Privacy Policy

Effective date: October 26, 2026 · Last updated: October 26, 2026

1. Who we are and what this covers

Luminara LLC (“Luminara,” “we,” “us” or “our”) provides bookkeeping, payroll, tax support, fractional CFO and related financial services. We are based in San Francisco, California, and serve clients throughout the United States.

This Privacy Policy explains how we collect, use, share and protect personal information. It covers our website at luminarallc.com (the “Site”), our consultations, our emails and other communications, and the services we provide to clients (together, the “Services”).

If you are a client, your engagement letter or service agreement also governs how we handle your information. If that agreement conflicts with this policy, the agreement controls.

This policy describes our practices. It is not a contract, and it does not create rights beyond those that applicable law provides.

2. Information we collect

Information you give us

• Inquiries and consultations: your name, email address, phone number, business name, the service you are interested in, approximate business revenue, and anything you write in a message or tell us on a call.
• Client information: the information we need to deliver the Services. This can include bank, credit card and loan statements; accounting and payroll records; invoices and receipts; tax returns and tax notices; Social Security numbers, taxpayer identification numbers and employer identification numbers; and information about business owners, employees, contractors and dependents that you give us.
• Payments: billing contact and payment details. Our payment processors handle card and bank details; we do not store full card numbers.
• Job applications: your résumé, work history and the other information you choose to send us.

When you give us information about another person, such as an employee, a contractor, a business partner or a family member, you confirm that you have the right to give it to us for the Services.

Information collected automatically

When you visit the Site, we and our service providers collect your IP address, browser and device type, the pages you view, the site that referred you, the date and time of your visit, and your approximate location based on your IP address. We collect this through cookies, server logs and similar technologies. See Cookies and analytics.

Information from other sources

• Banks, payroll providers, accounting software and other financial institutions, when you authorize us to connect to them.
• Your other advisors, such as your CPA, attorney or lender, when you ask them to work with us.
• Referral partners who introduce you to us.
• Public sources, such as business registrations and professional networking profiles.
• Security services that help us block spam and fraud on our forms.

3. How we use information

We use personal information to:

• respond to inquiries, schedule consultations and prepare estimates;
• provide, manage and bill for the Services;
• verify identity and prevent fraud, spam and security incidents;
• communicate with you about your account, deadlines and changes to our Services;
• send newsletters and offers, where the law permits it. You can opt out at any time.
• run, secure, analyze and improve the Site and the Services;
• evaluate job applicants;
• meet our legal, tax, regulatory and professional obligations, keep business records, and respond to lawful requests from government authorities;
• establish, exercise or defend legal claims, and enforce our agreements.

We may use information that has been aggregated or de-identified so it can no longer reasonably identify you for any lawful purpose. We will not try to re-identify it.

4. Client financial and tax information

Federal law protects the financial and tax information our clients give us.

• Gramm-Leach-Bliley Act (GLBA). We do not disclose nonpublic personal information about clients or former clients to nonaffiliated third parties, except as GLBA permits. Permitted disclosures include those needed to provide the Services you request, those made to our service providers under confidentiality agreements, and those the law requires. Because we do not share this information in other ways, GLBA does not require us to offer an opt-out.
• Tax return information (Internal Revenue Code section 7216). We do not use or disclose tax return information for any purpose other than preparing your return or providing related Services without your prior written consent, unless the law permits it. We will not use your tax return information for marketing without that consent. We will not disclose it to anyone outside the United States without your specific prior written consent.
• FTC Safeguards Rule. We maintain a written information security program designed to protect client information. See How we protect information.

5. How we share information

We do not sell personal information for money, and we do not rent or trade mailing lists. We do let Google collect information through advertising cookies on the Site, as described in section 7. Some state laws treat this as “sharing” or “selling” personal information for targeted advertising. You can opt out as described in sections 7 and 8, and in our Supplemental Privacy Notice.

We disclose personal information only:

• To advertising partners, such as Google, through advertising cookies on the Site. They use cookie IDs, IP address and browsing activity on the Site to show our ads to you on other websites and to measure those ads.
• To service providers that help us run our business, such as cloud storage and secure file-sharing, accounting and payroll software, e-signature, email and scheduling, website hosting and security, payment processing, and analytics. Our contracts limit them to using the information to provide services to us, and they must protect it.
• At your direction, for example to your CPA, attorney, bank, lender, investor or payroll provider, or to a tax authority when we file or respond for you.
• To our professional advisors, such as lawyers, accountants and insurers, under a duty of confidentiality.
• For legal reasons: to comply with a law, regulation, subpoena, court order or other legal process; to respond to lawful requests from government authorities; and to protect the rights, property or safety of Luminara, our clients or others.
• In a business transfer, such as a merger, acquisition, financing or sale of all or part of our business. Any successor must protect the information as this policy describes, and the law’s limits on tax return information still apply.
• With your consent, for any other purpose.

