Privacy Policy

1. Data controller

Data controller:

Massimiliano Melis, operating under the Luter name
Email: hello@getluter.com
Website: https://www.getluter.com

2. Data processed

Luter may process:

• data necessary for registration and authentication;
• email address and essential account information;
• data voluntarily entered into the application;
• tasks, plans, clients and other information managed through Luter;
• technical data necessary for operation and security;
• data obtained through Google and Microsoft integrations authorized by the user.

3. Google integrations

When the user connects a Google account, Luter may access only the data necessary for the authorized features.

Depending on the features used, the following may be processed:

• Gmail data necessary for email features;
• email content and metadata within the limits of the authorized OAuth scopes;
• Google Calendar data necessary for calendar features;
• minimal identifying data for the Google account.

Data obtained through the Google APIs is used exclusively to provide the features requested by the user and in accordance with applicable Google policies.

4. Microsoft integrations

When the user connects a Microsoft account, Luter may access data authorized through Microsoft OAuth and Microsoft Graph.

The following may be processed:

• essential account data;
• Outlook Email data necessary for email features;
• Outlook Calendar data necessary for calendar features.

5. Purposes of processing

Data is processed to:

• create and manage the account;
• enable authentication;
• provide the application's features;
• synchronize the services connected by the user;
• maintain security and proper functioning;
• diagnose technical issues;
• handle support requests;
• comply with any applicable legal obligations.

6. Legal basis

Depending on the processing activity, the legal basis may be:

• performance of the contract or of measures requested by the user;
• consent, where required;
• legitimate interest in security and proper functioning;
• compliance with legal obligations.

7. Third-party services

Luter uses services provided by third parties, including:

• Supabase;
• Vercel;
• Google Cloud / Google Workspace APIs;
• Microsoft Entra / Microsoft Graph.

These parties may process data to the extent necessary to provide their respective services and in accordance with their own terms and policies.

8. Data retention

Data is retained for as long as necessary to provide the service and for any additional period required by law.

If an account is deleted, data is deleted or anonymized within a reasonable time, except for data that must be retained for legal obligations, security, or the protection of rights.

9. Data sharing

Luter does not sell users' personal data.

Data may be disclosed to the technical providers necessary for the service to function, or when required by law.

10. International transfers

Some providers may process data outside the European Economic Area.

Where applicable, such transfers are carried out through the mechanisms provided for under data protection law.

11. Security

Luter adopts reasonable technical and organizational measures to protect data from unauthorized access, loss, alteration, or disclosure.

12. User rights

Where provided for under the GDPR, the user may request:

• access;
• rectification;
• erasure;
• restriction;
• objection;
• portability;
• withdrawal of consent, where applicable.

Requests may be sent to hello@getluter.com.

13. Revoking integrations

The user may disconnect Google or Microsoft integrations through Luter, where available, or by revoking authorization directly from their Google or Microsoft account.

14. Changes

This Privacy Policy may be updated to reflect regulatory, technical, or functional changes.

The updated version will show the date of the last revision.