Who owns the data in a white-label AI system?
Your client owns their customers' data, you own your agency account and demo captures, and Lumina holds it as the operator and never markets to it. Here is the full breakdown, what the model vendors do and do not keep, and what happens to everything if you cancel or a client leaves.
Three different parties own the data in a white-label AI system, and mixing them up is how agency owners end up in a bad meeting. Your client owns their business information and their customers' records. You own your agency account, your demos, and the contact details your demo page captures. Lumina holds all of it as the operator and does nothing else with it. We do not sell it, we do not market to it, and we never contact anyone who opens your demo.
That is the whole answer. The rest of this post is the detail you need when a practice manager asks you the same question across a table and "I'm pretty sure we own it" is not going to do.
What data does one of these systems actually hold?
Ownership is easier to reason about once you have an inventory. A typical buildout ends up holding five kinds of data.
Business configuration your client hands over at intake: hours, services, price bands, logo, brand colors, calendar access, and who the leads go to. That is the list we collect before a build starts, and it is the least sensitive pile here.
Conversation records. What the caller said, what the agent said back, and on voice builds, the audio.
Contact details captured in those conversations. A name, a phone number, sometimes an email, plus what the person wanted and when.
Booking records written out to the client's calendar or CRM.
Demo-side data on your own account: which prospects opened your demo page, how long they talked to the agent, and the email addresses the gate collected.
Two of those five need real care. Conversation records contain other people's words. Demo-side captures are your pipeline, and the reason people ask whether a platform is quietly building a lead list out of them.
Who owns each pile?
The client's customers' data belongs to the client. They collected it. In the eyes of a regulator and of the caller, your client is the business, and you are the vendor sitting behind them.
The business configuration belongs to the client too, including the recordings of their own phone tree and the price bands they gave you. You are holding it to do a job.
Demo-side data belongs to you. From our FAQ, in plain terms: we do not email, call, or market to anyone who opens your demo, the addresses captured by the email gate belong to you, and Lumina Sales is not a lead marketplace. That last line is a commitment about what the company will not become, and it is the one I would want in writing if I were buying this.
The platform account, your subdomain, your branding, and your drafts are yours.
Do the model vendors train on your client's calls?
Not by default, on either of the two providers most of this industry runs on. But "not used for training" and "not stored" are different claims, and blurring them in a sales call is how you get caught out later.
OpenAI's data controls documentation states that data sent to the OpenAI API "is not used to train or improve OpenAI models" unless you explicitly opt in, and its per-endpoint table lists No in the training column for every endpoint it covers. Retention is a separate question and the same page answers it: abuse monitoring logs "are generated for all API feature usage and retained for up to 30 days," unless longer retention is required by law. Zero Data Retention exists, it excludes customer content from those logs, and the page says it is "subject to prior approval by OpenAI and acceptance of additional requirements." It is not a checkbox.
Anthropic's privacy center says the same thing for commercial use: "By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models." The exception is feedback. If someone hits thumbs up or down, that conversation gets stored for up to five years.
So the honest sentence to say to a dentist is this. The model provider does not train on your patients' calls, short-lived logs exist for abuse monitoring, and if you need zero retention stated in a contract, let me find out rather than guess. Saying you will check costs you nothing in that room. Guessing wrong costs you the account.
What happens to your account if you cancel Lumina?
Nothing gets deleted. Published demos unpublish, so the links stop serving, and everything you built stays as a draft. You keep your login with zero voice minutes, zero chat messages, and zero audits until you resubscribe, and then your demos go back up unchanged. That is all on the pricing section and it has not changed.
Here is the part that is not on the pricing section. A cancelled subscription is not an export. Your work still exists, but it lives inside our platform, not on your hard drive. If you are winding an agency down rather than pausing it, pull your logos, demo copy, price bands, and prospect lists out while you can still see them. Same advice I would give about any platform, ours included.
What happens if your client fires you?
This is the expensive one, and almost nobody plans for it until the email arrives.
Three things decide how much a client exit costs you.
