Privacy Policy
Last updated: April 2026
1. Data Controller
LumenVest AI ("we", "us") operates the website lumenvest.ai. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national data protection legislation.
For any privacy-related enquiries, please contact us at privacy@lumenvest.ai.
2. Data We Collect
We collect and process the following categories of data:
• Simulation data: monthly energy cost, property type, and country — used solely to generate solar investment projections. This data is processed anonymously and is not stored unless you request a report.
• Report purchase data: email address and payment information processed securely via Stripe. We do not store credit card details on our servers.
• Installer application data: company name, contact person, email, country, website, and optional message — collected when solar installers apply to join our directory.
• Technical data: IP address, browser type, device information, and usage analytics collected via cookies and similar technologies.
3. Purpose and Legal Basis
We process personal data for the following purposes:
• To provide solar investment simulations and generate reports — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To process payments via Stripe — legal basis: performance of a contract.
• To manage installer directory applications — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• To improve our services through analytics — legal basis: legitimate interest, or consent where required by applicable law.
• To send transactional emails related to purchases — legal basis: performance of a contract.
4. Third-Party Services
We use the following third-party processors:
• Stripe (stripe.com) — for secure payment processing. Stripe's privacy policy applies to payment data.
• Lovable Cloud — for backend infrastructure, database, and authentication services.
• AI model providers — for generating executive summaries and SEO content. No personally identifiable information is sent to AI providers.
All third-party processors are contractually bound to protect your data in compliance with GDPR.
5. Data Retention
Simulation data entered without purchasing a report is not persistently stored.
Report purchase records and associated email addresses are retained for 24 months for customer support and legal compliance purposes.
Installer application data is retained for the duration of the business relationship plus 12 months after termination.
You may request erasure of your data at any time (see Section 7).
6. Cookies
We use essential cookies required for the website to function and optional analytics cookies to understand how visitors use our platform. For details, see our Cookie Policy at lumenvest.ai/cookies.
You can manage your cookie preferences through your browser settings.
7. Your Rights
Under GDPR, you have the right to:
• Access — request a copy of the personal data we hold about you. • Rectification — request correction of inaccurate data. • Erasure — request deletion of your personal data. • Restriction — request that we limit processing of your data. • Data portability — receive your data in a structured, machine-readable format. • Objection — object to processing based on legitimate interests. • Withdraw consent — where processing is based on consent.
To exercise any of these rights, contact us at privacy@lumenvest.ai. We will respond within 30 days.
8. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.
This policy may be updated periodically. The latest version is always available at lumenvest.ai/privacy.