Privacy Policy
Last updated: 15 September 2026
This Privacy Policy explains how Luka AI Studio handles personal data when you visit our website or submit a project inquiry.
1. Who is responsible for your data?
Luka AI Studio, Netherlands, is responsible for the personal data described in this policy. Contact: lukaaistudio@gmail.com.
2. What personal data do we collect?
When you submit our project form, we may collect your name, email address, company name, phone number, website address, requested service, budget range, timeline, project description, consent status, and information you voluntarily include in your message.
3. Why do we use this data?
We use inquiry data to receive and assess your request, communicate with you, prepare a possible proposal or next step, provide requested services, protect our website and systems, and keep appropriate business records.
4. Legal grounds
Depending on the situation, we process personal data because you asked us to take steps before entering into a contract, because processing is necessary to perform a contract, because we have a legitimate interest in responding to and administering genuine business inquiries, or because you have given consent where consent is required.
5. Service providers
We use third-party service providers to operate the website and inquiry process. These currently include Render for website/backend hosting, Supabase for database storage, Resend for transactional email delivery, and OpenAI for AI-assistant response generation. These providers process data on our behalf as needed to provide their services and may use subprocessors under their own data-processing terms.
AI assistant
Our website may provide an AI-powered assistant to answer questions about Luka AI Studio services and help visitors clarify project needs. Messages sent to the assistant may be processed by OpenAI to generate a response. Please do not submit passwords, API keys, payment-card details, government identification numbers or other sensitive information through the assistant. Important project, pricing and contractual decisions are reviewed by a human.
6. International data transfers
Some service providers or their subprocessors may process personal data outside the European Economic Area. Where this happens, we rely on the safeguards made available by the relevant provider and required by applicable data-protection law.
7. How long do we keep inquiry data?
We keep project-inquiry data only for as long as reasonably necessary to respond, follow up, establish a client relationship, meet legal obligations, or resolve disputes. We periodically review inquiry data and delete information that is no longer needed. If an inquiry becomes a client relationship, some records may need to be retained for longer where Dutch law requires it.
8. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No internet-based system can be guaranteed to be completely secure.
9. Your privacy rights
Subject to the GDPR and applicable law, you may have rights to access, correct or delete your personal data, restrict or object to certain processing, receive certain data in a portable format, and withdraw consent where processing is based on consent. Withdrawing consent does not affect processing that was lawful before withdrawal.
To exercise a privacy right, email lukaaistudio@gmail.com. We may need to verify your identity before acting on a request.
10. Complaints
If you have a concern, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. Cookies and analytics
At the time of this policy, Luka AI Studio does not intentionally use advertising or analytics cookies on this website. If we introduce non-essential cookies or tracking technologies later, we will update this policy and implement any consent mechanism required by law.
12. Changes to this policy
We may update this Privacy Policy when our services, providers, or legal obligations change. The latest version will be published on this page with its updated date.