Privacy Policy
Last updated: October 23, 2026
This policy explains what LumiDesk LLC (“LumiDesk”, “we”, “us”) collects through lumidesk.io, why, who helps us handle it, and the choices you have. It is written to be read, not skimmed past. If anything is unclear, email privacy@lumidesk.io.
The short version
- We collect what you give us: your email address when you join the waitlist, and a few optional details about your clinic.
- If your clinic is outside the United States, you can leave your email at checkout. We’ll email you only if LumiDesk becomes available in your country, and count your interest when deciding where to offer it next.
- We use it to tell you about LumiDesk’s launch and product updates, and to understand which clinics LumiDesk suits.
- We don’t use cookies or advertising trackers on this site.
- We don’t sell your information or share it for advertising.
- You can unsubscribe, see what we hold, correct it, or have it deleted at any time.
- Patient data stored in the LumiDesk product is a separate matter, covered by each clinic’s agreement with us and our Business Associate Agreement. See Patient data in LumiDesk.
- Patients who agree to text reminders from their clinic: see Text message reminders. We never share your mobile number or your agreement for marketing.
Who this policy covers
This policy covers people who visit lumidesk.io, join the waitlist, ask to hear when LumiDesk reaches their country, or email us. It does not cover the LumiDesk product’s handling of clinic and patient records, which is governed by the agreements described below, except for Text message reminders, which covers patients who agree to get visit reminders by text.
LumiDesk is built for businesses: physical therapy clinics and the professionals who run them. This site is not intended for anyone under 18, and we don’t knowingly collect information from children. If you believe a child has given us information, email privacy@lumidesk.io and we will delete it.
What we collect
Information you give us
When you join the waitlist, we collect your email address. We also record the page you signed up on and, if you arrived from another website or from a link carrying campaign tags, which one. This is recorded only when you submit the form, and nothing is stored on your device.
On the optional second step, you may also tell us:
- your role (owner, clinician, office manager, or other)
- how many clinicians your clinic has
- your state, or your country if you are outside the United States
- how your patients pay (cash, insurance, or a mix)
- the software your clinic uses today
- your clinic’s name
Every one of these is optional. We never ask for patient information on this site, and you should not send us any.
When your clinic is outside the United States. LumiDesk is sold only to clinics in the United States for now, so checkout asks where your clinic is. If you choose another country, you can leave your email address and, optionally, your clinic’s name, and we record them with that country. Payment details are never involved: checkout stops before any reach us or our payment processor.
When you email us, we receive your message, your email address, and anything else you choose to include.
Information collected automatically
Analytics. We use Cloudflare Web Analytics to count visits and see which pages are useful. It does not use cookies or similar storage on your device, and it does not track you across other websites. It tells us things like which pages were viewed, which site referred a visit, the type of browser and device, and the country a visit came from, in aggregate.
Hosting. Like every website, our hosting provider receives technical information needed to deliver pages and protect the site from abuse, such as your IP address, browser type, and the page requested. This information is kept in server logs for a limited period and is not used to identify you.
Email engagement. Waitlist emails may record whether an email was opened and which links were clicked. We use this only to understand whether our emails are useful and deliverable.
Cookies
This site does not set cookies, and we don’t use advertising pixels, retargeting, or cross-site tracking. Because of that, there is no cookie banner. If that ever changes, we will update this policy before it does.
How we use it
We use your information to:
- email you about LumiDesk’s launch and product updates, which is what you sign up for when you join the waitlist;
- invite founding clinics to subscribe before the public switch-on, and confirm founding-clinic status (see the Terms of Service);
- offer a call with the founder to some clinics, based on the size and payment mix they tell us about;
- tell clinics outside the United States if LumiDesk becomes available in their country, which is what you ask for when you leave your email at checkout;
- understand demand: which kinds of clinics are interested, where they are, and what they use today, so we build and describe LumiDesk accurately, and decide where to offer it next;
- reply to you when you email us;
- keep the site working and secure, and comply with the law.
We don’t use your information for advertising, and we don’t sell it or share it with anyone for their own marketing.
Your consent to email
When you join the waitlist, you agree to receive emails about LumiDesk’s launch and product updates. That is one list and one consent. Every email includes an unsubscribe link, and you can also unsubscribe by emailing privacy@lumidesk.io. If you unsubscribe, we stop sending those emails. We may still reply to messages you send us.
Leaving your email at checkout because your clinic is outside the United States is a separate, narrower request: we will email you only if LumiDesk becomes available in your country. It does not add you to the waitlist, and you can withdraw it the same ways.
Who helps us handle it
We use a small number of service providers. They process information on our behalf, only to provide their service to us.
| Provider | What it does for us | Information involved |
|---|---|---|
| HubSpot | Stores waitlist signups and requests to hear when LumiDesk reaches your country, and sends their email | Everything you give us on the waitlist form or at checkout when your clinic is outside the United States; email engagement |
| Cloudflare | Website analytics | Aggregate, cookieless visit data |
| Amazon Web Services | Hosts this website | Technical request data in server logs |
| Google Workspace | Our email | Messages you send us and our replies |
We may also disclose information when the law requires it, to protect the rights and safety of LumiDesk, our customers, or others, or as part of a merger, acquisition, or sale of our business, in which case this policy continues to apply to the information transferred.
Where it is stored
We are based in the United States, and your information is stored and processed in the United States. If you contact us from outside the United States, you understand your information will be handled here.
How long we keep it
- Waitlist information is kept until you unsubscribe or ask us to delete it. If you haven’t become a customer, we delete it 12 months after LumiDesk launches.
- A request to hear when LumiDesk reaches your country is kept until we tell you it has, or until you withdraw it or ask us to delete it.
- If you unsubscribe, we keep only your email address on a suppression list, so we never email you again by mistake.
- Emails you send us are kept as long as needed to deal with your message and keep a reasonable record of our correspondence.
- Server logs are kept for a limited period for security and troubleshooting.
Your rights
Wherever you live, you can ask us to:
- tell you what information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information;
- stop emailing you.
Email privacy@lumidesk.io from the address you signed up with, or tell us how to confirm the request is yours. We respond within 30 days. We won’t treat you differently for making a request.
Because we don’t sell or share personal information for advertising, there is nothing to opt out of on that front, and browser “Do Not Track” and Global Privacy Control signals have no tracking to switch off.
How we protect it
The site is served only over encrypted connections (HTTPS), access to waitlist data is limited to the people at LumiDesk who need it, and our providers are chosen for their security practices. No system is perfectly secure, but we take care proportionate to what we hold. For how the LumiDesk product protects clinic and patient data, see Security and HIPAA.
Patient data in LumiDesk
This section is about the LumiDesk product, not this website.
When a clinic uses LumiDesk, the patient information it stores belongs to that clinic. The clinic is the HIPAA covered entity, and LumiDesk acts as its business associate. That information is governed by the clinic’s subscription agreement with us and our Business Associate Agreement, not by this policy. The one exception is Text message reminders, below.
When a patient pays their clinic through LumiDesk, their card details go straight to our payment processor and are never stored by us. Where a patient authorizes their clinic to charge a saved card, we store the record of that authorization on the clinic’s behalf.
We never use patient information for marketing, and we never sell it. For what LumiDesk does to protect it, see Security and HIPAA. Patients with questions about their records should contact their clinic.
Text message reminders
LumiDesk sends visit reminders by text to patients who agree to them, on behalf of the clinics that use LumiDesk. Every reminder comes from one LumiDesk toll-free number. Texts are off unless a patient agrees, and our SMS Terms describe the program in full.
What we collect. When a patient agrees, their clinic’s staff record it in LumiDesk. We keep:
- the mobile number the patient agreed to be texted at;
- when they agreed, how (in person, verbally, or in writing), and who at the clinic recorded it;
- which version of our consent statement they were given;
- when the agreement was withdrawn, and whether by a STOP reply or by the clinic;
- when each reminder was handed to our messaging provider.
When the agreement is recorded, we check the number with our messaging provider, and refuse a landline or a number that does not exist.
How we use it. Only to send the visit reminders the patient agreed to, and to keep a record that they agreed. A reminder never says what the visit is for or which clinician the patient is seeing.
Who handles it. We send texts through Amazon Web Services (AWS End User Messaging), under our Business Associate Agreement with AWS, which passes each text to the patient’s mobile carrier. No one else receives it.
No sharing for marketing. We never use a patient’s mobile number for marketing, and we never sell it. We don’t share mobile numbers, or a patient’s agreement to get texts and the record of it, with any third party for marketing or any other purpose of its own.
Stopping. Replying STOP to any reminder stops the texts at once, and is recorded as a withdrawal. Our SMS Terms say how to restart them.
Like the rest of a clinic’s records, this information belongs to the clinic, and LumiDesk holds it as the clinic’s business associate. Patients with questions about it should contact their clinic.
Changes to this policy
When we change this policy, we update the “Last updated” date at the top. If a change materially affects how we use information you have already given us, we will also email the waitlist before it takes effect.
Contact
LumiDesk LLC
119 Graceful Sedge Way
Simpsonville, SC 29680
privacy@lumidesk.io