Privacy Policy
Last updated: [date before launch]
This policy explains what personal data Lumineus ("we", "us") collects, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is [legal entity name], [registered address, EU]. For any privacy question or to exercise your rights, contact [privacy contact email].
2. What we collect
- Account data — your email address and a hashed password.
- Search activity — the questions you ask and, for members, a saved history and any sources or answers you choose to save. This lets us provide the history/favourites feature and improve the service.
- Technical data — standard server logs (IP address, timestamp, request) kept for security and troubleshooting.
- Payment data — when billing is live, handled by our payment provider (see §5); we do not see or store your card details.
We do not use advertising trackers, and we do not sell your data.
3. Why we use it, and the legal basis
- To provide your account and the search service — performance of a contract.
- To keep the service secure and prevent abuse — legitimate interest.
- To understand usage in aggregate and improve the product — legitimate interest.
- To take payment for a subscription — performance of a contract.
4. AI processing of your questions
To produce a cited answer, your question and the matching public-domain passages are processed by an AI language model operated by Mistral AI, whose processing takes place in the EU (France). We send only your question and the retrieved passages — never your email address, account details or search history. This processing therefore involves no transfer of your data outside the EU/EEA. Should we ever use a provider outside the EU/EEA, transfers would be covered by Standard Contractual Clauses and this policy updated first.
5. Who we share it with (sub-processors)
| Provider | Purpose | Region |
|---|---|---|
| netcup | Hosting | EU (Germany) |
| Scaleway | Backups & transactional email | EU (France) |
| Mistral AI | AI answer generation | EU (France) |
| Paddle | Payments (when live), as merchant of record | [region] |
6. How long we keep it
Account data is kept until you delete your account. Your search history and saved items are kept until you delete them or close your account. Server logs are kept for [retention period, e.g. 30–90 days].
7. Your rights
You have the right to access, correct, erase, restrict or object to the processing of your data, and to data portability. You can delete saved items and your account at any time. You may also lodge a complaint with your local data-protection supervisory authority.
8. Changes
We may update this policy; material changes will be notified in-app or by email. Questions? Write to [privacy contact email].