Privacy Notice

Luminist operates the platform and determines how personal data is processed for the purposes described in this notice. For privacy questions, requests, or complaints, contact us at hello@luminist.me or use the Contact us page.

Luminist acts as a data controller for platform-level purposes such as user accounts, public Creator and Job experiences, platform identity, service security, abuse prevention, analytics, support, billing and legal compliance.

For some private data that an Agency or business customer places in its restricted workspace solely for its own Network, client, contact or campaign operations, Luminist may instead process that data on the customer's behalf as a data processor. In that situation, the customer remains responsible for its own purposes, lawful basis and notices. Luminist may still process limited related information as a controller where necessary for platform security, access control, legal compliance or another platform-level purpose described in this notice.

Depending on how you use Luminist, we may process account and authentication data such as your name, email, password credentials in protected form, verification and session records; Creator Profile data such as display name, biography, location, niche, social handles, follower or audience figures, rates, cooperation preferences, portfolio and media, plus optional self-described Job-matching attributes such as usual content topics, content formats, specialties, gender, age band, languages, work status and selected lifestyle/participation indicators; business and Agency data such as business identity, team membership, roles, contacts and network records; and Job, application, enquiry, Campaign, collaboration, quotation, deliverable, schedule, follow-up, payment-tracking, report and support data.

If you connect a social platform, we may process provider account identifiers, profile details, granted scopes, encrypted access or refresh credentials, publishing records and available account or post metrics. We may also process upload metadata, audit history, security events, IP or request information, device/browser information and service analytics generated by Luminist or our infrastructure providers.

Luminist is not designed to require health, biometric, political, religious, racial or ethnic, or criminal information for ordinary use. Structured Job targeting does not provide fields for those categories. Safety reports, support requests, disputes or other free-text submissions can nevertheless contain sensitive or highly private information if a user chooses to include it. Do not submit sensitive personal data unless it is genuinely necessary for the relevant purpose. Where such data is processed, Luminist will limit its use to the relevant safety, support, legal or service purpose and apply the protections required by applicable law.

We receive data directly from you; from Brands, Agencies, Managers or other authorized users who add, invite, import or manage people in a legitimate business workflow; from your interactions with other Luminist users; from social platforms or other services you choose to connect; and, where relevant, from publicly available Creator or business information used for discovery or identity matching.

If another user supplies personal data about you, that user is responsible for having appropriate authority or another lawful basis to provide it and for giving any notice required of them.

We process personal data to create and secure accounts; verify identity and access; provide Creator discovery, public Profiles and public Jobs; route applications, enquiries and invitations; operate Campaign, collaboration, deliverable, calendar, follow-up, payment-tracking and Agency workflows; provide connected social and publishing features; prevent abuse and investigate reports; maintain audit and security records; answer support requests; administer subscriptions or paid Luminist services where enabled; and comply with legal obligations.

We also use limited service analytics and performance information to understand whether Luminist is working reliably and to improve the product. Marketing email is optional and is kept separate from operational messages such as verification, security, password reset and workflow notifications.

Luminist uses first-party session cookies and related security mechanisms to keep signed-in users authenticated within the workspace they signed into, protect account access and complete sign-out. Portal, Agency and Platform Admin sessions are kept separate. Blocking required session cookies can prevent authenticated features from working.

Luminist may also use privacy-reduced product analytics and performance measurement to understand service reliability and usage. Our product analytics flow is designed not to use your authentication cookie as an analytics identifier. Third-party services you choose to visit or connect may use their own cookies or similar technologies under their own terms and privacy notices.

Information you choose to publish as a Creator Profile or that an authorized publisher places in a public Job can be viewed without signing in and may be discoverable through search engines or shared by other people. Private Agency Network data, private Jobs, internal notes, restricted commercial terms and other non-public workspace information are intended only for users with the required access.

Luminist may use profile attributes, Job requirements, audience information, network membership and similar signals to filter, rank or recommend Creators or opportunities. These tools support discovery and workflow decisions; they do not by themselves create a binding collaboration, accept commercial terms, or replace the decision of the relevant user.

We may disclose personal data to other Luminist users when the relevant feature and visibility settings require it; to service providers that support hosting, databases, object storage, email delivery, security, rate limiting, analytics and operational tooling; to social platforms you choose to connect; to payment or checkout providers when you purchase a Luminist service and checkout is enabled; and to professional advisers, regulators, law-enforcement bodies or other parties where disclosure is required or permitted by law.

Service providers receive only the data reasonably needed for their function and are expected to protect it under applicable contractual and legal obligations.

Some infrastructure, storage, email, analytics, social-platform or other service providers may process data outside Malaysia. Where personal data is transferred outside Malaysia, Luminist will use an applicable transfer condition and reasonable safeguards required under Malaysian personal data protection law.

