Privacy Policy

Last updated: 9 March 2026

1. Data Controller

The data controller is Luviner, reachable at privacy@luviner.com. This policy describes how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian data protection laws.

2. Data We Collect

We collect the following categories of data:

• Account Data: Name, email address, and hashed password provided during registration.
• Project Data: CSV datasets uploaded for model training, project configurations, and training results (accuracy, parameters).
• Device Data: Hardware Unique IDs (UIDs) of microcontrollers registered for binary deployment.
• Technical Data: IP address, browser type, pages visited, and timestamps collected automatically via server logs and analytics (Google Analytics).

3. Purpose of Processing

We process your data for the following purposes:

• Providing the Service: training models, compiling binaries, managing your account and projects
• Communication: sending transactional emails (account confirmation, password reset, training completion notifications)
• Improvement: analyzing usage patterns to improve the platform (using aggregated, anonymized data)
• Legal compliance: fulfilling legal obligations and responding to lawful requests

4. Legal Basis

We process your data based on: (a) contract performance — processing necessary to provide the Service you requested; (b) legitimate interest — analytics and service improvement; (c) consent — for cookies and marketing communications, which you can withdraw at any time; (d) legal obligation — where required by law.

5. Data Retention

Account data is retained for the duration of your account plus 30 days after deletion. Project data (datasets, trained models) is deleted within 30 days of project deletion. Device UIDs are deleted when removed from a project or upon account deletion. Server logs are retained for 90 days. Compiled binaries and associated watermarks are retained for 2 years for IP protection purposes.

6. Data Sharing

We do not sell your personal data. We may share data with: (a) infrastructure providers (hosting, database) strictly for service delivery, under data processing agreements; (b) analytics providers (Google Analytics) for anonymized usage statistics; (c) law enforcement when required by a valid legal order. We do not use your uploaded datasets to train our own models or share them with any third party.

7. Cookies

We use essential cookies for session management and authentication. We also use Google Analytics cookies for anonymous usage statistics. You can manage your cookie preferences through the CookieYes consent banner displayed on the site. For more details, see the cookie settings accessible from the banner.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restriction: limit the processing of your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interest

9. Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), access controls, and regular security reviews.

10. Changes to This Policy

We will notify you of material changes to this policy via email at least 30 days before they take effect. The current version is always available on this page.

11. Contact

For privacy-related inquiries or to exercise your rights, contact us at privacy@luviner.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).