This Privacy Policy explains how Lumen Solutions ("we", "us", "our") collects, uses, and protects information when you visit lumen-solutions.co (the "Site") or contact us. We keep data collection to a minimum and never sell your personal information.
1.Who we are
Lumen Solutions builds and customises ERPNext for growing businesses, implementation, mobile apps, and retail POS (including LumenPOS). For any privacy question, you can reach us at hello@lumen-solutions.co.
2.Information we collect
We only collect information you choose to give us, plus a small amount of technical data needed to run the Site.
| What | When | Why |
|---|---|---|
| Contact details, your name, company, email, area of interest, and message | When you submit the contact form | To respond to your enquiry |
| Server logs, IP address, browser type, pages requested, timestamps | Automatically, on every visit | Security, diagnostics, and abuse prevention by our host |
| Theme preference, light or dark mode | When you toggle the theme | To remember your choice on your next visit |
We do not use advertising trackers, and we do not run third-party analytics or marketing pixels on the Site.
Software we supply, such as Lumen Reports, runs entirely on your own Frappe site. It sends us no telemetry, analytics or usage data, and we have no access to the business data it displays.
3.Cookies and local storage
The Site does not use tracking cookies. Your light/dark theme choice is stored in your browser's local storage on your own device, it never leaves your browser and is not sent to us. WordPress may set essential cookies only if you log in to the site as an administrator.
4.How we use your information
- To reply to your enquiries and provide the services you ask about
- To keep the Site secure and working correctly
- To meet legal or accounting obligations where they apply.
We rely on your consent (when you contact us) and our legitimate interest in running a secure website as the legal bases for processing.
5.Third parties who help us run the Site
We keep third parties to the minimum needed to operate:
- Hetzner Online GmbH, our web host, located in Germany (EU). They process server logs and store the Site and its email on our behalf.
- Google Fonts, the Site loads fonts from Google's servers, which means your browser's IP address is visible to Google when fonts are fetched. No cookies are set by this.
We do not sell, rent, or trade your personal information to anyone.
6.AI features in our software (Lumen Reports)
Our Lumen Reports app includes optional AI features: Ask AI, which turns a question written in plain English into a report, a copilot that changes a dashboard on request, and an executive summary that can be added to a dashboard or to a PDF report. They are switched off until someone enters a Google Gemini API key, and they can be switched off again at any time by removing that key.
Where the key comes from. The key belongs to you, not to us. You obtain it directly from Google and any charges Google makes are yours. We never see, store or transmit our own key on your behalf. Your key is stored encrypted on your own Frappe site, is never sent to your browser, and is removed from any error message the app shows.
What is sent to Google when these features are used:
- the question typed by the user, and their recent conversation with the assistant
- the structure of the relevant parts of your database: doctype names, field names, field labels and field types, including any custom fields you have created
- summary figures about the relevant doctypes, calculated on your own server under the user's permissions: how many records exist, the date range they cover, and up to six values from each of up to three fields (for example statuses or territory names), each with a count
- when the AI writes an analysis or an executive summary, the figures shown on the dashboard's charts, and those of up to four further summary queries it may ask for: totals, and the names of the categories they are grouped by (for example a customer or item name with its total)
- when the copilot is used, a description of the dashboard being edited: its title and theme, and for each widget its title, chart type, position, the doctype and fields it reports on, and the opening words of any heading or note
- the query definition of any widget the AI is asked to change, including its filter values
- the titles of reports already on the dashboard being extended
- the current date.
What is not sent: individual records. Google does not receive whole documents or the rows of table widgets. Every query runs on your own server, under your own permission rules, and only the summary figures described above are included in a request.
Please note that field names, category names and totals can themselves reveal information. Review what your database structure and your dashboards would disclose before enabling the features.
Google's use of this data. Because the request uses your own API key, it is governed by your agreement with Google rather than ours. On Google's free Gemini API tier, Google may use submitted content to improve their products and human reviewers may read it. Paid tiers restrict this. We recommend a paid key, or leaving the AI features disabled, if your database structure or figures are sensitive. See Google's Gemini API terms and Privacy Policy.
We do not receive, store or process any of the information sent to Google, and we are not responsible for Google's handling of it.
7.How long we keep it
Contact-form emails are kept for as long as needed to handle your enquiry and any resulting relationship, then deleted when no longer required. Server logs are retained by our host for a limited period for security purposes.
8.Your rights
Depending on where you live (for example, under the EU/UK GDPR), you may have the right to:
- access the personal data we hold about you
- ask us to correct or delete it
- object to or restrict how we use it
- request a copy of it in a portable format
- withdraw consent at any time.
To exercise any of these, email hello@lumen-solutions.co and we'll respond within a reasonable time.
9.Security
The Site is served over HTTPS, and we take reasonable technical and organisational measures to protect your information. No method of transmission over the internet is completely secure, so we can't guarantee absolute security.
10.Children
The Site is intended for businesses and is not directed at children under 16. We do not knowingly collect information from children.
11.Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will always reflect the current version.