Lumea Talent

Privacy policy

Updated October 7, 2026

This policy explains what we collect when you visit lumeatalent.com or apply through it, why, who sees it, how long we keep it and how to reach us about it.

Who we are

lumeatalent.com and the Lumea Talent brand are run by Mirage AI LLC, a limited liability company registered in Delaware, United States. Postal address: 8 The Green, Dover, DE 19901, United States. Mirage AI LLC decides how your data is used: in legal terms, it is the controller of your data.

To reach us about your data, message us on Telegram or write to us at this postal address.

What we collect

When you apply, on the first two screens of the form:

  • your first name, age and country of residence;
  • your WhatsApp number, your Telegram username, or both;
  • your Instagram username, if you give it;
  • the type of content you are comfortable with, what you want to show of your face, and where you are today, which can include a monthly income bracket;
  • your confirmation that you are 18 or older and that you agree to be contacted about your application.

The form cannot be sent without your first name, age, country, a way to reach you, the type of content you are comfortable with, what you want to show of your face and this confirmation. Everything else is optional.

On the last screen, only if you choose to provide them: up to five photos and one video of you (we only ask for classic photos and videos where you are dressed, never nude or intimate content), the phone you have (as you type it), your level of English, whether you are OK filming TikTok or Instagram Reels, whether you work with an agency today, when you could start, the countries you want to block, whether you have created content before, the hours a week you can give and the number of followers on your biggest social account, as a range. As of October 3, 2026, each photo is resized on your phone and saved as a new image before upload, so details stored in the original photo are not sent. A video is uploaded as selected and may contain details stored in the file, such as when and where it was recorded and which device recorded it. Photos and videos sent before this date are kept as they arrived, with any details in their files, as are the email address, the list of things you would not do and the message requested by an earlier version of this screen.

Automatically:

  • your IP address and the technical description your browser sends (its user agent), which we store with your application;
  • the language you read the site in;
  • if you arrived through an ad or a tracked link: the campaign details in that link and, for a Google ad, the identifier of your click (gclid, gbraid or wbraid), under the conditions set out in “Cookies and storage on your device”;
  • if you arrived through a referral link: the username of the person who referred you;
  • the page of this site you arrived on (its address, without any search terms or click identifier), which we store with your application.

If someone refers you, they give us your Telegram username and a few words about why you could be a fit. We use them to contact you about working with us.

If you refer someone, we keep your Telegram username and, to pay your bonus, the payment details you give us.

Some of this information is sensitive: your answers about the content you are comfortable with and about what you will not do, and your photos and video, can reveal information about your sex life. We use it to assess your application, and it is part of what the partner agencies of our network can see if we do not retain your application (see “Who sees it”).

Answers saved before you send

Once you have entered your first name, an age of 18 or older and a WhatsApp number or a Telegram username, the form sends the answers you have given so far, with the language of the site and the ad or referral link that brought you, to our team's private Telegram group, marked as incomplete. It does this when you press Continue at the end of the first screen, and when you close the page or switch to another app or tab, even if you have not pressed Continue. It never sends while you type. If you come back and leave again with new answers, the saved copy is usually updated. We use it to contact you if you stop before the end.

When you send your application, in almost all cases the incomplete copy is deleted automatically or replaced by your finished application. If you never send it, we keep it for 12 months, like any application that does not lead to a contract, then delete it. Message us on Telegram and we delete it now.

If you enter an age under 18, anything already saved is deleted and replaced by a short internal note with no personal details, only a reference number. In almost all cases this happens automatically; message us on Telegram to make sure.

Counting visits

When you open a page of this site, we count the visit. We record which page it is and in which language; for the first page of your visit, also the website that brought you (its name only), the campaign details in the link, and whether the link contained an ad click identifier (and from which ad network) or a referral code, never the identifier or the code itself. Our host works out your country from your IP address. From your browser's description and the technical information it sends, this website works out your type of device, the app you browse in and whether the visit looks automated (a robot): only these results are kept, never the description itself. These statistics are kept in our recruitment database.

On the page with the application form, we also note when you start filling it in: the first time you tap, click or type in one of its fields, the visit is marked, once, as a visit that started the form. This mark says nothing about what you type or choose, and it follows the same rules as the rest of the visit counting.