Whose name the phone number is in. If a voice build answers on a number you bought, your former client will want that number, because it is on their vans, their website, and their Google listing. The FCC's porting guide says you can keep a number when you switch providers in the same geographic area, and that "your old company cannot refuse to port your number, even if you owe money for an outstanding balance or termination fee." Simple ports are required to be processed in one business day. None of that settles a fight between you and your client over whose account the number sits in, because porting rules govern carriers, not vendor relationships. The fix is to never create the fight. Put the number in the client's name at the start, or forward one of their existing numbers, and write it into the agreement.
Whose account the calendar and CRM live in. If you connected their Google Calendar and their CRM, ownership is obvious and the exit takes an afternoon. If you built everything inside your own workspace to keep it tidy, their bookings are now in your CRM, and you are either exporting for free or arguing in email.
Whether your contract says anything at all. Most do not. One paragraph fixes it.
The part that does not go on a sales page
A white-label stack means there is an operator you do not control sitting between you and your client's data. For a five-truck plumbing company, nobody will ever raise it. Sell into dental groups, law firms, or anything touching health records for long enough and you will meet a buyer who wants a named subprocessor list, a signed data processing agreement, contractual audit rights, and in healthcare a BAA. If you promise that in the room and go looking for it afterward, you have a problem that costs you the deal and some reputation. Ask on the 30-minute build call before you commit to it in a contract.
The second uncomfortable thing is who the rules actually bind. California's Attorney General states that the CCPA applies to for-profit businesses doing business in California with "a gross annual revenue of over $25 million," or that buy, sell, or share the personal information of 100,000 or more California residents or households, or that make half their revenue selling personal information. A six-truck HVAC company clears none of those. Agency owners treat that as permission to be sloppy, which is a bad trade, because the same agency eventually sells a 40-location dental group that does clear the threshold.
And when a deletion request does arrive, it arrives at your client, not at you. The same California guidance says consumers may ask businesses to delete personal information "and to tell their service providers to do the same," and that businesses have 45 calendar days to respond, extendable to 90 with notice. You are the service provider in that sentence. Work out now how you would honor a deletion inside 45 days. Do not work it out the week the letter lands.
Five lines for your client agreement
Write these before your next close. An hour once, and they save you a bad quarter later.
- The client owns all data the system collects about their customers, and gets an export in a usable format within 30 days of a written request.
- On termination, you delete their data from your systems within an agreed window, and confirm it in writing.
- Any phone number provisioned for the build is registered in the client's name and ports at their request.
- You name your subcontractors and platform providers, in a list you are allowed to update with notice.
- Whether calls are recorded is a decision made at build time, documented in the agreement, and disclosed as the law in their state requires. We wrote about disclosure rules for voice agents separately, and it is worth reading before you record anything.
FAQ
Does Lumina ever contact my prospects or my clients? No. We do not email, call, or market to anyone who opens your demo, and the addresses your gate captures belong to you. Prospects see your brand, your subdomain, and your booking link, and nothing that routes back to us.
If I cancel, do my demos get deleted? No. Published demos unpublish so the links stop working, and everything you built stays as a draft. Resubscribe and it goes live again unchanged. If you want copies of your assets outside the platform, download them first.
Does the live demo on my page record callers? The demo call runs in the browser and nothing is recorded beyond the page. Demo actions are sandboxed too, so nothing hits a real calendar or inbox. Recording on a client build is a separate decision you make at build time.
My client's procurement team wants a data processing agreement. What do I do? Raise it on the 30-minute pricing call for that build, before you sign anything that commits you to terms you have not confirmed. A regulated buyer asking for paperwork is a good sign about the deal size. It is a bad sign about your timeline if you start looking after the contract is signed.
Who is responsible if a caller's information leaks? Your client is the business the caller dealt with, so the complaint goes to them and then straight to you. Settle ownership, deletion, and subprocessors in writing before launch rather than after an incident.
What to do this week
Open your last signed client agreement and search it for three words: data, delete, and number. If none of them appear, you have the same gap almost every small agency has, and the five lines above close it in an hour.
Still deciding whether to sell this way at all? Talk to the live demo on the homepage and see exactly what your prospect sees. When you are ready to run it under your own brand, start your workspace for $49 a month. The price goes up on October 1.