Privacy policy for PRELUDA

Who is responsible

LUMRAIT AB is the controller. Company registration number 559586-7671, registered office in Stockholm.

Send questions about personal data to [email protected]. Other questions go to [email protected].

What we collect

• Your name, your email and your organisation.
• Your role, if you state it.
• Your answers about the app. What it will be used for and how you work today.
• Payment details from Stripe, for example amount and receipt. Never the card number.
• What you write to us by email.

Do not include personal data about others in your answers. The review does not need it.

Why we process the information

• To review the app and deliver the report. Basis: contract (Article 6.1 b) and legitimate interest (Article 6.1 f).
• To send the draft, the report and the vendor's answers. Basis: the same.
• For the bookkeeping of the payment. Basis: legal obligation (Article 6.1 c).
• To stop misuse of the form. Basis: legitimate interest (Article 6.1 f).

We send no marketing unless you have asked for it.

AI without your identity

AI helps us gather evidence about the app. We use Claude from Anthropic.

Anthropic receives the name and address of the app. When the report is written, Anthropic also receives your answers about how the app will be used.

Names of organisations and people, email addresses and phone numbers are removed from the answers before they are sent.

Your name, your email and your organisation are never sent to Anthropic.

A person at LUMRA reads and approves every report before you receive it.

Who can access the information

We never sell personal data. Your answers are never shared with another customer.

The vendor of the app receives our questions. It is never told who ordered the review.

These processors handle information for us, under data processing agreements:

• Anthropic, AI that gathers evidence about the app. USA.
• Brevo, sending email. EU.
• Stripe, the card payment. EU and USA.
• Cloudflare, network and protection in front of the website. Global network.
• Our hosting provider, where the database is kept. Sweden.

Outside the EU

Anthropic, Stripe and Cloudflare may process information in the USA.

The transfer follows the European Commission's standard contractual clauses or the Data Privacy Framework between the EU and the USA.

How long we keep it

• The order is kept for as long as you may need the report.
• An approved report is never changed afterwards. A correction or update becomes a new version.
• If you ask us to remove your information we remove your name and email. The report remains without them.
• Receipts and bookkeeping records are kept for seven years, as Swedish law requires.
• The IP address for rate limiting is kept only while the limit applies and for at most one hour after that.

Your rights

• Find out what information we hold about you.
• Have errors corrected.
• Have information erased when it is no longer needed.
• Restrict or object to the processing.
• Receive the information you provided yourself.
• Complain to the Swedish Authority for Privacy Protection, imy.se.

Write to [email protected]. We answer within one month.

Cookies

The website sets no cookies. We use no tracking and no statistics from others.

Security

Information is sent encrypted. Only the people at LUMRA who work on the review can access it.

The link to your report is personal. Share it only with those who will read the report.

You can replace the link on the page. The old one then stops working at once.

How we protect the information is described on the security page.

Changes

If we change the policy the new date appears below. We tell you about larger changes by email.