Security & Trust

Last updated: July 24, 2026

Lumi holds authorized access to our customers' marketplace accounts. We treat that as the most sensitive responsibility in the product. This page describes the controls we operate. Questions or concerns: hello@lumipricer.com (subject "SECURITY").

1. Marketplace access model

• Lumi connects only through the official Walmart Marketplace API and Amazon Selling Partner API, after the seller authorizes access through each platform's own authorization flow (Seller Center app authorization on Walmart; Login with Amazon OAuth on Amazon).
• We request only the API scopes repricing requires — listing, offer, and pricing data. We never ask for, receive, or store marketplace passwords.
• Sellers can revoke Lumi's access at any time from their own seller dashboard; revocation takes effect at the platform level, independent of us.

2. Encryption & secrets handling

• All data in transit is encrypted with TLS 1.2 or higher; all data at rest is encrypted with AES-256.
• API tokens and credentials are stored in a managed secrets vault, encrypted at rest, and are not written to application logs.
• Production access requires multi-factor authentication and is limited to the minimum set of personnel who operate the Service.

3. Per-seller data isolation

• Each customer's catalog, cost, pricing, and strategy data is logically isolated with per-tenant access controls enforced at the data layer.
• One seller's data is never used to inform, benefit, or set prices for any other seller. Lumi's pricing decisions for a given seller are computed solely from that seller's own configuration and publicly visible market data.

4. Logging, monitoring & change control

• Administrative and data-access actions in production are logged and reviewable.
• Every price change Lumi makes is recorded with its triggering rule and inputs, giving each seller a complete audit trail of automated actions on their account.
• Code changes are version-controlled and reviewed before deployment to production.

5. Incident response

• We maintain an incident-response process covering detection, containment, remediation, and notification.
• If an incident affects marketplace data, we notify affected sellers and the relevant marketplace platform promptly, within the notification windows the platforms' data-protection policies require (including Amazon's 24-hour incident notification requirement).

6. Vulnerability reporting

We welcome good-faith security research. If you believe you've found a vulnerability in Lumi or lumipricer.com, email hello@lumipricer.com with subject "SECURITY". We acknowledge reports within 2 business days, will not pursue action against good-faith research, and ask that you avoid accessing other users' data and give us reasonable time to remediate before public disclosure.

7. Subprocessors & hosting

The Service runs on reputable cloud infrastructure providers under contractual confidentiality and security obligations. Subprocessors are limited to infrastructure required to operate the Service; we do not share customer data with any third party for marketing or data-brokering purposes. A current subprocessor list is available on request.

8. Data retention & deletion

We retain marketplace data only as long as needed to provide the Service and no longer than marketplace platform policies permit. On store disconnection or account closure, data is deleted from active systems within 30 days, and residual copies in encrypted backups are purged on a rolling schedule within 90 days, except where law requires retention. Details in our Privacy Policy.

9. Platform policy compliance

Our handling of Amazon Selling Partner API data follows Amazon's Data Protection Policy and Acceptable Use Policy. Our handling of Walmart Marketplace API data follows Walmart's developer and data standards for solution providers. Lumi's repricing logic acts unilaterally on behalf of each individual seller — it never coordinates with, signals to, or exchanges data with other sellers or their tools.

10. Contact

Aurora PowerUp LLC
1603 Capitol Ave Ste 415 PMB 923143, Cheyenne, WY 82001, US
Security contact: hello@lumipricer.com (subject "SECURITY")