Account & sign-in privacy

We use your email to send a one-time verification code through Resend and create or access your LuminoDesk account. This does not subscribe you to marketing. Cloudflare hosts the website and provides the security check. These providers process the information needed to deliver and secure these services.

Sign-in security

Codes expire after 10 minutes and can be used once. Our database stores a protected hash, not the readable code. We use an essential, secure cookie to keep you signed in for up to 7 days (12 hours for the website owner). Signing out revokes that session.

To reduce abuse, we keep protected identifiers derived from your email and network address for short-term request limits. Expired codes, sessions and rate-limit records are removed by a daily cleanup. Raw network addresses are not stored in our sign-in database, but may be processed by Cloudflare and its security check.

Customer accounts and CRM

Product access requires your name, phone number and verified email. We use account, order and delivery information to provide purchases and customer support. Client CRM records belong to the signed-in workspace and are access-controlled separately from the website owner’s CRM.

Account, enquiry and order records remain until removed by the business, subject to any applicable record-keeping requirements. Contact LuminoDesk through the website enquiry form to request access, corrections or removal.

Optional statistics

Visit statistics are separate from essential sign-in. You can refuse or withdraw statistics consent using “Privacy choices” at the bottom of the website. Optional statistics expire after 90 days.