AuditLumo

Privacy policy

Last updated: 07.10.2026

1. Controller

AuditLumo, Inc.
2327 EUREKA ST, ANCHORAGE, AK 99503, USA
Email: info@auditlumo.com

2. Data collected and purposes

We process personal data solely for the purpose of operating the AuditLumo platform:

  • Account data: Name, email address, agency name to provide the service
  • Usage data: Log data, audit results, project information to operate the platform
  • Payment data: Processed exclusively by Stripe. We store no card details.
  • Technical data: IP addresses and browser information for security and debugging

Anonymous free website check

No account is required for the free website check. We process the URL or domain you submit and limited lasting check metadata, such as technical request and processing information. These details may be retained as service records. The check results themselves are never saved and are held only temporarily for delivery.

To limit abuse, we use a signed cookie valid for two days and hashed abuse-control signals. This control information is stored temporarily and deleted no later than two days after collection. Checks may be subject to daily and technical rate limits.

To perform a check, our systems fetch the publicly accessible page you provide and take its robots.txt rules into account. For AI-assisted analysis, we make two AI requests to DataForSEO. The submitted URL and publicly accessible page content may be transmitted to and processed by that provider. Do not submit confidential or non-public URLs.

You may request access, correction, erasure, restriction of processing, or object to processing of your personal data. Because the check is anonymous and does not require an account, we may not be able to associate a request with a specific check. For enquiries and manual deletion requests, contact info@auditlumo.com.

3. Legal basis

Where GDPR applies, processing is based on:

  • Art. 6(1)(b) GDPR (performance of contract)
  • Art. 6(1)(f) GDPR (legitimate interest)
  • Art. 6(1)(a) GDPR (consent, where applicable)

4. Hosting location and data transfers

The AuditLumo platform is hosted exclusively in the European Union (EU region). All server data, including user data, audit results, and database data, is stored and processed on servers within the EU. No platform data is transferred to third countries unless explicitly stated below.

5. Third-party integrations (Google services)

AuditLumo offers optional integrations with Google services: Google Analytics 4, Google Search Console and Google Ads. These integrations are voluntary and activated by the user in the project settings.

When an integration is active, AuditLumo reads selected performance data (e.g. clicks, impressions, sessions) from the user's Google account in read-only mode and displays it in the project dashboard. Raw data remains in the user's Google account. AuditLumo does not permanently store full Google raw datasets. Use of Google services is subject to Google's privacy policy (google.com/privacy).

Users can disconnect Google integrations at any time in the project settings. Once disconnected, no further data is retrieved from the Google account.

6. Sub-processors

We engage the following service providers that process personal data on our behalf:

  • Cloud Infrastructure Provider (EU region data center): Hosting and infrastructure; data stored exclusively in the EU; Data Processing Agreement pursuant to Art. 28 GDPR
  • Stripe, Inc. (USA): Payment processing; EU Standard Contractual Clauses
  • Resend, Inc. (USA): Email delivery; EU Standard Contractual Clauses
  • OpenAI, Inc. (USA): AI summaries and AI chat assistant (paid plans); Data Processing Agreement, no training data use via API
  • Google LLC (USA): (a) Optional platform integrations (GA4, Search Console, Google Ads) – only when activated by the user; (b) Google Tag Manager and Google Analytics 4 on the marketing website (auditlumo.com); EU Standard Contractual Clauses

7. Retention and deletion

Data is retained for as long as the account is active. After account cancellation, personal data is deleted within 30 days unless legal retention obligations apply (including applicable tax and accounting retention periods).

8. Your rights

Where GDPR applies, you have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

To exercise your rights, please contact: info@auditlumo.com

9. Right to lodge a complaint

You may lodge a complaint with the Delaware Department of Justice or the competent data protection authority in your place of residence, as applicable.

10. Cookies and tracking

This local preview uses no marketing trackers. Previous analytics and consent accounts have been removed. Any future activation requires configuration of AuditLumo accounts and an update to this notice.

Delaware privacy rights

Where the Delaware Personal Data Privacy Act applies, eligible consumers may request access, correction, deletion and portability, and opt out of sale, targeted advertising and certain profiling. Send requests or appeals to info@auditlumo.com. We respond within the applicable statutory deadlines, generally 45 days for requests (with a permitted extension where necessary) and 60 days for appeals. If an appeal is denied, you may contact the Delaware Department of Justice at privacy@delaware.gov.