LuminaCut keeps imported originals and normal desktop editing data on your device by default. The application does not upload media simply because it was imported.
When you explicitly approve a cloud operation, LuminaCut uploads only the selected proxy frames, extracted audio range, project metadata, or render inputs described in the confirmation. Successful analysis artifacts are deleted after download; unclaimed artifacts expire within 24 hours.
Support bundles exclude media contents, media paths, filenames, caption text, and transcripts. Product analytics are opt-in and limited to feature success, failure category, crash-free session, and device capability tier.
Public accounts will provide project export, cloud-artifact deletion, and account deletion. These controls remain disabled until the public account service is deployed.
This draft must receive legal review before public 1.0.