Privacy notice

Who is responsible for your data

The data controller is Promptica di Lorenzo Talamucci, a sole proprietorship registered in Italy (VAT IT02656770977), operating the Lunovant Foundry brand. Contact: info@lunovant.com.

No Data Protection Officer has been appointed, because the law does not require one for this activity. Any question about your data goes to the address above.

This notice covers the whole product: the Ideas form and the form for companies on this website, and the Lunovant app that people use once they join.

What we collect when you send an idea

Everything you type into the Ideas form: your name, your email, the problem, who it is for, the solution, why you, and the market. We also keep the time you sent it, whether you confirmed your email, the status of the idea (received, in review, not now, chosen) with the note written by the person who decided, and a record of each email we send you about it.

To confirm your email and to show you the status of your idea we generate two random links: a confirmation link that expires after seven days, and a private status link. For abuse prevention only, we keep short-lived counters tied to your IP address and to a hashed form of your email.

What we collect when a company writes to us

Everything typed into the form for companies: the company name, what it sells, who buys it, what it needs on the ground, the first mission it would ask for, an optional link and the email to answer. For abuse prevention only, we keep a short-lived counter tied to the IP address.

What we collect once you have an account

Your account: the email address you sign in with, the name you choose, an optional short bio you write yourself, and the sign-in history kept by our authentication provider. Passwords are never visible to us: the provider stores them hashed.

Your missions: the ones you take, when you took them, the proof you deliver (the text you write, any link you paste and any photo you upload), and the outcome of each check with the note written by the person who made it.

Your points: those you receive for each approved mission, your place on the leaderboard, the history of every change with the reason written by the person who made it, and a record of each email we send you (type of message, subject, date, whether it went out).

Other people in the same start-up can see the name you chose, your bio and your level. They never see your email address or your proof. Companies see the missions done for them, never who did them.

Why we process it and on what legal basis

To read and decide on an idea you chose to send, and to write to you about it (Article 6(1)(b) GDPR, steps taken at your request).

To answer a company that asks us for missions (Article 6(1)(b) GDPR, steps taken at its request).

To run the app for you once you join: your account, missions, proof and points exist because you asked to take part, and nothing works without them (Article 6(1)(b) GDPR).

To keep the service safe and prevent abuse (rate limiting, duplicate detection, private storage of uploaded files) and to understand how the pages perform, using aggregated analytics without cookies (Article 6(1)(f) GDPR, our legitimate interest in running a reliable service).

How long we keep it

Ideas are kept while we read and decide on them. An idea we do not pick right now stays in our archive so that we can come back to it if the timing changes; you can ask us to delete it at any time by writing to info@lunovant.com, and we delete the idea and its history. Ideas whose email was never confirmed can be deleted by us at any time.

Requests from companies are kept while we work together, and for at most 24 months after the last contact.

Account data, proof, points and the record of emails we sent you are kept while your account exists. If you ask us to close it, we delete the account and everything attached to it, including the photos you uploaded. Deletion is permanent.

Applications sent through the old website form, switched off on 14 October 2026, are kept for at most 24 months from submission and then deleted; you can ask us to delete yours sooner by writing to info@lunovant.com.

Encrypted backups of the database are kept for 30 days, so data you asked us to delete can survive in a backup for up to that long before it is overwritten.

Who can see it

The founder and the people who, on behalf of Promptica, read ideas and requests and check mission proof. We use service providers that process data on our instructions: hosting and analytics (Vercel), database, authentication and private file storage (Supabase, hosted in the European Union, eu-west-1), transactional email (Resend), and encrypted database backups held as private build artifacts (GitHub). Backups are encrypted before they leave our infrastructure and the key is not held by the backup provider.

Some of these providers may process data outside the European Economic Area under the safeguards set out in Chapter V of the GDPR (adequacy decisions or standard contractual clauses).

We do not sell your data and we do not share it with third parties for their own marketing.

Cookies

Technical cookies only, and no consent banner because none of them are used for advertising or cross-site tracking: in the app, the session cookies that keep you signed in. Removing them signs you out; nothing else. On the website, closing the cookie notice is remembered only in your own browser.

Automated evaluation

AI tools may help us summarise or sort ideas and requests. No decision that affects you is taken solely by a machine: every decision on an idea, every check of a piece of proof and every point is decided by a person, and the reason is written down.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, portability of the data you provided, and you can object to processing based on legitimate interest. Write to info@lunovant.com; we answer within one month, as the law requires.

You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the country where you live.

Changes

If this notice changes in a way that matters to you, we will publish the new version on this page with a new date.