Data privacy#
What we collect#
| Data | Purpose | Retention |
|---|---|---|
| Email address | Authentication | Account lifetime |
| Conversations | Sidekick functionality | Configurable |
| Audit trail | Compliance, debugging | Per plan |
| Usage metrics | Billing, analytics | 2 years |
What we don't collect#
- Conversation content for model training
- Browsing behavior outside the dashboard
- Data from connected services beyond what you request
GDPR compliance#
LumenFlow supports GDPR requirements:
| Right | How to exercise |
|---|---|
| Access | Export all data from Settings → Privacy |
| Rectification | Edit profile in Settings → Account |
| Erasure | Delete account from Settings → Account |
| Portability | Export data as JSON/CSV |
| Objection | Contact privacy@lumenflow.cloud |
Data residency#
| Component | Location |
|---|---|
| Application and data | EU (Frankfurt) |
| LLM calls | LumenFlow managed inference or your chosen provider's infrastructure; a workspace pin refuses any call whose key region would cross the pinned region |
| Workspace pin | Owners with the residency entitlement pin the workspace region from Dashboard → Trust → Data residency; the pin is audited and enforced on every production model call and residency-relevant storage write |
Pinning is a purchasable entitlement (included on Enterprise, or when your organisation has been granted the residency option). An unentitled workspace sees a refusal explanation and cannot save a pin. Entitled workspaces pin to eu_west, us_east, us_west, or apac. A cross-region model call or storage write for a pinned workspace is refused and leaves a residency-violation receipt.
Public trust surfaces#
- Trust Centre — customer-facing guide to the public trust centre, sub-processors register, live status feed, and the in-product Trust dashboard
- Public pages: /trust (readiness), /subprocessors (versioned register), /status (live health)
SOC 2 readiness#
LumenFlow is building toward SOC 2 Type II readiness:
- Controls in product — action history, evidence capture, access posture
- Operational baseline — encryption, monitoring, and recovery practices
- Audit preparation — export and review surfaces that support formal assurance work
This is readiness work, not a certification claim.
Responsible AI#
- All AI actions go through governance (no uncontrolled execution)
- Audit trail provides explainability for AI decisions
- Users control autonomy levels per action type
Info
LumenFlow does not currently offer a Business Associate Agreement. Do not submit protected health information (PHI) to LumenFlow.