Privacy Policy

This Privacy Policy explains how LUMIRON SAS collects, uses, stores and protects personal data when you access our websites, products and AI-powered services, including iko.

LUMIRON SAS
Simplified Joint-Stock Company (SAS)
Registered with the Nanterre Trade and Companies Register under No. 988 278 446

Registered Office:
76 Boulevard Maurice Barrès
92200 Neuilly-sur-Seine
France

Email: contact@lumiron.ai

This Privacy Policy applies to:

• visitors of our websites;
• customers using our Services;
• prospective customers;
• users interacting with our AI-powered solutions;
• individuals whose information is processed through integrations authorized by our customers.

Depending on the context, Lumiron acts either as a Data Controller or as a Data Processor under the General Data Protection Regulation (GDPR).

Lumiron acts as a Data Controller for data relating to website usage, customer accounts, billing, support requests and commercial communications.

When customers use our Services with their own business data, Lumiron acts as a Data Processor and processes data solely on behalf of the customer, in accordance with applicable agreements and customer instructions.

Depending on how our Services are used, we may collect the following categories of information.

Account Information

• Name
• Business email address
• Company information
• User account information
• Authentication information

Billing Information

• Billing address
• Payment-related information
• Invoices
• Subscription details

Technical Information

• IP address
• Device information
• Browser type
• Operating system
• Log files
• Session information
• Diagnostic information

Service Data

When customers use our Services, we may process:

• prompts and conversations;
• AI-generated responses;
• uploaded files and documents;
• voice interactions where applicable;
• workflow data;
• information synchronized through customer-authorized integrations such as calendars, email services, CRM systems, cloud storage platforms, collaboration tools and other connected business applications.

We process this information only to deliver the requested Services.

We process personal data for the following purposes:

Performance of our Services

• providing access to our platform;
• authenticating users;
• delivering AI-powered features;
• executing workflows;
• processing requests;
• customer support;
• subscription management;
• billing.

Legitimate Interests

• improving the reliability of our Services;
• monitoring system performance;
• preventing fraud and abuse;
• ensuring platform security;
• detecting technical issues;
• maintaining service quality.

Legal Obligations

• accounting obligations;
• tax compliance;
• legal requests from competent authorities;
• regulatory compliance.

Consent

Where required by applicable law, we rely on consent for:

• marketing communications;
• optional cookies;
• analytics technologies requiring prior consent.

Our Services use artificial intelligence to automate workflows, generate responses and assist users.

To provide these features, certain requests may be securely processed through carefully selected AI service providers acting on Lumiron's behalf.

Lumiron selects providers that offer contractual commitments regarding confidentiality, security and data protection.

Customer data is processed solely for the purpose of providing the requested Services.

Lumiron does not sell customer data and does not use customer information for advertising purposes.

We continuously improve the reliability, quality and security of our Services.

Where possible, improvements rely on technical logs, anonymized information or aggregated statistics.

Any processing performed for service improvement is carried out in accordance with applicable data protection laws.

We never sell personal data.

Personal data may only be shared with trusted service providers necessary for operating our Services, including:

• cloud infrastructure providers;
• authentication providers;
• payment providers;
• AI infrastructure providers;
• telecommunications providers;
• customer support providers;
• analytics providers.

These providers are contractually required to implement appropriate security measures and process personal data only for authorized purposes.

We may also disclose information where required by applicable law or by a lawful request from public authorities.

Some of our service providers may process personal data outside the European Economic Area (EEA).

Whenever international transfers occur, Lumiron ensures that appropriate safeguards are implemented, including:

• European Commission Adequacy Decisions;
• Standard Contractual Clauses (SCCs);
• or other lawful transfer mechanisms recognized under the GDPR.

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Typical retention periods include:

Protecting customer information is a core priority at Lumiron.

We implement appropriate technical and organizational measures designed to safeguard personal data, including:

• encrypted communications using industry-standard TLS protocols;
• encryption of sensitive data where appropriate;
• secure cloud infrastructure;
• role-based access controls;
• authentication and authorization mechanisms;
• infrastructure monitoring;
• audit logging;
• regular backups;
• vulnerability management procedures;
• restricted employee access based on business need.

Only authorized personnel have access to systems containing personal data.

Although no system can guarantee absolute security, Lumiron continuously reviews and improves its security practices to maintain a high level of protection.

Customers remain responsible for protecting their own account credentials and managing access to connected third-party services.

Subject to applicable law, individuals may exercise the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction
• Right to object
• Right to data portability

Requests may be submitted at: contact@lumiron.ai

We will respond within the timeframe required by applicable law.

Individuals also have the right to lodge a complaint with their local data protection authority, including the French Data Protection Authority (CNIL).

Our websites use cookies and similar technologies to:

• ensure the proper operation of the website;
• improve user experience;
• measure website performance;
• analyze website usage;
• enhance security.

Where required by law, non-essential cookies are only placed after obtaining user consent.

Users may accept, refuse or modify their cookie preferences at any time through the cookie banner or available preference management tools.

If you have any questions regarding this Privacy Policy or the processing of personal data, please contact:

LUMIRON SAS
76 Boulevard Maurice Barrès
92200 Neuilly-sur-Seine
France

Email: contact@lumiron.ai