our service providers may process information in countries other than where you live. These countries may have privacy laws that differ from your location. Where required, we rely on appropriate safeguards, contractual protections, service provider terms, or other legal mechanisms for cross-border processing.
23. Children
Luzora is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided personal information to Luzora, contact us at hello.luzora@gmail.com and we will take appropriate steps to delete it.
24. Do not track
Some browsers offer "Do Not Track" signals. There is no consistent industry standard for responding to those signals, so Luzora does not currently respond to them. You can use browser settings, extension settings, and account controls to manage certain data choices.
25. Changes to this Policy
We may update this Policy from time to time. When we make changes, we will update the "Last updated" date. If changes are material, we may provide additional notice through the website, extension, email, or other appropriate means. Your continued use of Luzora after an updated Policy becomes effective means you acknowledge the updated Policy.
26. Contact us
If you have questions, requests, or concerns about this Policy or Luzora privacy practices, contact us at hello.luzora@gmail.com.