Privacy

1. Who we are

Lemu Lab is an AI research and product laboratory. This policy covers the public parent website at lemu-lab.com, including its case and eval pages.

This website is operated by the Lemu Lab business — the brand of a Portuguese sole trader (empresário em nome individual) who is the provider of lemu-lab.com and its subdomains. Privacy requests can be sent to [email protected].

2. What data we collect

This static website does not include account creation, payments, comments, or contact forms. We may receive:

• Technical server logs generated by Cloudflare Pages, such as IP address, user agent, request URL, and timestamp.
• Information you voluntarily send by email, including your name, email address, organisation, and message content.
• Basic interaction metadata if you follow external links to Lemu product subdomains or LinkedIn.

3. Why we process it

• Website security and delivery: to serve pages, prevent abuse, and keep the website available.
• Communication: to reply when you contact us.
• Legitimate interest: to understand operational issues and protect the lab's digital infrastructure.
• Legal obligation: where retention or disclosure is required by applicable law.

4. Cookies and analytics

The parent website does not use third-party analytics cookies. It is deployed without Google Analytics or any third-party tracking script; only strictly necessary cookies (set by the hosting infrastructure, Cloudflare, to deliver and secure the site) may be used. We do not use advertising or cross-site profiling pixels on this website.

5. Processors and transfers

The site is hosted on Cloudflare Pages. Cloudflare may process technical request data to deliver and secure the website. Google Ireland Limited no longer processes analytics data for this website (Google Analytics removed 2026-09-13). Other processors may be used only when needed for communication, security, or legal administration.

If data is transferred outside the European Economic Area, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

6. Retention

We keep personal data only for as long as needed for the purpose collected, unless a longer period is required by law. Email correspondence is retained while the relationship or request remains active and then periodically reviewed.

7. Your rights

Under the GDPR, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable. To exercise these rights, contact [email protected].

You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD: www.cnpd.pt.