Your data, your call.

Your workspace contains the sources you’ve captured — docs, documents, transcripts, calendar events, and metadata from any connected accounts. We also hold account-level information like your email, sign-in method, and the workspaces you belong to.

We don’t hold what you haven’t captured. Lumi only knows what you’ve told it. Connected sources only send the scopes you authorize at connect time.

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix anything inaccurate or incomplete.
• Deletion — ask us to remove your workspace and personal data from our systems.
• Portability — receive an export of your workspace in a structured, machine- readable format.
• Objection and restriction — limit or object to specific processing activities.

Email privacy@tentus.io from the address tied to your workspace. We’ll confirm receipt within two business days and complete the request within thirty days — usually much faster.

For deletion requests, we’ll send a confirmation before anything is removed. Once confirmed, your workspace and personal data are permanently deleted; backups are purged on a rolling thirty-day cycle.

Active workspaces are retained while your account is open. Cancelled subscriptions remain dormant for sixty days, then their workspaces are queued for deletion unless you reactivate.

Server logs and operational telemetry are kept for ninety days for security and reliability investigations. Aggregated, non-identifying metrics may be retained longer for product analytics.

tentus is operated by elmt studio. Our Data Protection Officer can be reached at privacy@tentus.io.

If you’re in the EU or UK and feel your concern hasn’t been addressed, you have the right to lodge a complaint with your local supervisory authority. We’d rather hear from you first and fix it directly.