Privacy Policy

This notice explains which personal data we collect on luminvest.net, why we process it and what rights you have. It is short because the processing is, in fact, minimal: to use the site we only need your email address.

1. Data controller

The processing is carried out jointly by Riccardo Priotto and Simone Gallio, the authors of LuminVest. For any matter concerning personal data you can write to info@luminvest.net.

2. Data we process

• your email address, collected when you register and every time you request a sign-in link;
• the consents you give, today for the newsletter and in future for any alerts on the analyses;
• minimal technical session data, that is the cookies that keep your authenticated session open;
• the details you leave in the form on the «Your process» page, if you choose to write to us about working together: full name, organisation, work email and the optional text of your message;
• the company you pick in the monthly vote, if you vote: it stays linked to your account because the vote is one per person.

To read the site we do not ask for your name, address or financial data: we do not need it. The one exception is the form for collaboration requests, where you are the one leaving us a name and an organisation so that we can reply.

3. Purposes and legal bases

• Providing the service during the beta: creating your account, sending the sign-in link, showing you the analyses you are entitled to read. Legal basis: performance of a contract, art. 6.1.b GDPR.
• Sending the newsletter: only if you have given explicit consent, which you can withdraw at any time without losing access to the site. Legal basis: consent, art. 6.1.a GDPR.
• Replying to collaboration requests sent through the form: handling the request you sent us yourself and any negotiation that follows from it. Legal basis: performance of pre-contractual measures requested by the data subject, art. 6.1.b GDPR. No consent box is needed because the processing is the very thing you asked for; those addresses do not enter any newsletter or marketing communication without separate, distinct consent.
• Monthly vote on the next company to analyse: counting the votes and making sure each account casts only one. Legal basis: performance of a contract, art. 6.1.b GDPR. Results are published in aggregate form only: we show no one who voted for what.
• Compliance with legal obligations, where applicable. Legal basis: art. 6.1.c GDPR.

4. Processors and recipients

To run the site we rely on providers that process the data on our behalf, as processors:

• Supabase, database and authentication, hosted in the European Union;
• Vercel, web hosting;
• Resend, delivery of service emails and of the newsletter;
• GitHub, technical infrastructure of the project.

We do not sell your data and we do not pass it on to third parties for marketing purposes. Where a provider involves a transfer of data outside the European Union, that transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission.

5. Retention

We keep your email address for as long as your account stays active, therefore until you ask for its deletion or withdraw your consent. The consents you give are recorded with date and time, so that we can reconstruct when they were given and when they were withdrawn.

Collaboration requests stay for as long as we need to handle them and to carry on any negotiation that follows: when a request closes with no follow-up, we delete it. Votes stay for as long as that month's poll is available to consult, and in any case no longer than the deletion of your account.

6. Your rights

You have the rights set out in articles 15 to 22 GDPR: access to your data, rectification, erasure, restriction of processing, objection and portability. To exercise them it is enough to write to info@luminvest.net: we reply within the deadlines set by law. If you believe that the processing of your data breaches the rules, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

7. Cookies

The site uses technical cookies only, needed to keep the authentication session. We use no profiling cookies and no third party advertising tools. Your choice between the light and the dark theme stays in your browser (localStorage) and is never sent to our servers.

8. No profiling

We do not profile users and we take no automated decisions about them. The scores we publish assess the companies we analyse, not the people who read the site.

Last updated: 13 August 2026.