To count each person only once per day, your IP address and your browser's description are turned into a one-way code, using a secret key that only this website holds and a random value that changes every day. Neither your IP address nor your browser's description is stored. The day's random value is deleted from our database within an hour after that day ends (UTC time) and is never copied into our own backups; the daily backups of our database host, kept for 7 days, may contain it, but it cannot be used without this website's key. Once it no longer exists anywhere, at the latest 8 days after that day, the code can no longer be linked to anyone.

This counting uses no cookies and stores nothing on your device, except the choice below if you make it. If your browser sends a Global Privacy Control signal, or if you ask us not to count your visits, nothing is counted.

Why we use it, and on what legal basis

  • To review your application, contact you about it and decide whether to offer you a contract. Legal basis: the steps you ask us to take before a possible contract.
  • To assess your application with the sensitive information described above. Legal basis: your consent, which you give by sending us this information. You can withdraw it at any time, and we then delete that information.
  • To keep the answers saved before you send, so that we can reach you if you stop before the end. Legal basis: our legitimate interest. You can object at any time.
  • To block spam and abuse (limits per IP address, and a hidden anti-robot field), to keep minors out, to know which ads and referral links bring applications, and to pay the referral bonus to whoever referred you. Legal basis: our legitimate interests. You can object at any time.
  • To count visits and see which pages, sources, countries and devices bring visitors, so that we can improve the site and our ads. Legal basis: our legitimate interest. You can object at any time with the link in “Counting visits”, or by turning on Global Privacy Control in your browser: nothing is then counted.
  • To share an application we do not retain with the partner agencies of our network (see “Who sees it”). Legal basis: our legitimate interest. You can object at any time.

Applications are reviewed by people in our team. Apart from the form's automatic checks (an age between 18 and 70, and an anti-spam check that discards what looks like a robot), no decision about you is taken by automated means alone.

We do not give your application to advertisers.

Who sees it

  • The people in our team who handle recruitment. They see your application, photos and video in our recruitment database. Our team's private Telegram group gets a summary of each application and, when you send the last screen, a one-line note with how many photos arrived and your answers to the quick questions. It also receives your photos and video, as a reply to that summary.
  • The partner agencies of our network, if we do not retain your application: it may then be shared with them, including your contact details, photos and video, and they may contact you. We do this on the basis of our legitimate interest. You can object at any time, or ask us to delete your application, by messaging us on Telegram, and we then stop sharing it. An agency that has already seen your application is responsible for anything it kept from it.
  • The providers we use to run the site, store your application and talk to you:
    • Vercel, which hosts this site; the servers that receive your application are in the United States;
    • Supabase, which hosts our recruitment database, in Ireland;
    • Cloudflare, which stores your photos and video;
    • Telegram, for our team's group, and to message you if you gave us a Telegram username;
    • WhatsApp (Meta), to message you if you gave us a WhatsApp number.
  • Authorities, when the law requires it.

Where your data is processed

Mirage AI LLC is a United States company, and the servers that receive your application are in the United States. Our recruitment database is in Ireland, and our other providers can process data in other countries. The data protection rules of these countries can be less protective than those of the country where you live.

How long we keep it

  • An application that does not lead to a contract, finished or not, is kept for 12 months after you apply, then deleted from our recruitment database, from our file storage and from our team's Telegram group, with the IP address and browser details stored with it.
  • If you sign a contract with us, what we keep about you from then on is covered by your contract.
  • Our hosting provider keeps technical logs for a limited time. They can contain your IP address and, if your application could not be delivered, your WhatsApp number or Telegram username.
  • Visit details are kept for 90 days; after that, only daily totals remain, for 25 months.

Cookies and storage on your device

This site uses Google Ads. These tools set cookies on your device and send Google the address of each page you open (including any campaign or referral code in it). This data may also be processed by Google outside the European Economic Area, including in the United States.

On the application form, the site loads nothing but Google Ads, under the rules below: from it, Google only receives the steps of the form you reach and the fact that an application was sent, never its content.

If your device's time zone is in the European Economic Area, the United Kingdom or Switzerland, is set to UTC or cannot be read, these tools only start if you accept cookies in the banner shown on your first visit; the legal basis is then your consent, which we ask for again after 6 months. Otherwise, they start when you arrive, unless your browser sends a Global Privacy Control signal, which counts as a refusal. Wherever you are, the link at the bottom of every page lets you accept or refuse them at any time: if you refuse, they stop, we delete the cookies they set on this site, and your refusal stays in this browser until you change it or the browser deletes it (Safari does so after 7 days without a visit). Your time zone is read on your device and never leaves it.

What the site itself stores on your device:

  • NEXT_LOCALE (a cookie): the language of the site, deleted when you close your browser;
  • lumea_src, lumea_ref and lumea_lp (session storage, deleted when you close the tab): the ad campaign or the referral link that brought you, and the page of this site you arrived on, sent with your application. We only save them in session storage when cookies are allowed, as explained above. When they are not saved there, the site keeps them in the memory of the open page, without the identifier of a Google click, and passes them on, still without it, to any page it has to load itself (after a refusal, or to open the application form): in that page's address, removed once read, then in this tab's history for that page, until you close the tab, so that reloading it keeps them;
  • lumea_consent (local storage): your answer about cookies, its date and the tools it covers. A yes is valid for 6 months, a no until you change it, unless the browser deletes it sooner (Safari does so after 7 days without a visit). If your browser blocks this storage, a no is passed on in the address of any page the site has to load itself, removed once read, then kept in this tab's history for that page until you close the tab, so that it still applies there, even after a reload;
  • lumea_visits_off (local storage): only if you ask us not to count your visits; it keeps that choice in this browser until you change it, and contains nothing else;
  • lumea_draft (local storage): a random identifier and a reference to your saved answers in our team's group. It contains neither your name nor your contact details, and it stays in this browser after you send;
  • lumea_minor_lock (local storage): set if an age under 18 is entered in the form. It stays in this browser, and if an application is later sent from it, the alert our team receives asks them to check the applicant's age, and the last screen of the form has no option to send photos;
  • lumea_sent (session storage, deleted when you close the tab): set when your application has been sent from this tab, so that reloading the page shows the confirmation instead of an empty form, and your application is not sent or counted a second time from this tab. It contains no personal details.
  • lumea_finish (session storage, this tab only): set only if you open the personal link we sent you to finish your profile. It keeps that link in this tab for 30 minutes after you open the link, or after the last time you open the camera or your photo gallery, so that it is not lost if the page reloads, which some phones do while the camera is open; after that the page no longer uses it and deletes it the next time it opens. It contains the identifier of your application and the secret code of that link, no name or contact detail. It is erased when your answers are sent, when you tap Skip, and when the page finds that the link has expired or no longer works. It lives in this tab only and disappears when you close the tab.
  • lumea_arrived_at (session storage) and lumea_tg_teaser_closed_at (local storage): when you arrived on the site, so that our invitation to message us on Telegram appears after a minute, and when you closed it or opened our Telegram, so that it does not come back for 7 days. They contain no personal details.

You can delete all of these by clearing this site's data in your browser, except what an open tab keeps in its history for a page, which goes when you close that tab.

Your rights

You can:

  • ask us for access to your data and a copy of it;
  • ask us to correct it;
  • ask us to delete it;
  • object to its use, or ask us to limit it;
  • ask us to send it to you in a format you can reuse;
  • withdraw your consent at any time, which does not affect what was done before.

In Brazil, you can also ask us to confirm that we process your data, to anonymise it and to tell you who we share it with.

How: message us on Telegram or write to us at 8 The Green, Dover, DE 19901, United States. It is free. We may ask you to confirm it is you, for example by writing from the WhatsApp number or Telegram account you applied with. We answer within a few days, and always within the time limit set by the law of your country.

When we delete your application, we delete it from our recruitment database, from our file storage and from our team's Telegram group.

You can also complain to a data protection authority: in the European Union, the authority of your country; in the United Kingdom, the ICO; in Brazil, the ANPD; in Argentina, the Agencia de Acceso a la InformaciĂłn PĂşblica (AAIP).

For Argentina, the notice required by law, in Spanish:

El titular de los datos personales tiene la facultad de ejercer el derecho de acceso a los mismos en forma gratuita a intervalos no inferiores a seis meses, salvo que se acredite un interés legítimo al efecto conforme lo establecido en el artículo 14, inciso 3 de la Ley N° 25.326. La AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.

Age

This site and our work are for adults only: the form cannot be sent with an age under 18. If you enter an age under 18 while filling the form and an application is later sent from the same browser, the alert our team receives asks them to check your age before any contact. Before any contract, we check your identity and your age with an identity document.

Changes to this policy

When we change this policy, we update the date at the top of this page.