Privacy Policy

At Lumoris Technologies Inc. (“Chat4Data,” “we,” “us,” or “our”), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, products, and services (collectively referred to as the “Service”).

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

If you have any questions about this Privacy Policy, please contact us at [email protected].

1. Information We Collect

1.1 Personal Information You Provide

Registration Information: When you create an account, we collect your name, email address, and password.
Payment Information: When you make a purchase, payment details are processed by our PCI-DSS compliant payment processor. We do not store full card numbers.
Communications: Any information you submit when contacting our support team or providing feedback.

1.2 Usage Data We Collect Automatically

Log Data: IP address, browser type, operating system, access times, and pages viewed.
Cookies and Tracking Technologies: See Section 10 (Cookie Policy) for full details on types, purposes, and how to manage your preferences.

1.3 Data from Third Parties

We may receive information about you from third-party services (e.g., social media platforms or payment processors) if you choose to link your account or use third-party integrations.

1.4 AI-Processed Data

When you use natural language query features within the Service or the Chrome Extension, your query — together with the minimum necessary data context required to process your request — may be transmitted to a third-party AI provider (Google LLC, via Google Gemini) to generate a response. Please refer to Section 9 (Chrome Browser Extension) and Section 2.7 for full details.

2. How We Use Your Information

2.1 Service Delivery

To provide, maintain, and improve the Service, process transactions, and send related information such as confirmations and invoices.

2.2 Communication

To respond to your inquiries and send updates, newsletters, and promotional materials (only where you have provided consent or as otherwise permitted by law).

2.3 Analytics and Improvement

To monitor and analyze usage trends and preferences in order to improve your experience.

2.4 Security and Fraud Prevention

To detect, prevent, and address technical issues, fraud, or other illegal activities.

2.5 Legal Compliance

To comply with applicable legal obligations and enforce our Terms of Service.

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

Processing Purpose	Legal Basis	GDPR Article
Providing and maintaining the Service	Performance of a contract	Art. 6(1)(b)
Processing payments	Performance of a contract	Art. 6(1)(b)
Fraud detection and security	Legitimate interests	Art. 6(1)(f)
Service improvement and analytics	Legitimate interests	Art. 6(1)(f)
Marketing communications	Consent (where required) or legitimate interests	Art. 6(1)(a) / 6(1)(f)
Non-essential cookies	Consent	Art. 6(1)(a)
Compliance with legal obligations	Legal obligation	Art. 6(1)(c)

Where we rely on legitimate interests, you have the right to object to such processing. Where we rely on consent, you may withdraw it at any time (see Section 5).

2.7 AI Processing Disclosure

When you interact with our AI-powered features, your natural language queries and the minimum necessary data context are sent to Google LLC (Google Gemini) for processing. This applies to both the web Service and the Chrome Extension.

Data sent to Google is subject to Google’s Privacy Policy.
We do not control how Google may use this data after transmission.
We recommend you avoid including sensitive personal information in your queries.
We have entered into a Data Processing Agreement with Google covering this processing.

With Your Consent: We may share your information with third parties if you give us explicit consent.
Service Providers: We share information with third-party service providers (e.g., payment processors, hosting providers, analytics services) who are contractually bound to use your data only for the purpose of providing services to us and may not use it for their own purposes.
AI Service Providers: As described in Section 2.7, queries and data context may be transmitted to Google LLC for AI processing.
Legal Requirements: We may disclose your information if required by law or in response to valid legal requests, such as subpoenas or court orders.
Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or a prominent notice on our website at least 30 days before the transfer and before your information becomes subject to a different Privacy Policy.
Protection of Rights: We may share information to protect the rights, property, or safety of Chat4Data, our users, or others.

4. Data Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, use, or disclosure. These measures include:

Encryption of data in transit (TLS) and at rest (AES-256).
Access controls and multi-factor authentication.
Regular security assessments and penetration testing.
Employee data protection training.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

4.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

Notify the relevant supervisory authority within 72 hours of becoming aware, where required by applicable law.
Notify affected users without undue delay where the breach is likely to result in a high risk to your rights and freedoms.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (GDPR) or 45 days (CCPA/CPRA) of receiving your request.

5.1 Rights Available to All Users

Access and Correction: Request access to or correction of your personal information.
Deletion: Request deletion of your personal information, subject to certain legal retention obligations.
Opt-Out of Marketing: Opt out of promotional communications by following the unsubscribe instructions in those communications or contacting us directly.

Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Restriction of Processing (Art. 18): Request that we restrict processing of your data under certain circumstances.
Right to Object (Art. 21): Object at any time to processing based on legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds.
Withdraw Consent (Art. 7(3)): Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.
Automated Decision-Making (Art. 22): Not be subject to decisions based solely on automated processing that produce significant legal effects, without human involvement.
Supervisory Authority Complaint (Art. 77): Lodge a complaint with the data protection authority in your country of residence, place of work, or where an alleged infringement occurred.

5.3 Additional Rights for California Residents (CCPA / CPRA)

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, used, and shared about you.
Right to Delete: Request deletion of your personal information, subject to certain exceptions.
Right to Correct: Request correction of inaccurate personal information we hold about you.
Right to Opt-Out of Sale / Sharing: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To opt out, click “Do Not Sell or Share My Personal Information” in our website footer, or contact us at [email protected].
Right to Limit Use of Sensitive Personal Information: Request that we limit the use and disclosure of your sensitive personal information to permitted purposes only.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level of service because you exercised your privacy rights.

6. International Data Transfers

Chat4Data is based in the United States. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our servers or service providers are located.

For transfers of personal data from the EEA, the UK, or Switzerland to countries not deemed adequate by the European Commission, we rely on the following transfer mechanisms:

Standard Contractual Clauses (SCCs): We use the EU Standard Contractual Clauses (June 2021 version, as applicable to the relevant module) for transfers to third-country recipients.
UK International Data Transfer Addendum: For transfers of UK personal data, we use the UK International Data Transfer Addendum to the EU SCCs.
Adequacy Decisions: Where available, we rely on adequacy decisions issued by the European Commission or the UK Secretary of State.

For more information about the safeguards in place for international data transfers, or to obtain a copy of the relevant SCCs, please contact us at [email protected].

7. Children’s Privacy

The Service is not intended for use by individuals under the age of 13 (or 16 where required by applicable law, such as in certain EU member states). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected such information without appropriate parental consent, we will promptly delete it.

If you believe we have collected information from a child, please contact us immediately at [email protected].

8. Third-Party Links

The Service may contain links to third-party websites or services not owned or controlled by Chat4Data. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Chrome Browser Extension

Chat4Data offers a Chrome browser extension (the “Extension”) that enables users to interact with data on web pages using natural language queries. This section specifically describes how the Extension handles your data.

9.1 Local Data Storage

All data captured or extracted by the Extension from web pages you visit — including tables, spreadsheets, and other structured content — is stored exclusively in your local browser storage. This data is never uploaded to or stored on Chat4Data’s servers.

9.2 No Server Transmission of Captured Content

The Extension does not transmit any web page content, scraped data, or locally stored data to Chat4Data’s servers. Your captured data remains entirely on your device. You may clear this data at any time by clearing your browser’s local storage or uninstalling the Extension.

9.3 Natural Language Queries and AI Processing

When you submit a natural language query within the Extension, that query — along with the minimum necessary structured data context required to process your request — is transmitted to Google LLC (Google Gemini) to generate a response.

The “minimum necessary data context” means only the specific data fields or table rows relevant to your query, not entire web pages or data sets.
This transmission is subject to Google’s Privacy Policy.
We recommend that you do not include sensitive personal information in your queries.

9.4 What We Do Not Collect via the Extension

The Extension does not collect or transmit to Chat4Data:

The content of web pages you visit.
Your browsing history.
Any data stored locally by the Extension.

9.5 Extension Permissions

The Extension requests only the permissions necessary to function. Each permission is used solely for the purposes described in this section.

We use cookies and similar technologies to operate and improve the Service.

10.1 Types of Cookies We Use

Category	Purpose	Examples	Consent Required
Strictly Necessary	Essential for the Service to function (e.g., login sessions, security)	Session cookies, CSRF tokens	No
Functional	Remember your preferences and settings	Language preference, UI preferences	Yes (EU/UK)
Analytics	Understand how users interact with the Service	Google Analytics	Yes (EU/UK)
Marketing	Deliver relevant advertising	Ad platform cookies	Yes

Cookie Consent Banner: When you first visit our website, you will be asked to consent to non-essential cookies. You can update your preferences at any time via the “Cookie Settings” link in our website footer.
Browser Settings: You can configure your browser to refuse all cookies or to alert you when cookies are being sent. Note that some features of the Service may not function properly without cookies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy on this page with an updated “Last Updated” date.
Sending you an email notification for significant changes.

For material changes that affect how we process your personal information, we will obtain your affirmative consent before the new policy takes effect, where required by applicable law. Your continued use of the Service after the notice period for non-material changes constitutes acceptance of those changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Company: Lumoris Technologies Inc.
Email: [email protected]

By using Chat4Data, you acknowledge that you have read, understood, and agree to this Privacy Policy. Thank you for trusting us with your information!