Privacy
Last updated: 15 November 2026
How Reportlume collects, uses and protects account, client and report information.
Who is responsible
The seller named on this page operates Reportlume and is responsible for the personal information described in this notice.
Information we process
Your account e-mail address and sign-in records; the client names and details you enter; the X Analytics CSV rows you confirm for import; report versions, proof-of-work notes and branding; names and comments left by reviewers on your private report links; and billing records such as plan, subscription status and the payment provider's subscription ID. Reportlume stores the rows you confirm, not the uploaded CSV file itself. Passwords are handled by our sign-in provider and are not stored by Reportlume. Reportlume never receives your card details.
How we use it
To provide the service: sign-in, client workspaces, report and PDF generation, private report links, plan limits and billing status. We also use limited technical data to protect the service, for example to rate-limit repeated failed sign-in attempts. We do not sell personal information and do not use advertising trackers.
Legal bases
We process information to perform our contract with you, for our legitimate interest in keeping the service secure and preventing abuse, and where the law requires us to keep records.
Service providers
Google Firebase and Google Cloud provide sign-in, e-mail verification messages and the database. Railway hosts the application. Our order process is conducted by an online reseller, the payment provider named at checkout. That provider is the Merchant of Record for all our orders and handles payment, invoices, sales tax or VAT, and refunds. The payment provider processes payment information under its own privacy policy.
International transfers
Our service providers may process information in the United States and other countries. They protect such transfers with safeguards such as standard contractual clauses.
Retention
We keep your information while your account is open. After a verified account deletion request we delete your account data within 30 days, except records we must keep by law. So that a payment can never be applied twice or to the wrong account, we keep the payment provider's subscription and payment event identifiers together with an internal account number. These records contain no name, e-mail address or report content. We keep them for as long as they are needed to process the payment provider's events, to keep a payment from being applied twice or to the wrong account, and to meet applicable tax and accounting obligations. Payment and tax records are kept by the payment provider.
Your rights
You can ask to access, correct, export or delete your personal information, or object to its use. Client data can be exported from the Data & privacy page. Send other requests to the contact address on this page. You may also complain to your local data protection authority.
Children
Reportlume is a business tool and is not intended for anyone under 16.
Changes
We will update this page and its date when this notice changes. We will tell account owners by e-mail about material changes.
Seller
Shahin Aghasiyev, Azerbaijan
Contact: [email protected]