We're live! Join now to enjoy 40% off for life

Privacy Policy

Effective Date: June 26, 2026

Lumivate LLC ("Lumivate," "we," "us," or "our") operates the website at lumivate.ai and associated services, including our online courses, the Lumivate IDE extension, and the SQL practice portal. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to information we process as the data controller.

1. Information We Collect

Account Information

When you register for an account, we collect your first name, last name, username, email address, city, region, country, and timezone. Providing a phone number is optional. We also store the date your account was created and basic account settings.

Payment and Subscription Information

Subscription payments are processed by Stripe. We do not collect or store your full card number, CVC, or other card details on our servers — Stripe handles that directly under its own privacy policy. We store a Stripe customer identifier and subscription metadata such as your subscription status, current billing period end date, and trial end date so we can manage your access and billing.

Authentication Data

We use Auth0 to manage authentication. When you log in, Auth0 processes your login credentials; we receive your email address and authentication status. We do not store your password.

Course Progress and Practice Data

As you work through courses, we store your progress, the answers and code you submit for exercises, and the feedback generated for you. To support SQL exercises, we provision an isolated practice database for your account and store its connection credentials in encrypted form.

Virtual Tutor Interactions

When you use our AI-powered virtual tutor, the questions you ask, the code you submit, and the tutor's responses are processed and stored to provide feedback and track your learning. Depending on the feature, the selected model, availability, or our configuration, this content may be sent to OpenAI, xAI, or another AI provider listed in Section 3 to generate responses. Those providers process the content only to generate responses and to operate, secure, and support their services for us. We do not use your tutor interactions to train AI models, and we do not permit these providers to use them to train their foundation models.

Scheduling and Group Coaching Sessions

We offer live group coaching sessions. When you sign up for a session, we use Calendly to schedule it, and Calendly collects information such as your name, email address, time zone, and the session time you select. The sessions themselves are hosted on Zoom. If you join a session, Zoom processes your name and any audio, video, and chat messages you choose to share, and other participants in the session may see and hear you. We do not record group coaching sessions. We use this information to deliver, schedule, and support the coaching service.

Contact Form Submissions

If you contact us through our website, we collect your name, email address, and the content of your message. This is emailed to our team so we can respond to you.

Diagnostic and Device Information

When you use the Lumivate extensions for Visual Studio or Visual Studio Code, the extension may send diagnostic information to our servers so we can operate and troubleshoot the service. This includes your operating system and version, device/processor architecture, and the versions of the extension and the IDE you are using. When an error occurs, we also collect error reports — including the error message, inner exception details, and stack trace — along with the course or section you were on. Your IP address is recorded by our servers when the extension contacts us, including when it sends an error report.

The extension does not transmit the contents of your local source-code files except when you intentionally submit code — for example, through a course exercise, an evaluation, or the virtual tutor. Error reports are limited to the technical diagnostic details described above, but an error message or stack trace may occasionally include a filename, file path, or small code snippet that your system or IDE included in the error.

Automatically Collected Information

Like most websites and applications, our servers automatically generate log records when you interact with our services. These logs may include your IP address, request and timing details, the pages or endpoints accessed, and error information, and are used for security, debugging, and reliability.

2. How We Use Your Information

  • To create and manage your account and authenticate you
  • To process subscription payments and manage billing and trials
  • To provide access to courses, the Lumivate IDE extension, the SQL practice portal, AI virtual tutoring, and live group coaching sessions
  • To schedule, host, and follow up on group coaching sessions you sign up for
  • To save and personalize your learning progress and feedback
  • To communicate with you about your account, subscriptions, and support requests, and to send service-related emails (e.g., welcome, subscription, and billing messages)
  • To monitor, secure, debug, and improve the reliability and performance of our platform
  • To measure the effectiveness of our advertising and understand how visitors find and sign up for the Service (for example, attributing sign-ups and purchases to our ad campaigns)
  • To comply with legal obligations and enforce our terms

3. Third-Party Service Providers

We share personal information with the following service providers (processors) only as needed to operate our platform. They are contractually limited to using the data for the services they provide to us:

