Who we are
Lumen is a private analytics dashboard operated by yellowHEAD Ltd. ("yellowHEAD", "we", "us"). Access is by invitation only: it is used by yellowHEAD staff and by people at client companies that yellowHEAD has invited. There is no public sign-up. Lumen only reads data from advertising platforms; it never changes campaigns or writes back to an ad account.
This policy covers Lumen at www.lumen-workspace.com. The yellowHEAD company website has its own privacy policy.
Information we process
- Account information. Your name, email address, and, if you sign in with Google, your basic Google profile (name, email address, and profile picture). If you sign in with an email code, we receive only your email address. We also keep the organization, role, and client access yellowHEAD has assigned to you.
- Client performance data. Marketing performance data from a client's own advertising accounts and measurement partners, such as spend, installs, conversions, revenue, campaign, and creative metrics. Lumen reads this data from yellowHEAD's Google BigQuery warehouse and shows each user only the clients they are authorized to see.
- Content you create. Questions you ask, saved reports, notes, pins, feedback messages and screenshots, and similar work you save in Lumen.
- Usage and error data. Pages visited, clicks, performance measurements, session recordings, and error reports, linked to your account so we can support you and fix problems. Password fields and marked sensitive content are masked, and sign-in tokens are removed from error reports.
How we use it
We use this information to sign you in, decide which clients you can see, show dashboards and reports, run the features you ask for, answer support requests, keep the service secure, and fix and improve Lumen. We do not sell personal information, and we do not use it for advertising.
Google user data
When you sign in with Google, Lumen receives only your basic profile and email address (the openid, email, and profile scopes). We use this data only to sign you in and identify your account. We do not use it for advertising, we do not sell it, and we do not share it with anyone other than the service providers listed below that run Lumen. People at yellowHEAD do not read it except to provide support, for security, or where the law requires.
Lumen's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers
We use these providers to run Lumen. They process information on our behalf and only for that purpose:
- Clerk: sign-in, accounts, and sessions.
- Google (Google Sign-In, Google Cloud BigQuery, Google Drive): sign-in, the client data warehouse, and creative files.
- Vercel: hosting, plus page performance and traffic analytics.
- Supabase: the application database for saved work and settings.
- Upstash: caching and session security checks.
- PostHog: product usage analytics and session recordings.
- Sentry: error monitoring.
- Anthropic, OpenAI, and Hugging Face: AI features you choose to use, such as asking questions of your data. Your question and the relevant client data are sent to the model to produce the answer.
- LangSmith: optional diagnostics for AI features.
- Slack: internal notifications to the yellowHEAD team, such as new feedback.
Cookies and browser storage
Lumen uses essential cookies to keep you signed in and secure your session. It also uses analytics cookies and browser storage for PostHog and Vercel analytics, and local browser storage for preferences such as theme and selected client.
Retention
We keep account information while your access is active and delete or anonymize it within a reasonable period after access ends, unless we must keep it longer for legal or security reasons. Client performance data is kept under yellowHEAD's agreement with that client. Usage and error data is kept for limited periods set by each provider.
Security
Every page and data request outside sign-in requires an authenticated session, and access is checked per client. Data is encrypted in transit. No system is perfectly secure, but we work to protect your information and limit who can see it.
Your rights
You can ask us to access, correct, or delete your personal information, or to stop processing it, by emailing omers@yellowhead.com. We may need to confirm your identity first. Deleting your account ends your access to Lumen.
Changes
We may update this policy. The effective date above shows when it last changed. If a change is significant, we will tell active users.
Contact
Questions about this policy or your information: omers@yellowhead.com.