Privacy Policy

This notice explains which personal data we collect on luminvest.it, why we process it and what rights you have. It is short because the processing is, in fact, minimal: to use the site we only need your email address.

1. Data controller

The processing is carried out jointly by Riccardo Priotto and Simone Gallio, the authors of LuminVest. For any matter concerning personal data you can write to ricerca@luminvest.it.

2. Data we process

• your email address, collected when you register and every time you request a sign-in link;
• the consents you give, today for the newsletter and in future for any alerts on the analyses;
• minimal technical session data, that is the cookies that keep your authenticated session open.

We do not ask for your name, address, financial data or other personal information: we do not need it.

3. Purposes and legal bases

• Providing the service during the beta: creating your account, sending the sign-in link, showing you the analyses you are entitled to read. Legal basis: performance of a contract, art. 6.1.b GDPR.
• Sending the newsletter: only if you have given explicit consent, which you can withdraw at any time without losing access to the site. Legal basis: consent, art. 6.1.a GDPR.
• Compliance with legal obligations, where applicable. Legal basis: art. 6.1.c GDPR.

4. Processors and recipients

To run the site we rely on providers that process the data on our behalf, as processors:

• Supabase, database and authentication, hosted in the European Union;
• Vercel, web hosting;
• Resend, delivery of service emails and of the newsletter;
• GitHub, technical infrastructure of the project.

We do not sell your data and we do not pass it on to third parties for marketing purposes. Where a provider involves a transfer of data outside the European Union, that transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission.

5. Retention

We keep your email address for as long as your account stays active, therefore until you ask for its deletion or withdraw your consent. The consents you give are recorded with date and time, so that we can reconstruct when they were given and when they were withdrawn.

6. Your rights

You have the rights set out in articles 15 to 22 GDPR: access to your data, rectification, erasure, restriction of processing, objection and portability. To exercise them it is enough to write to ricerca@luminvest.it: we reply within the deadlines set by law. If you believe that the processing of your data breaches the rules, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

7. Cookies

The site uses technical cookies only, needed to keep the authentication session. We use no profiling cookies and no third party advertising tools. Your choice between the light and the dark theme stays in your browser (localStorage) and is never sent to our servers.

8. No profiling

We do not profile users and we take no automated decisions about them. The scores we publish assess the companies we analyse, not the people who read the site.

Last updated: 3 August 2026.