These Terms of Use govern access to and use of the website, platform, products, services, applications, demos, trials, documentation, and related materials provided by Luma Security ("Luma," "we," "us," or "our").
By accessing or using the Service, you agree to these Terms. If you are using the Service on behalf of a company or other organization, you represent that you have authority to bind that organization to these Terms.
1. Definitions
"Service" means the Luma Security website, platform, applications, APIs, demos, trials, documentation, analysis capabilities, workflows, reports, recommendations, and related services we provide.
"Customer" means the company, organization, or individual that accesses or uses the Service.
"User" means any person accessing or using the Service on behalf of a Customer or in an individual capacity.
"Customer Data" means data, content, artifacts, metadata, logs, security signals, configuration information, or other materials submitted to, connected to, processed by, or made available to the Service by or on behalf of a Customer.
"Analysis" means any detection, classification, investigation, correlation, enrichment, risk assessment, recommendation, explanation, verdict, report, or other output generated by the Service.
2. Use of the Service
You may use the Service only in accordance with these Terms, applicable laws, and any written agreement between you and Luma.
- Ensuring that you have the right to submit, connect, or make Customer Data available to the Service.
- Configuring integrations, permissions, policies, and response settings appropriately.
- Reviewing Analysis and recommendations before acting on them, unless you have expressly configured authorized automated actions.
- Maintaining the security of your accounts, credentials, API keys, and authorized integrations.
- Ensuring that your use of the Service complies with your own internal policies and legal obligations.
You may not use the Service to violate applicable law, infringe third-party rights, interfere with the Service, attempt to bypass security controls, reverse engineer the Service, overload infrastructure, or use the Service to develop competing products except as permitted by law.
You may not use the Service to test, scan, analyze, access, interact with, or collect information from any third-party system, asset, account, communication, link, file, artifact, or data source unless you have all required rights and authorization to do so.
3. Collaboration Data and Security Artifacts
The Service may process customer-authorized collaboration data, communication artifacts, metadata, behavioral signals, security events, and related technical information to provide detection, investigation, risk analysis, and response capabilities.
Depending on the Customer's configuration and enabled integrations, this may include messages, links, files, attachments, sender and recipient information, user-reported items, access events, application activity, identity-related signals, endpoint or browser-related signals, third-party alerts, and other related artifacts made available to the Service.
The specific data sources, analysis methods, signals, models, workflows, and decisioning logic used by the Service may vary by configuration, integration, and product capability, and may not be fully disclosed to protect the integrity and security of the Service.
4. Proprietary Analysis Methods
Luma may use proprietary analysis methods, models, workflows, infrastructure, rules, heuristics, machine learning, artificial intelligence, automation, enrichment sources, and decisioning logic to provide the Service.
To protect the integrity, security, and effectiveness of the Service, Luma is not required to disclose the specific methods, models, prompts, signals, scoring logic, internal workflows, infrastructure, or operational details used to generate any Analysis, verdict, recommendation, or result.
5. AI-Assisted Analysis and Security Limitations
The Service is designed to assist Customers in identifying, investigating, understanding, prioritizing, and responding to potential security risks. However, no security product, detection method, AI model, or analysis workflow can guarantee complete accuracy or complete protection.
Analysis may include errors, omissions, false positives, false negatives, incomplete context, or outdated information. Analysis is provided for informational and operational support purposes and should not be relied upon as the sole basis for security, legal, compliance, employment, or business decisions.
A failure to detect, classify, investigate, prioritize, recommend, block, prevent, or remediate any particular threat, artifact, event, vulnerability, exposure, or security issue will not, by itself, constitute a breach of these Terms or create liability for Luma.
The Customer acknowledges that security analysis may involve uncertainty, incomplete information, third-party dependencies, and evolving attacker behavior. Luma does not provide insurance, incident-loss coverage, or any guarantee of security outcomes.
You remain responsible for reviewing and validating outputs, determining appropriate actions, and maintaining comprehensive security controls.
Unless expressly authorized by the Customer in a written agreement, Luma does not use Customer Data to train general-purpose AI models or third-party foundation models. This does not prevent Luma from using aggregated, anonymized, or de-identified operational information to maintain, secure, analyze, or improve the Service, provided that such information does not identify the Customer or any individual.
6. Customer-Authorized Response Actions
The Service may support workflows that recommend, prepare, assist with, or execute response actions, including actions through third-party platforms or customer-authorized integrations.
Luma will perform automated or semi-automated response actions only where such capabilities are enabled, configured, or authorized by the Customer. The Customer is responsible for reviewing configuration settings, permissions, scopes, policies, exclusions, and approval flows related to any response capability.
Luma is not responsible for actions taken based on Customer configuration, Customer authorization, third-party platform behavior, or User decisions made in connection with the Service.
7. Third-Party Services and Integrations
The Service may connect to, depend on, or interoperate with third-party platforms, infrastructure providers, identity providers, communication and collaboration platforms, cloud services, security tools, threat intelligence sources, AI providers, APIs, browsers, storage providers, and other external services.
Luma does not control third-party services and is not responsible for their availability, security, functionality, data handling practices, terms, changes, limitations, outages, or errors. Your use of third-party services may be subject to separate terms and privacy policies.
8. Trials, Beta Features, and Pre-Release Capabilities
Luma may offer free trials, demos, pilots, beta features, preview capabilities, or other pre-release functionality. These may be modified, suspended, or discontinued at any time.
Unless otherwise agreed in writing, trials, demos, pilots, beta features, and preview capabilities are provided without warranties, commitments, service levels, support obligations, or guarantees of availability, accuracy, or continued functionality.
