This policy explains what personal data Estate Luma collects, why, who processes it and what rights you have. The controller of your data is Denis Saraseko, individual entrepreneur (Armenia, TIN 20437477, reg. No. 286.1618025), the Republic of Armenia. Questions and requests: estateluma.io@gmail.com.
01What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Email, name, password (stored only as a salted hash) | You, when you sign up | Sign-in and account |
| Email, name and account ID from Google | Google, if you choose “Continue with Google” | Sign-in and account |
| Time and version of your consent, IP at sign-up | The Service | Proof of consent |
| Property files: photos, plans, descriptions, contacts on materials | You | Building your materials |
| Property documents: land registry extracts, title papers | You, in the Documents tab | Completeness and consistency check |
| Messages to the AI assistant | You | Answering your questions |
| Plan, balance, usage, invoices | The Service and payment providers | Billing, limits, accounting |
| IP address, browser, server logs | Your browser | Security and troubleshooting |
We do not receive your full card number — card payments are handled by the payment provider named at checkout.
Other people’s data. Documents and materials often contain data about owners, sellers or agents. You upload it as the party responsible for having a lawful basis; we process it only on your instructions, as your processor.
02Legal bases
- Contract — running your account and building materials.
- Legal obligation — keeping payment and tax records.
- Legitimate interest — security, preventing abuse, improving the Service from aggregated usage.
- Consent — showing your project in our portfolio, if you agree in writing. You can withdraw it at any time.
03Who processes data for us
We share data only with providers needed to run the Service, under contracts that bind them to protect it:
| Provider | Purpose | Location |
|---|---|---|
| Anthropic (Claude) | Reading photos and documents, writing texts, assistant | USA |
| fal.ai | Image and video generation | USA |
| Sign-in with Google, if you use it | USA | |
| Payment provider named at checkout | Payments in USD; Merchant of Record where it acts as reseller | As stated by the provider |
| Hosting providers | Workspace server and backups | Netherlands; backups in Germany |
AI providers process your content to return a result and, under their API terms, do not use it to train their models. Transfers outside your country rely on standard contractual clauses or an equivalent safeguard.
04How long we keep it
- Account and property files — while your account is active, then up to 30 days for export.
- Backups — up to 30 days, then overwritten.
- Payment records — as long as tax law requires (usually 5–6 years).
- Server logs — up to 90 days.
05Security
Traffic is encrypted with HTTPS. Accounts are isolated from each other: every file request is checked against the account that owns the property. Passwords are stored as PBKDF2 hashes. Access to servers is by key only.
06Cookies
We use one essential cookie to keep you signed in to the Workspace. The website has no advertising or analytics trackers. Fonts are loaded from Google Fonts, which receives your IP address.
07Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or move it to another service. Write to estateluma.io@gmail.com — we answer within 30 days. If you are in the EU, UK or another country with a data protection authority, you can also complain to it.
08Changes
We will post any changes here and update the date above. If a change affects how we use data you have already given us, we will tell you by email first.