Data processing
Last updated October 28, 2026.
01Scope
Lumen Tool is a browser-based lighting workspace that runs mainly in the member's own browser. A Lumen Tool account uses an email address and a subscription handled by Stripe. Lumen Tool receives setup data, notes and optional photos when a member explicitly saves or uploads them to the Archive.
This page explains what information is stored, which providers are involved and how long data is kept.
02Types of data
Technical connection data such as browser type, device information, IP address, timestamps and server logs. The connection address is also used server-side to choose a broad pricing market/country; it is not used for precise location tracking.
Lighting setups and project files saved locally by the user. Local workspace state, interface preferences and drafts can also be stored in the user's browser and are not sent to Lumen Tool unless the user chooses a feature that saves them to the Archive.
Setups, comparisons, previews, names, notes, collections, favorites, shoot dates and reference information saved to the Archive. These are linked to the member's account. Optional reference, result and setup photos are processed by the application server and kept privately in OVHcloud Object Storage in the United States as resized images and thumbnails. Original uploads and embedded image metadata are not retained. A complete Archive backup is sent only when the member downloads it; a backup uploaded for restore is checked and processed without being kept as a separate cloud file.
Account data for Lumen Tool: the email address, the state of the subscription (running, ending, ended), the plan, the currency, the renewal or end date, and the payment provider's customer number. A count of recent sign-in attempts per network address is kept briefly to protect against abuse.
Payment data is entered by the customer at Stripe and held there: name, billing address, card details, VAT or tax number where given, and invoices. Card details never reach Lumen Tool.
Contact-form data includes the name, email address, subject and message a visitor submits. It is sent through Resend to Lumen Tool's mailbox so the message can be answered.
Knowledge base search terms, result counts and timestamps are recorded to improve help articles. These records are not linked to an account, browser session or network address and are never sent to Google Analytics.
03Service providers
OVHcloud (OVH US LLC) hosts the Lumen Tool application on infrastructure in the United States.
Stripe handles payment and subscriptions for Lumen Tool. It receives the customer's own payment and billing details on its own payment page, keeps the invoices, and tells Lumen Tool which account has a running subscription. Stripe is also the customer's own place to change or cancel the subscription.
Resend delivers account mail for Lumen Tool, such as the sign-in code and the note that a subscription has ended.
Google Analytics 4 provides website statistics. Privacy & cookies explains the measurements and how to disable them.
tawk.to provides the live chat. Its chat script loads with the website pages. Visitor IP tracking is disabled, so IP addresses are not stored. tawk.to receives the current page, browser and device type and the visitor's country, and uses its own cookies and browser storage to keep a chat going and recognize returning visitors. Names, email addresses and messages are added only when a visitor enters them in the chat. tawk.to stores this data in Google data centers in the United States, and chats remain until they are deleted.
The in-browser face-reading feature in Reference Lab analyzes the image on the visitor's own device without uploading it. Its MediaPipe code, model and WebAssembly files are served by Lumen Tool itself. A portrait taken into the Lighting Simulator stays in the browser for that tab's visit. Saving a new Archive item while that portrait is active uploads it with the item automatically. Photos added directly to the Archive are uploaded when the member chooses them. Archive photo uploads are processed by the application server and stored in OVHcloud Object Storage, with account ownership checks and temporary image access links.
These providers process information for their respective services. Stripe also retains billing records to meet its own legal obligations.
04Security
Lumen Tool uses reasonable technical and organizational measures, including encrypted connections, secure hosting and strictly limited access to the live servers.
No online service can guarantee complete security, but Lumen Tool is designed around minimal data collection. Lumen Tool does not store account passwords: sign-in uses a one-time code or link sent by email.
05Where data is processed
Lumen Tool is hosted on OVHcloud servers in the United States. Website requests and technical connection data are processed there, along with account data and content saved to the Archive. This applies to visitors worldwide. Stripe handles payment data and Resend handles email data as described above. Lumen Tool uses applicable data processing agreements and Standard Contractual Clauses with its providers.
06Retention
Technical logs and security records are kept only as long as needed to run and protect the website. Knowledge base searches expire after 180 days. Sign-in codes and links expire after 20 minutes. Signed-in sessions expire after 90 days without use and at most one year after sign-in. Signing out or deleting the account ends the session. Records used to limit repeated sign-in attempts are kept only briefly.
Account records and active Archive items are kept while the account exists. When a subscription ends, the account and its Archive are kept for 30 more days, with a reminder email three days before, and then removed automatically and completely, recovery copies included. A member can remove individual Archive items. Recovery copies of removed or replaced Archive photos may remain for up to 14 days; deleting the account removes that account's recovery photos directly. Invoices and payment records held by Stripe are kept as long as tax and accounting law requires.
07Changes to this page
Lumen Tool may update this Data processing page as the product, infrastructure or legal requirements develop. The latest version will be published here, and the date above shows when it was last changed.
08Contact
For questions about data processing or security, contact franck@lumentool.com.
Lumen Tool is operated by Bit Blurry Studio, registered with the Dutch Chamber of Commerce under number 68341784.