Basic account information needed to authenticate you is required if you want a Luminist account. Additional information is required only when it is necessary for the feature you choose to use, for example publishing a Creator Profile, submitting an application, creating a Job, importing a Network record, connecting a social account, or recording a collaboration. If required information is not supplied, the relevant account or feature may not work.

Optional fields may be left blank. Creator Job-matching attributes are optional, are supplied by the Creator, and are used for fit checks rather than automatic rejection. They are not shown on the public Creator Profile by default. When a Brand, Vendor or Agency is evaluating Creators for a Job, Luminist may show an authorized reviewer the resulting fit score, fit label and relevant match or missing-information signals without making those private matching fields generally public. Marketing email is optional and can be declined or changed later without preventing normal use of the service.

We keep personal data for as long as reasonably needed for the purposes described above, including active account and collaboration use, security, dispute handling, audit, legal, accounting and abuse-prevention needs. Different records can have different retention periods.

You can request account deletion, but deletion of an account does not necessarily erase records that must be retained for legal, security, audit, payment, dispute or legitimate historical workflow purposes. Where appropriate, access may instead be restricted or records retained only for the necessary purpose.

Luminist uses technical and organizational safeguards appropriate to the service, including access controls and protected storage of sensitive connection credentials. No online system can guarantee absolute security. If a personal data breach requires notification under applicable law, Luminist will follow the required notification process.

Subject to applicable law and any permitted exceptions, you may ask whether we process your personal data, request access or correction, withdraw consent where processing depends on consent, ask us to stop or limit certain processing, object to direct marketing, request deletion, and exercise any applicable data-portability right. We may need to verify your identity before completing a request.

You can update many Profile and account details directly in your workspace. Marketing preferences can be changed from the available preference controls or unsubscribe mechanism. Logged-in members can submit an account deletion request from the dedicated deletion page.

If you believe your personal data has been handled improperly, contact Luminist first so we can investigate. You may also make a complaint to the Personal Data Protection Commissioner where applicable.

We may update this Privacy Notice when the product, providers or legal requirements change. The latest version will be published here with its updated date. Material changes may also be communicated through the service when appropriate.

Luminist mengendalikan platform dan menentukan cara data peribadi diproses bagi tujuan yang diterangkan dalam notis ini. Untuk pertanyaan, permintaan atau aduan privasi, hubungi hello@luminist.me atau gunakan halaman Hubungi kami.

Luminist bertindak sebagai pengawal data bagi tujuan peringkat platform seperti akaun pengguna, pengalaman Creator dan Job awam, identiti platform, keselamatan perkhidmatan, pencegahan penyalahgunaan, analitik, sokongan, bil dan pematuhan undang-undang.

Bagi sesetengah data private yang dimasukkan oleh Agency atau pelanggan perniagaan ke dalam workspace terhad semata-mata untuk operasi Network, client, contact atau Campaign mereka sendiri, Luminist boleh memproses data tersebut bagi pihak pelanggan sebagai pemproses data. Dalam keadaan itu, pelanggan kekal bertanggungjawab terhadap tujuan pemprosesan, asas yang sah dan notis mereka sendiri. Luminist masih boleh memproses maklumat berkaitan yang terhad sebagai pengawal data jika perlu untuk keselamatan platform, kawalan akses, pematuhan undang-undang atau tujuan peringkat platform lain yang diterangkan dalam notis ini.

Bergantung pada cara anda menggunakan Luminist, kami boleh memproses data akaun dan pengesahan seperti nama, e-mel, kelayakan kata laluan dalam bentuk terlindung, rekod pengesahan dan sesi; data Profil Creator seperti nama paparan, biografi, lokasi, niche, akaun sosial, angka pengikut atau audiens, kadar, pilihan kerjasama, portfolio dan media, serta atribut pemadanan Job pilihan yang diterangkan sendiri seperti topik kandungan biasa, format kandungan, kepakaran, jantina, julat umur, bahasa, status kerja dan petunjuk gaya hidup/penyertaan terpilih; data perniagaan dan Agency seperti identiti perniagaan, keahlian pasukan, peranan, kenalan dan rekod Network; serta data Job, permohonan, enquiry, Campaign, kerjasama, quotation, deliverable, jadual, follow-up, rekod pembayaran, laporan dan sokongan.

Jika anda menghubungkan platform sosial, kami juga boleh memproses ID akaun penyedia, butiran profil, skop kebenaran, credential akses atau refresh yang disulitkan, rekod penerbitan dan metrik akaun atau post yang tersedia. Kami juga boleh memproses metadata upload, audit trail, event keselamatan, maklumat IP atau request, maklumat peranti/browser dan analitik perkhidmatan yang dijana oleh Luminist atau penyedia infrastruktur kami.