Privacy Policy &
Data Handling

Luminosity ("we," "us," "our") is an AI platform that lets individuals and organisations create custom AI models trained on their own documents. We operate the website at luminosityai.app and all associated services.

For the purposes of this policy, Luminosity is the data controller for personal information you provide when creating an account or using our platform.

We collect the minimum information needed to operate the service. Here is exactly what that is:

We do not collect your name, phone number, or physical address unless you voluntarily provide them when contacting support.

Documents are the core of what you upload to Luminosity, and we treat them with the highest level of care.

• →Your documents are private. They are tied to your account and are never accessible to other users or used to train any shared model.
• →Documents are processed to build your AI. When you upload a PDF, we chunk the text, generate vector embeddings via Voyage AI, and store those embeddings in a database scoped exclusively to your account.
• →The source document is retained. We store the original file so you can reference which documents your AI is trained on. You can delete them at any time from your dashboard.
• →Embeddings are deleted when you delete a document. Removing a document from your model removes its vector embeddings from the retrieval index.
• →We do not read your documents. No Luminosity employee accesses document contents unless you explicitly share them with us for support purposes.
• →We do not sell, license, or share your documents. With anyone, ever, for any reason, except as required by law.

We use the data we collect only for the following purposes:

• →Operating your account and the AI models you create.
• →Enforcing plan limits and tracking token usage.
• →Responding to support requests you initiate.
• →Monitoring platform health, preventing abuse, and detecting security threats.
• →Complying with legal obligations where required.

We do not use your data to train AI models. We do not build profiles on you for advertising. We do not sell your data.

We use the following providers to operate the platform. Each receives only the data needed for its role:

Tavily is used only when online search is enabled on a model. We will update this list if we add or change providers.

We keep your data for as long as your account is active or as needed to provide the service.

• →Account data (such as your email) is retained while your account is active.
• →Documents and embeddings are removed when you delete them from your dashboard. Related chunks and stored files are deleted at that time.
• →Usage logs record token counts per request and are kept to enforce plan limits.
• →Chat in the dashboard is held in your browser for the current session only and is not stored as message history on our servers.

To request deletion of your account and associated data, contact us at hello@luminosityai.com. We will process your request as soon as reasonably possible.

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure:

• →All data is transmitted over HTTPS with TLS encryption.
• →Model API keys are stored in our database and used to authenticate API requests.
• →Each user's models, documents, and embeddings are scoped to their account in our database.

Regardless of where you are located, you have the following rights over your personal data:

• →Access. Request a copy of the personal data we hold about you.
• →Correction. Ask us to correct inaccurate or incomplete data.
• →Deletion. Request that we delete your account and all associated data.
• →Portability. Request an export of your data in a machine-readable format.
• →Objection. Object to processing of your data where we rely on legitimate interests as a legal basis.
• →Withdraw consent. Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at hello@luminosityai.com. We will respond within a reasonable time.

We use cookies for authentication only:

• →Authentication. Session cookies from our auth provider keep you logged in between page loads. They are cleared when you sign out.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies in the application.

If you have any questions about this policy, want to exercise your data rights, or need to report a concern, get in touch: