Privacy-first AI development by Luminvaya

Privacy Policy for Luminvaya

This Privacy Policy explains how Luminvaya collects, uses, stores and shares personal data in the course of providing AI software development and business AI integration services. We design processes to minimize data exposure and to keep clients informed about how their information is handled. For questions, contact our office at 83 Marine Parade Central, Singapore, 440083 or call +6582647241.

24-02-2026
Luminvaya, 83 Marine Parade Central, Singapore, 440083. Business ID S5162852A. Phone: +6582647241. Website: givaya.biz.
83 Marine Parade Central, Singapore, 440083
[email protected]

About this policy

Key definitions

This section defines terms used in the policy to ensure clarity about the kinds of information we process and the roles of parties involved in providing our services.

Personal data refers to any information that identifies or can be used to identify an individual, such as names, contact details, professional identifiers, IP addresses linked to an individual, and other similar data points collected in the context of our services.
Processing means any operation performed on personal data including collection, storage, retrieval, alteration, disclosure, analysis, and deletion, whether automated or manual, as part of delivering our AI services and support.
User refers to clients, client representatives, end users of deployed solutions, and any individual who provides information directly to Luminvaya in the course of receiving services or support.
Service refers to Luminvaya's AI software development, integration work, managed AI services, consulting, and any related support or maintenance services delivered to clients.
Cookies are small text files placed on devices to store identifiers and preferences. We use cookies and similar technologies to support functionality, analytics, and security across our web presence.

Data we collect

We collect data necessary to deliver our services, operate our website, manage commercial relationships, and improve our solutions. Collection is limited to what is relevant and proportionate for these purposes.

Sources of data

Data you provide directly

When you engage with Luminvaya or use our contact channels, you may provide the following categories of information:

  • Contact and identity details: names, business email addresses, job titles, company names and billing addresses.
  • Contract and project information: scope documents, project requirements, deliverables, and technical specifications needed to build and integrate AI solutions.
  • Payment and billing details: invoicing data and payment transaction records necessary for billing and business administration.
  • Support and communications: messages, meeting notes, feedback and service requests submitted via email, forms, or phone.
  • Uploaded client data: datasets, sample records, or configuration files supplied by clients for model development and integration (processed under client direction).
  • Consents and preferences: marketing preferences and any consents you provide for specific processing activities.

Automatically collected data

When you visit our website or use services that interact with our systems, we automatically collect certain technical and usage information to maintain operations and improve service quality.

  • Device and browser information, such as device type, operating system, browser version, and screen resolution.
  • Log and usage data, including pages viewed, navigation paths, timestamps, and performance metrics.
  • IP addresses and approximate location derived from network information for security and analytics purposes.
  • Analytics cookies and identifiers used to measure site traffic and feature usage.
  • Crash reports and diagnostic data to help troubleshoot and improve platform stability.
  • Telemetry from managed solutions where clients have enabled monitoring to support performance and reliability.

Data from third parties

We may receive data about you from partners or service providers that enable our operations or help deliver services on our behalf.

  • Cloud and infrastructure providers that host and process data as part of service delivery.
  • Analytics and measurement services used to monitor and improve our digital properties.
  • Payment processors and business services providers for invoicing and reconciliation.

How we use information

Purposes for processing personal data

We process personal data to provide contracted services, maintain relationships, secure systems, and to improve our offerings. Processing is limited to what is necessary for these stated purposes.

  • To deliver and maintain AI software development and integration services, including project implementation and support.
  • To manage contractual relationships, billing, and business administration.
  • To monitor and improve service performance, reliability, and feature usability.
  • To ensure security, detect and respond to incidents, and protect systems from unauthorized access.
  • To comply with legal obligations and respond to lawful requests from regulators or courts.
  • To communicate about projects, service changes, and to provide customer support.
  • To carry out limited research and aggregated analytics to improve models and deployment practices, using anonymized or pseudonymized data where possible.
  • To process marketing and outreach where permitted by applicable law and user preferences.

Legal bases for processing

We rely on appropriate legal grounds to process personal data depending on the context: performance of a contract, legitimate interests, consent, or legal obligations.

Cookies and similar technologies

Our website uses cookies to provide essential functionality, analyze usage patterns, and support secure sign-in. You can manage most cookie preferences through your browser or our site controls.

We use session cookies for basic site operation, persistent cookies for remembering preferences, and analytics cookies to measure traffic and feature engagement.

Cookie categories include: essential (required for site operation), analytics (usage insights), and functional (preferences and accessibility). We avoid using tracking for profiling beyond what is necessary for service operations.

You can manage cookies via your browser settings or the cookie controls on our site. Disabling analytics cookies may limit our ability to improve user experience but will not prevent access to essential functionality.

Full cookie information and controls

When we share data

We share personal data only as needed to deliver services, comply with law, or with your consent. Third-party recipients are contractually required to protect data and use it solely for permitted purposes.

  • Service providers and contractors who perform work on our behalf such as cloud hosting, analytics, and payment processing.
  • Affiliates and partners involved in delivering a joint service under a contract with you.
  • Professional advisors when required for legal, tax, or compliance matters.
  • Buyers or potential buyers in the event Luminvaya undergoes a merger, acquisition, or asset sale, with safeguards to protect personal data.
  • Law enforcement or regulators where disclosure is required or permitted by law.
  • Analytics and monitoring vendors that help us understand and improve system performance, under strict contractual limits.

International data transfers

Data may be processed or stored in locations outside your country, including cloud environments operated by third-party providers. We assess transfer locations and ensure appropriate protections are in place.

Where data is transferred internationally we rely on contractual safeguards, encryption, and industry-standard security measures. Specific transfer mechanisms may include standard contractual clauses and contractual commitments that provide comparable protection.

Storage and retention

Retention policy

We retain personal data only as long as necessary to fulfill the purposes described, to meet contractual obligations, and to comply with legal or regulatory requirements.

Account and client administrative records are retained for the duration of our commercial relationship and for a reasonable period thereafter to support audits and legal obligations. Typical retention after account closure is up to 24 months unless otherwise required by law or agreed with the client.

Support communications and project correspondence are retained to ensure continuity of service and to resolve disputes. Messages are generally retained for 12 months after project completion, unless longer retention is required for compliance or contractual reasons.

Operational logs and telemetry used for security and performance troubleshooting are retained in line with our internal policies, typically up to 36 months, and are aggregated or anonymized when longer-term analysis is required.

Clients may request deletion of their data subject to legal, contractual or technical constraints. Deletion requests are handled promptly while ensuring necessary backups and archival copies are managed according to retention schedules and regulatory obligations.

Security practices

We implement a layered security approach to protect data in transit and at rest. Security measures are regularly reviewed and updated to reflect industry best practices and emerging threats. Operational controls limit access to authorized personnel only.

  • Encryption of data in transit and at rest using modern encrypted standards.
  • Role-based access controls, multi-factor authentication, and least-privilege access for production systems.
  • Regular security assessments, vulnerability scanning, and incident response procedures to reduce risk and respond quickly if an event occurs.

Your privacy rights

Access, correction and deletion requests

You have the right to request access to the personal data we hold about you, ask for corrections, or request deletion where applicable. To exercise these rights, contact us using the details below and we will respond within a reasonable timeframe and as required by applicable law. For project-specific data processed on client direction, we will coordinate with the client who controls that data.

  • Right to access: You may request a copy of personal data we hold about you and information about how it is processed.
  • Right to rectification: You may request correction of inaccurate or incomplete personal data.
  • Right to erasure: You may ask us to delete personal data where processing is no longer necessary or lawful.
  • Right to restriction of processing: You may request limits on how we use your personal data in specific situations.
  • Right to data portability: Where applicable, you can request your personal data in a structured, commonly used format.
  • Right to object: You may object to direct marketing and to processing based on legitimate interests.
  • Right to withdraw consent: If processing is based on consent, you may withdraw consent at any time without affecting prior processing.
  • Right to lodge a complaint: If you believe your rights are not respected, you can file a complaint with the competent supervisory authority.

How to Exercise Your Data Rights

To make a request regarding your personal data, contact Luminvaya through the contact form at givaya.biz/contact or send a written request to our office at 83 Marine Parade Central, Singapore, 440083. Include sufficient details to identify yourself and the request type. We will verify identity before fulfilling requests to protect your data.

[email protected]

We aim to respond to validated requests promptly and typically within 30 days from receipt. Complex requests or requests requiring additional verification may take longer; in those cases we will inform you of the expected timeline.

Data Protection Practices (GDPR and Relevant Laws)

Luminvaya processes personal data in line with applicable data protection laws. Where GDPR or similar frameworks apply, we rely on appropriate legal bases and take measures to protect data subject rights.

  • Lawful basis: consent where users have provided explicit permission for specific processing activities.
  • Contractual necessity: processing required to perform services you have requested from Luminvaya.
  • Legal obligation: processing necessary to comply with statutory or regulatory duties.
  • Vital interests: processing to protect someone’s life or well-being in exceptional circumstances.
  • Public task: processing necessary for tasks carried out in the public interest where applicable.
  • Legitimate interests: processing for our legitimate business interests, balanced against your rights and freedoms.

If you are subject to GDPR and have unresolved concerns after contacting us, you may lodge a complaint with your local supervisory authority. For other jurisdictions, follow the local procedures for data protection complaints.

Other Data We Process

Marketing Communications

We may send service updates and marketing communications about relevant AI solutions, product updates, events, and offers. You will receive such communications only if you opted in where required by law or where we have a legitimate interest and an appropriate right to do so.

You can opt out at any time via the unsubscribe link in marketing messages, via the preferences section on your account, or by contacting us at the postal address listed below or through the contact form on givaya.biz. You may also call +6582647241 to request removal from marketing lists.

Children’s Privacy

Our services are intended for business and professional use and are not directed to children. We do not knowingly collect personal data from children without parental consent. If you believe we have collected data about a minor, contact us so we can take appropriate steps.

Third-Party Links and Services

Our site and services may contain links to third-party websites, platforms and services. Luminvaya is not responsible for third-party privacy practices. Review third-party privacy notices before providing personal information to them.

Updates to This Policy

We may update this privacy information to reflect changes in law, service features, or operational practices. Material changes will be posted on givaya.biz with the effective date. Last updated 24-02-2026.