Privacy Policy

This Privacy Policy explains how Datalumo ("we", "us") handles personal data in connection with the datalumo.app website, the purchase process, and your account. It does not cover the self-hosted Datalumo software you run on your own infrastructure — that processes your documents and data entirely on servers you control, and we have no access to it.

What we collect

• Contact & interest — if you email us or submit a form, we receive your name, email address, and message.
• Account — your name, email address, a hashed password, and license/activation metadata (such as which deployments are active).
• Purchases — payments are processed by Lemon Squeezy, our Merchant of Record (see our Terms). Lemon Squeezy collects your payment details; we never see or store your full card information. From Lemon Squeezy we receive limited order data such as your name, email, country, and subscription/license status.
• License verification — a self-hosted instance may periodically contact our license server to confirm an active license. This sends only what is needed to validate the license (for example a license identifier). It can be disabled.
• Technical — standard server logs (IP address, user agent, timestamps) for security and reliability.

How we use it

• To deliver licenses, software updates, and support.
• To process orders, renewals, and refunds (via Lemon Squeezy).
• To respond to your requests and send essential service communication.
• To secure and maintain our website and services.

Who we share it with

We do not sell your personal data. We share it only with the providers needed to run the service: Lemon Squeezy (payments and billing), our email provider, and our hosting provider. Each processes data on our behalf under their own terms.

Your content and your AI keys

Your indexed documents and data live on your own server. When you use chat or embeddings, your instance sends content to the AI provider you configure — or, if you run a local model, nothing leaves your server at all. We are not party to that processing.

Data residency & your rights

You control where your self-hosted data lives. For the website and account data we hold, you may request access, correction, or deletion at any time. Because Lemon Squeezy is based in the United States, order data is processed there; Lemon Squeezy maintains appropriate safeguards for international transfers.

Retention

We keep account and order records for as long as your license is active and as required for legal, tax, and accounting purposes, then delete or anonymize them.

Changes

We may update this policy; material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy or a request about your data? Contact us:

vanrossum.dev (trading as Datalumo)
Schoolstraat 70, 6721 CS, Bennekom, The Netherlands
KVK 66761743
[email protected]