Privacy Policy
Last updated: 2 October 2026
In short:
- What you scrape in your browser stays in your browser.
- Jobs on our server are locked so that only your browser can open their results, and are deleted after 30 days, or sooner if you choose.
- If you sign in with Google or buy a plan, we keep what we need for your account and your payments.
- No analytics, no tracking, no advertising, no cookies on this website. We never sell data.
This policy explains what personal data Lumi Scraper handles, why, and your rights under India's Digital Personal Data Protection Act, 2023. For your personal data, the data fiduciary is Lumifine Media And Tech Solutions, founded by Arkadeep Chakraborty, Rajpur, Kolkata 700149, South 24 Parganas, West Bengal, India, support@lumifine.co.
1. This website
This website has no analytics, no cookies and no trackers, and its fonts are served from the site itself. It is hosted by Cloudflare, whose servers keep short technical logs, such as IP addresses, to deliver the pages and protect against attacks.
2. The Chrome extension
What it stores, and where. Your scraped tables, saved recipes, settings and your connection to our server stay in your browser's own storage on your computer. So do your own AI key and the mobile number you last paid with, if you add them. They're deleted when you use Settings → Your data → Delete all data, or remove the extension.
What it sends, and to whom.
- To the websites you choose to scrape: ordinary requests for their pages. Requests it makes directly (store catalogues, sitemaps, contact pages) leave out your cookies and logins; pages it opens in background tabs load exactly as if you'd opened them yourself.
- To our server: the jobs you start on it (the addresses to read and each job's settings), and what's described in section 3.
- Google Sheets opens only when you press Sheets; what you paste there is covered by Google's terms.
| Permission | Why it's needed |
|---|---|
| Side panel, scripting, storage, active tab | To show the panel, read the page you're on when you ask, and keep your data |
| Identity | To sign in with Google, only when you choose to |
| Alarms | To check every 30 minutes, while Chrome is open, whether your plan is about to end and whether your alerts found something |
| Access to a website (asked per site, optional) | To read that site's pages when you scrape it |
| Notifications (optional) | To show alerts and plan reminders on your computer |
| Downloads (optional) | To save images you choose to download |
Chrome Web Store user data. The extension reads the content of web pages only when you use it to scrape them, and uses it only to give you the results you asked for. It doesn't sell or transfer this data, doesn't use it for advertising, credit decisions or anything unrelated to scraping, and nobody reads it.
3. Lumi Engine on our server
Lumi Engine runs on a cloud server we rent in India. It keeps:
- Your account: a key that identifies your browser (only a hash of it is stored), your plan, and how many pages you've used this month.
- Your jobs: the addresses each job reads, its settings, and its results. Results are locked with a key that only your browser holds, so we can't read them. Two kinds of job are the exception, because the server has to read them to do their work: alerts (it compares each check with the last one to tell you what changed) and jobs you start from an AI tool you connected. Finished jobs are deleted after 30 days, or after 1 or 7 days if you choose that in Settings → Your data; you can delete any of them sooner.
- If you sign in with Google: your Google account's email address, name and picture.
- If you add your own proxy: its address and password, used only for your jobs and never shown again in full.
Some features send data to another service, only when you use them:
- AI columns send a shortened copy of the page you're on (its layout and short texts, without scripts) and the columns you described to the AI service you chose (Google Gemini, OpenAI or Anthropic Claude), once, to write the recipe, with your own AI key. Your key passes through our server with that request only and is never stored; we don't keep the page copy either. Your use of that AI service is under its own terms.
- Your own Google Sheet or Doc: when you send results there, the rows go through our server to Google and aren't kept. We can open only the documents you share with our Google address or set to "anyone with the link can edit".
- Emails from us (a reminder before your plan ends, and alerts if you turn them on) go to your Google account's email address, through an email-sending service.
We keep short technical logs (which account ran which job, when, and on which site) to keep the service working and secure, and to handle complaints from website owners.
4. Payments
Plans and support payments are paid on pages run by Cashfree Payments, which collects your payment details directly under its own privacy policy; we never see your card or UPI details. For a plan, Cashfree needs your mobile number: we pass it to Cashfree with the payment and don't keep it on our server. We keep a record of each payment (the plan, the amount, the date and Cashfree's reference) to run your plan and as long as tax and accounting law requires. For a support payment, we receive the name, email address and phone number you enter on Cashfree's page, the amount, and whether it succeeded, and keep them for the same reasons.
5. Personal data in your results
Your results can contain other people's personal data, such as names, emails or phone numbers from websites. You decide why and how that data is collected and used, so for it you are the data fiduciary and responsible for having a lawful reason. We process it only to run your jobs, and never use it for anything else. Lumi Scraper shows a notice whenever results contain emails or phone numbers.
6. Who else receives personal data
Only the services that help run Lumi Scraper, each for the purpose above: Cashfree Payments (payments), Google (sign-in, and your own Sheets and Docs), the AI service you choose with your own key (AI columns), an email-sending service (emails from us), the company we rent our server from, and Cloudflare (which hosts this website); and authorities when the law requires. We don't sell personal data and don't share it for advertising.
7. Security
We protect personal data with reasonable safeguards: encrypted connections (HTTPS), results locked for your browser, hashed keys, a server that accepts requests only from Lumi Scraper, and access limited to Arkadeep Chakraborty. If a breach ever affects your personal data, we'll tell you and the Data Protection Board of India as the law requires.
8. Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of the personal data we hold about you and how we use it; have it corrected, completed, updated or erased; withdraw any consent you gave; nominate someone to exercise these rights for you; and have your complaint answered by us and, if you're not satisfied, taken to the Data Protection Board of India. If you're in the EU or UK, you also have your rights under the GDPR. Write to support@lumifine.co; our grievance officer is Arkadeep Chakraborty.
9. Children
Lumi Scraper is for people aged 18 and over. We don't knowingly hold children's personal data, and if we find we do, we delete it.
10. Changes
We'll post changes here, with a new date at the top, and announce important ones on this website before they apply.