9. No Service Level Agreement Unless Separately Agreed
Unless a written agreement signed by Luma expressly provides otherwise, the Service is provided without any guaranteed uptime, availability, response time, support level, retention period, or performance commitment.
Scheduled maintenance, emergency maintenance, service changes, infrastructure issues, third-party outages, abuse prevention, security events, or other factors may result in delays, interruptions, reduced functionality, or temporary unavailability.
10. Intellectual Property
Luma and its licensors own all rights, title, and interest in and to the Service, including software, models, workflows, interfaces, designs, documentation, analysis methods, reports, templates, trademarks, logos, and other intellectual property.
These Terms do not grant you any ownership rights in the Service. You may not copy, modify, distribute, sell, lease, sublicense, reverse engineer, or create derivative works from the Service except as expressly permitted by law or by a written agreement with Luma.
You retain ownership of Customer Data. You grant Luma the rights necessary to process Customer Data to provide, secure, support, maintain, improve, and operate the Service, subject to these Terms and any applicable written agreement.
11. Feedback
If you provide suggestions, ideas, enhancement requests, comments, or other feedback, you grant Luma a perpetual, irrevocable, worldwide, royalty-free right to use that feedback without restriction or obligation to you.
12. Confidentiality
Non-public information disclosed through demos, trials, private previews, technical discussions, security reviews, or other restricted interactions may be confidential. You may not disclose Luma's non-public product information, technical methods, roadmap, pricing, security architecture, or business information without our prior written consent.
Luma will treat Customer Data as confidential and will not disclose it to third parties except as described in these Terms, the Privacy and Data Notice, and any applicable data processing agreement, or as required by applicable law.
13. Privacy and Data Protection
Our processing of personal information is described in our Privacy and Data Notice and, where applicable, in a separate data processing agreement or customer agreement.
If you submit, connect, or make available personal information or Customer Data to the Service, you represent that you have all required rights, notices, consents, authorizations, and legal bases to do so.
For enterprise or paid deployments, additional data processing terms, security terms, and subprocessor information may be made available under a separate written agreement or security review process.
14. Publicity and Logo Use
Luma will not publicly identify you as a customer or use your name, logo, or trademarks for marketing purposes without your consent, unless otherwise permitted in a separate written agreement.
15. Suspension and Termination
We may suspend or terminate access to the Service if we believe you have violated these Terms, created risk for the Service or other users, failed to pay applicable fees, or used the Service in a way that may cause legal, security, operational, or reputational harm.
You may stop using the Service at any time. Upon termination, your right to access and use the Service will cease, except as otherwise provided in a written agreement.
16. Disclaimers
The Service and all Analysis are provided "as is" and "as available," without warranties of any kind, whether express, implied, statutory, or otherwise.
To the maximum extent permitted by law, Luma disclaims all warranties, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, availability, security, reliability, and that the Service will be uninterrupted, error-free, or free from harmful components.
Luma does not warrant that the Service will detect, prevent, block, investigate, remediate, or resolve every threat, attack, vulnerability, exposure, incident, misconfiguration, malicious artifact, or security issue.
17. Limitation of Liability
To the maximum extent permitted by law, Luma and its affiliates, officers, directors, employees, agents, licensors, and service providers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, goodwill, data, business opportunity, business interruption, security incident, or cost of substitute services.
Luma will not be liable merely because the Service, any Analysis, or any recommendation failed to detect, classify, investigate, prioritize, prevent, block, remediate, or resolve any threat, artifact, event, vulnerability, exposure, or security issue.
Any claim for damages requires the Customer to establish a valid legal basis for the claim, actual direct damages, and a direct causal connection between Luma's breach of these Terms and the claimed damages.
To the maximum extent permitted by law, and unless a separate written agreement signed by Luma expressly states otherwise, Luma's total liability for all claims arising out of or related to these Terms or the Service will not exceed USD $100.
Some jurisdictions do not allow certain limitations of liability, so some limitations may not apply to you. In those cases, liability will be limited to the greatest extent permitted by law.
18. Indemnification
You agree to defend, indemnify, and hold harmless Luma and its affiliates, officers, directors, employees, agents, licensors, and service providers from any claims, damages, liabilities, losses, costs, and expenses, including reasonable attorneys' fees, arising out of or related to your use of the Service, Customer Data, your integrations or configurations, your violation of these Terms, or your violation of applicable law or third-party rights.
Only if expressly provided in a separate written agreement signed by Luma, Luma may defend, indemnify, or hold harmless Customer from certain third-party claims alleging that the Service, as provided by Luma and used in accordance with that agreement, infringes third-party intellectual property rights. Any such obligation will be subject to the conditions, exclusions, and limits stated in that separate agreement.
Unless expressly provided in a separate written agreement signed by Luma, Luma has no indemnification obligations for free trials, demos, pilots, beta features, preview capabilities, unpaid use, Customer Data, Customer configurations, Customer modifications, unauthorized use, or use of the Service in combination with products or services not provided by Luma.
19. Changes to the Service or Terms
We may modify the Service or these Terms from time to time. If changes are material, we will use reasonable efforts to provide notice. Continued use of the Service after changes become effective means you accept the updated Terms.
20. Governing Law and Dispute Resolution
These Terms are governed by the laws of the State of Israel, without regard to conflict of law principles.
Before filing a claim, the parties agree to attempt to resolve disputes informally by contacting each other. Any unresolved dispute will be handled in the competent courts located in Tel Aviv-Jaffa, Israel, unless otherwise required by applicable law or agreed in writing.
21. Order of Precedence
If you have a signed agreement with Luma, such as a master services agreement, subscription agreement, order form, data processing agreement, or security addendum, that agreement will control to the extent it conflicts with these Terms.
22. Contact
Questions about these Terms may be sent to: