Lumenlan Platform Third-Party Services

1. How to read this notice

This notice identifies the principal third-party categories, triggers, and information involved for Lumenlan Platform. A relevant third party participates only when you choose the corresponding sign-in, payment, notification, storage, AI, import, delegation, or integration feature.

Vendors and services may change by platform, region, availability, and product settings. A material change receives an additional notice at the relevant feature.

2. Principal current third parties and purposes

• Apple: if you choose Sign in with Apple, App Store distribution or purchase, or Apple push, Apple processes device and Apple-account identifiers, authorization or transaction signatures, or a push token. We use Apple public keys to verify identity and transactions and request revocation of related credentials where required for account deletion.
• Tencent/WeChat: if you choose WeChat sign-in or WeChat Pay, the relevant Tencent service processes an open identifier, authorization outcome, order identifier, amount, and payment/refund status. Payment credentials stay with the payment channel; we receive the outcome required for fulfilment.
• Alibaba Cloud: used for SMS verification and human checks that you trigger, cloud storage, and cloud or AI capabilities configured by a Lumenlan product. It may process phone information, verification-request information, uploaded content, and content needed to complete an AI request.
• AI providers: Lumenlan may use a disclosed provider according to the product, selected model, and service availability. Necessary input, prompts, related content, model, and usage are processed. Models may change; the product interface or request result is authoritative.
• Operating systems, browsers, and notification networks: provide secure storage, device notifications, page links, and transport. Only a notification channel enabled in the product processes the relevant information.

3. Your choices and controls

• If you do not select a third-party sign-in, payment, notification, AI model, repository import, or delegation, that choice does not trigger the corresponding transfer, though the dependent feature may be unavailable.
• Revoke an unnecessary authorization, push permission, subscription, or integration credential in the Lumenlan product, device OS, third-party account, or purchase channel. Earlier transaction, security, or audit records may still be lawfully retained.
• Before sending content to an AI, agent, notification service, public repository, or sharing recipient, remove unnecessary personal data, secrets, and trade secrets and verify the destination, permission range, and possible processing region.
• Third-party availability, fees, and independent processing are governed by their terms. Lumenlan reasonably controls processors it selects but cannot manage a personal account or local tool that you deliberately connect on your behalf.

4. International transfer, security, and contact

A third party you select may process data internationally. Where applicable, we use minimization, access control, transport protection, and necessary contractual measures and obtain separate consent before enablement when required. Also read the terms and privacy notice presented by that third party.

Questions about this notice or a third-party data flow: privacy@lumenlan.com. Service faults: support@lumenlan.com.