  • Stripe – Payment and subscription processing. Stripe Privacy Policy
  • Auth0 (Okta) – Authentication and login. Auth0 Privacy Policy
  • Microsoft Azure – Cloud hosting and database storage. Microsoft Privacy Statement
  • OpenAI and xAI – AI providers that process virtual-tutor questions and code submissions to generate feedback. Depending on the feature or model, a request may be routed to either provider; they process your content only to generate responses and operate their services for us, and do not use it to train their foundation models. OpenAI Privacy Policy, xAI Privacy Policy
  • Datadog – Application logging and monitoring used for diagnostics and security. Datadog Privacy Policy
  • Calendly – Scheduling sign-ups for group coaching sessions. Calendly Privacy Notice
  • Zoom – Hosting live group coaching sessions (including audio, video, and chat). Zoom Privacy Statement
  • Google – We use Google Ads conversion tracking and the Google tag (gtag.js) to measure the performance of our advertising campaigns — for example, to know when a visit or purchase resulted from one of our ads. This may set advertising cookies and share limited event data (such as a conversion and its value) with Google. Google Privacy Policy
  • Email delivery – We use an email/SMTP service to send contact-form messages and service emails.

4. Cookies and Local Storage

We use the cookies and browser storage needed to make our platform work, plus a limited advertising cookie used to measure the effectiveness of our ad campaigns.

  • Essential cookies – Used to keep you signed in (authentication session) and to remember basic account information needed during your session. These are required for the platform to function.
  • Browser local storage – We store your light/dark theme preference in your browser's local storage. This stays on your device and is not sent to or tracked by us.
  • Advertising / conversion cookies – We use Google Ads conversion tracking (the Google tag) to measure when a visit or purchase came from one of our ads. This may set cookies from Google for advertising and conversion-measurement purposes. We do not use third-party cookies to build advertising profiles of you across unrelated websites.

5. Data Sharing

We do not sell your personal information. Other than the limited advertising and conversion-measurement data we share with Google (described in Sections 3 and 4) to measure the effectiveness of our own ad campaigns, we do not share your information for cross-context behavioral advertising. We disclose your information only in these circumstances:

  • With the service providers listed above, solely to operate our platform on our behalf
  • If required by law, regulation, subpoena, or other legal process
  • To protect the rights, safety, or property of Lumivate, our users, or the public
  • In connection with a merger, acquisition, or sale of assets, subject to this Policy

6. International Data Transfers

Lumivate is based in the United States, and our service providers may process and store data in the United States and other countries. If you access our services from outside the United States, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

7. Data Retention

We retain your account and learning data for as long as your account is active. If your account becomes inactive or is closed, we generally deactivate it and keep your information rather than immediately erasing it — this lets us restore your progress and history if you return, and lets us meet our operational, security, legal, accounting, and tax obligations. We generally retain server logs for up to 30 days and diagnostic error reports for up to 24 months, unless we need them longer for security, debugging, fraud prevention, legal compliance, or dispute resolution. Billing and payment records are retained as long as needed to meet our tax, accounting, chargeback, and legal obligations (generally up to seven years). If you ask us to delete your information, we will delete or anonymize your personal data within a reasonable timeframe, except where we are required to retain it by law.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including encryption of practice-database credentials and use of HTTPS in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal information:

  • Access / know – Request the personal information we hold about you and how we use it
  • Correction – Request correction of inaccurate or incomplete data
  • Deletion – Request deletion of your personal data
  • Portability – Request a copy of your data in a portable format
  • Object / restrict – Object to or request restriction of certain processing
  • Withdraw consent – Withdraw consent where processing is based on consent
  • Opt out of sale/sharing – We do not sell your personal information. You can opt out of personalized Google advertising through Google Ads Settings, and you can manage cookies through your browser settings
  • Non-discrimination – We will not discriminate against you for exercising any of these rights

To exercise any of these rights, contact us at [email protected]. We will verify your request and respond as required by applicable law. You may authorize an agent to make a request on your behalf.

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: performance of our contract with you (to provide the services), our legitimate interests (to secure, maintain, and improve the platform), your consent (where requested), and compliance with legal obligations. You also have the right to lodge a complaint with your local data-protection supervisory authority.

10. Age Restriction

Our platform is intended only for adults aged 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe we have collected information from someone under 18, please contact us so we can promptly remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised effective date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected] or through our Contact Us page.