Privacy

Privacy Policy

Effective October 28, 2026

Luminality Group ("Luminality," "we," "us," or "our") provides financial advisory and analytical services and operates controlled decision-support software, including the Luminality SERP Forecast application and the Luminality Accounting Connector. This policy explains how we handle information through luminalitygroup.com, these applications, and related authorized services.

Information we collect

Depending on how you interact with us, we may process:

• Information you send directly, such as your name, email address, company, and message.
• Business, financial, contract, reporting, or analytical data supplied for an authorized engagement.
• Account, company, and customer identifiers needed to connect an authorized third-party account.
• OAuth authorization information, including access and refresh tokens. We do not request or store your third-party account password.
• Operational records needed to diagnose errors, validate a run, prevent duplicate processing, and maintain an audit trail.
• For the SERP Forecast application, approved keywords, geographic targets, forecast periods, and forecast metrics such as estimated impressions, clicks, cost, click-through rate, and average cost per click.
• For the Accounting Connector, authorized QuickBooks Online company information, chart-of-accounts data, items, invoice headers and lines, general-ledger and financial-report data, transaction identifiers, dates, balances, and related source metadata.
• For approved Google Sheets publication, the destination file identifier, spreadsheet structure, and connector-generated reporting output.

How the Luminality SERP Forecast application uses Google data

The application uses the Google Ads API to request keyword forecasts for service-and-city combinations selected through Luminality's local-search evaluation process. Google data is used to provide a directional demand signal alongside other search-results analysis.

How the Luminality Accounting Connector uses QuickBooks Online data

The Accounting Connector retrieves accounting data from a QuickBooks Online company selected and authorized by the user. It uses that data to prepare controlled reporting datasets, perform reconciliations, detect supported historical changes, and, only when separately authorized, publish output to a designated Google Sheet.

Intuit's accounting OAuth permission is broader than the connector's intended operations. The connector restricts accounting API traffic to an allowlist of read-only GET routes and rejects accounting mutations before network access. It does not create, edit, void, or delete accounting records. It does not replace QuickBooks Online as the accounting system of record, and it does not infer unavailable history or fabricate missing identifiers or dimensions.

The application does not create advertising campaigns, publish advertisements, change bids, alter billing settings, or make automated purchase decisions. Forecasts are reviewed by an authorized person before they are used in a business recommendation.

How we use information

• Provide contracted advisory, reporting, reconciliation, and analytical services.
• Generate, validate, and document authorized analytical or accounting outputs.
• Maintain the security, reliability, traceability, and accuracy of our systems.
• Prevent duplicate processing and recover safely from interrupted runs.
• Respond to inquiries and meet legal, accounting, professional, or contractual obligations.

We do not use connected accounting or Google user data for advertising, sell it, or use it to train public or third-party artificial-intelligence models.

Credential storage and security

Connector credentials are kept separate from analytical and reporting outputs. In the current Windows implementation, long-lived client credentials and refresh tokens are stored in Windows Credential Manager, while access tokens are held in memory only. Secrets are excluded from project files, published spreadsheets, ordinary application logs, and generated evidence.

We use access controls, environment and company locks, route allowlists, secret-safe logging, validation checks, and other reasonable safeguards appropriate to the connector's purpose. No security measure can guarantee absolute security.

Storage and retention

We retain information only as long as reasonably necessary for the authorized purpose, contractual recordkeeping, validation, security, recovery, or legal obligations.

• OAuth grants and refresh tokens are retained until they are revoked, disconnected, replaced, or no longer needed.
• Connector output and audit evidence are retained according to the applicable engagement and reporting requirements.
• Data is deleted or de-identified when it is no longer reasonably needed, subject to legal, accounting, professional, backup, and contractual retention requirements.

Sharing and sale of information

We do not sell personal information, Google user data, or connected accounting data. We may provide authorized reporting output to the client for whom the connection was approved. We may use service providers that support hosting, storage, security, authentication, or professional operations, but only to the extent reasonably necessary to provide those services and subject to appropriate obligations. We may disclose information when required by law or reasonably necessary to protect legal rights, users, data, or system security.

Google API Services User Data Policy

Luminality's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Third-party platforms

Use of QuickBooks Online, Google services, and other third-party platforms is also governed by their applicable terms and privacy policies.

Your choices and disconnection

An authorized administrator can revoke access through the applicable Intuit or Google account controls. You may also contact us to request disconnection or to request access, correction, or deletion of information, subject to applicable contractual and legal retention requirements.

Revoking access stops future retrieval but may not automatically remove reporting output or records that must be retained for an authorized engagement, accounting support, security, or legal compliance. We will explain any applicable retention requirement when responding to a request.

Changes to this policy

We may update this policy as our services or legal obligations change. The effective date at the top of this page identifies the current version.

Contact