6. Software, automation and AI tools

We use accounting software, automation and artificial intelligence (AI) tools to work faster and more accurately, for example to categorize transactions or draft reports. A member of our team reviews the work before we rely on it or deliver it to you.

We choose these tools with care, and we use them under agreements or settings that limit how the provider can use your data. Where a tool offers the option, we turn off the provider’s use of our client data to train its AI models. We do not put tax return information into a tool in a way that would disclose it outside the limits described in section 4.

7. Cookies and analytics

Cookies are small files that a website stores in your browser. We use:

• Necessary cookies to run and secure the Site, remember your language choice and protect our forms from spam (for example, Cloudflare Turnstile).
• Analytics cookies to understand how visitors use the Site. We use Google Analytics, loaded through Google Tag Manager. Google receives information about your visit as our service provider. You can learn how Google uses this information at policies.google.com/technologies/partner-sites, and you can opt out with the Google Analytics opt-out browser add-on.

• Advertising cookies. We use Google advertising features, including remarketing, through Google Tag Manager. Third-party vendors, including Google, use cookies to show our ads on other websites based on your past visits to our Site, and to measure how well those ads work.

How to opt out of advertising cookies:

• Turn off personalized ads in Google Ad Settings.
• Opt out of many advertising companies at once at optout.aboutads.info or optout.networkadvertising.org.
• Use your cookie choices on the Site, or turn on Global Privacy Control in your browser (see section 8).
• Email inquiries@luminarallc.com with the subject line “Opt Out.”

Opting out stops personalized ads from us. You may still see our ads, but they won’t be based on your visits to our Site. Opt-outs that use cookies apply only to the browser and device you use, and you will need to opt out again if you clear your cookies.

You can block or delete cookies in your browser settings. If you block necessary cookies, some parts of the Site, such as the contact form, may not work.

8. Do Not Track and Global Privacy Control

There is no common standard for browser “Do Not Track” signals, so the Site does not respond to them.

We do recognize the Global Privacy Control (GPC) signal. When your browser sends it, we treat it as a request to opt out of the sale or sharing of your personal information for targeted advertising for that browser, as the law requires.

9. Emails and other communications

• Every marketing email includes an unsubscribe link. You can also ask us to stop by emailing inquiries@luminarallc.com. We will act on your request within 10 business days.
• If you opt out, we will still send messages about your Services, invoices, deadlines and legal notices.
• We will not send you marketing text messages or automated marketing calls unless you have given us your express written consent.
• Calls and video meetings are not recorded unless we tell you first and you agree.

10. How we protect information

We use administrative, technical and physical safeguards that are reasonable for the sensitivity of the information. They include:

• encryption in transit;
• access limited to people who need it;
• secure methods for sharing documents;
• vendor review;
• periodic review of our information security program.

Please do not send Social Security numbers, bank account numbers or tax documents by regular email. Use the secure upload method we provide.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you and the appropriate authorities as the law requires.

11. How long we keep information

We keep personal information only as long as we reasonably need it for the purposes in this policy. That includes meeting legal, tax, regulatory and insurance requirements, and resolving disputes. In general:

• Inquiries from people who do not become clients: up to 3 years after our last contact.
• Client records and work papers: for the length of the engagement and generally 7 years after it ends, or longer if the law requires it.
• Job applications: up to 4 years, as California employment law requires.
• Website analytics: user-level data in Google Analytics is kept for the retention period set in our account, which is never more than 14 months.

When we no longer need information, we delete it, de-identify it or securely destroy it. We may keep information longer when the law requires it, or when it is subject to a legal hold or an active dispute.

12. Your choices and rights

Wherever you live in the United States, you can ask us to:

• tell you what personal information we have about you;
• correct information that is wrong;
• delete information we no longer need.

Email inquiries@luminarallc.com with the subject line “Privacy Request.” We will verify your identity before we act, and we will respond within the time the law requires. We may keep information when the law requires or permits it, for example records we must keep for tax purposes.

California residents and residents of other states with consumer privacy laws have additional rights. Our Supplemental Privacy Notice explains them and how to use them.

13. Children

The Site and the Services are meant for businesses and adults. They are not directed to children, and we do not knowingly collect personal information online from children under 16. If you believe a child has given us personal information through the Site, contact us and we will delete it.

Clients sometimes give us information about their dependents for tax or payroll purposes. We protect that information as client information under this policy.

14. Other websites

The Site may link to other websites and to software we use, such as accounting, payroll and scheduling tools. Their own privacy policies govern those services, and we are not responsible for how they handle your information.

15. Where information is stored

We are based in the United States, and we and our service providers store and process information in the United States. The Services are intended for people and businesses in the United States. If you contact us from another country, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

16. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date. If we make a material change to how we use or share personal information we already hold, we will notify you by email or by a notice on the Site before the change takes effect. Where the law requires it, we will ask for your consent.

17. Contact us