๐Ÿ”’ Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains how Lumazel ("we", "us") collects, uses and protects your personal data when you use this website and its features. We follow the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The service is operated by Micro-Touch & Consult (Technology that serves you.), established in Egmond aan Zee, Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 32061848. This entity is the data controller for your personal data. For any privacy question or to exercise your rights, contact us at jaap.zwart@microtouchconsult.com.

2. What we collect

  • Account data โ€” your username, e-mail address and a securely hashed password (we never store your password in readable form).
  • Usage & activity โ€” which features you use and an estimated AI cost per action, to run the AI allowance/meter and keep the service reliable.
  • Content you create โ€” the questions, readings and settings you submit, so the AI can generate answers and so we can show your saved items.
  • Payment data โ€” handled by Stripe. We do not receive or store your card number; we only keep a Stripe customer/subscription reference and your membership status.
  • Technical data โ€” essential cookies (see our Cookie Policy) and standard server logs (e.g. IP address) needed to operate and secure the site.

3. Why we use it (legal bases)

  • To provide the service (account, readings, memberships) โ€” performance of a contract.
  • To bill and prevent abuse (payments, AI metering, security) โ€” legitimate interest and legal obligation.
  • To send account e-mails (confirmation, password reset) โ€” performance of a contract.

We do not sell your data and we do not use advertising or tracking cookies.

4. Who we share it with (processors)

We use trusted providers only to run the service, under data-processing terms:

  • Microsoft Azure โ€” hosting and data storage (EU region).
  • Stripe โ€” payment processing.
  • AI providers โ€” OpenAI, xAI, Google and Anthropic process the text of your requests to generate answers; Microsoft Azure provides text-to-speech and translation.
  • Microsoft Graph โ€” sending account e-mails.

Some of these providers may process data outside the EU under appropriate safeguards (e.g. EU Standard Contractual Clauses).

5. How long we keep it

We keep your account data while your account exists. Activity/cost logs are kept for as long as needed to operate the AI allowance and for reasonable security and accounting periods. When you delete your account, we remove your personal data, except where we must keep limited records for legal/accounting reasons.

6. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent where processing is based on consent. To exercise these rights, contact jaap.zwart@microtouchconsult.com. You may also lodge a complaint with your local data-protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

7. Security

We protect your data with encryption in transit (HTTPS), hashed passwords, access controls and reputable cloud providers. No system is perfectly secure, but we take reasonable measures to keep your data safe.

8. Children

The service is not directed at children under 16. If you believe a child has provided us data, contact us and we will remove it.

9. Changes

We may update this policy; the "last updated" date reflects the latest version. Material changes will be made clear on this page.

Micro-Touch & Consult ยท Egmond aan Zee, Netherlands ยท KvK 32061848 ยท jaap.zwart@microtouchconsult.com