Privacy policy

1. Who we are

Alumo is a service of WE HUMAN, MB, Aukštaičių g. 16, LT-11342 Vilnius, Lithuania. We are the controller of the personal data described here.

Questions or requests: info@alumo.lt

2. What we collect

• When you send a tender: company, name, e-mail, phone if given, your comment, the files you upload and the plan you picked.
• With the tender we also note the page language, the page you came from and the campaign tags in the link (utm), so we know how you found us.
• Your IP address, briefly, to stop spam: we accept only a few submissions an hour from one address.
• E-mails you send us and our replies.
• Only if you accept cookies: pages visited, buttons clicked, device and browser type and approximate location, through Google Analytics.

Drawings and past proposals are mostly business data. They can still contain names or contact details of people, such as an architect on a title block. We protect those as personal data too.

3. Why we use it

• To prepare your proposal and run the pilot or plan you asked for. Basis: steps before a contract and the contract itself (GDPR Art. 6(1)(b)).
• To reply to you and follow up on your tender. Basis: our legitimate interest in answering enquiries (Art. 6(1)(f)).
• To keep the site safe and free of spam. Basis: legitimate interest (Art. 6(1)(f)).
• To measure which pages work. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To keep invoices and accounting records. Basis: legal obligation (Art. 6(1)(c)).

We do not sell data, and we send no newsletters unless you ask for them.

4. How we use AI

Alumo uses general-purpose AI models from Anthropic (Claude) and, for some tasks, OpenAI. They read drawings and schedules, pick out positions, sizes and notes, and draft prices from your own past proposals.

• A person checks every result. Our estimator reviews every position before a proposal is sent.
• No automated decisions about people. AI works on drawings and prices. It does not assess, score or profile anyone (GDPR Art. 22).
• Not used for training. Our AI providers do not train their models on data sent through their business APIs.
• Your prices stay yours. Your past proposals are kept in your own workspace and never used to price another company’s work.
• Open about limits. AI can misread a drawing. Figures we are unsure of are marked for review, and you can always ask how a price was reached.

Under the EU Artificial Intelligence Act this use is neither prohibited nor high-risk. We still say plainly where AI is involved and keep a person responsible for every result.

The chat on this site ("Ask a question") sends your messages to Anthropic's Claude model, which writes an answer from the content of this website. The chat says that it is an AI assistant, and its answers can be wrong: for anything binding, such as the price of a project, our estimators answer.

We keep chat conversations without your name, IP address or cookies: only a random conversation number, the page, the language and the messages, with e-mail addresses and phone numbers masked. We read them to improve our answers and FAQ, and delete them after 180 days. Please do not share personal data in the chat.

5. Who we share it with

Only with service providers that process data for us under a data processing agreement:

• Hostinger: hosting of this website.
• Railway: hosting of the Alumo application.
• Supabase: database and sign-in.
• Cloudflare (R2): storage of uploaded files.
• Anthropic and OpenAI: the AI models that read drawings.
• Google Ireland: Google Analytics, only if you accept cookies.

Some of these providers are based in the United States. Transfers outside the EEA rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

We give data to authorities only when the law requires it.

6. How long we keep it

• Files uploaded on this website: removed as soon as the Alumo application has copied them, and in any case within 14 days.
• Tenders, proposals and contact details: while we work together and up to 24 months after our last contact, unless you ask us to delete them sooner.
• Invoices and accounting records: 10 years, as Lithuanian law requires.
• Analytics data: no longer than 14 months.

7. Cookies and browser storage

Google Analytics sets no cookies until you click Accept. Until then Google receives only cookieless signals with no identifier that could recognise you (Google Consent Mode).

You can change your choice at any time.

8. Your rights

You can ask to see, correct, delete or move your data, to limit how we use it, or object to it. Where we rely on consent, you can withdraw it at any time. Write to info@alumo.lt and we will reply within one month.

You can also complain to the State Data Protection Inspectorate (VDAI), vdai.lrv.lt.

9. Security

Everything travels over HTTPS. Uploaded files sit behind private, random links until they are moved. Each company’s data lives in its own workspace, and only the people working on your tender can open it.

10. Changes

When this policy changes, we update the date at the top. We tell our customers by e-mail about significant changes to how their data is used.