Terms of use

These terms of use govern registration for and use of the customer area of this website, the download, and the use of the desktop application “SecureGrid” (the “App”). The contracting party is LumeSec Technologies GmbH, Rissach 10, 6092 Birgitz, Austria, FN 679364s (“LumeSec”, “we”).

Our offer is directed exclusively at businesses within the meaning of § 1 of the Austrian Commercial Code (UGB) (“Customer”), not at consumers. The registering person declares that they act for the company stated at registration and are authorised to accept these terms on its behalf.

The Customer’s general terms do not apply, even if we do not object to them.

The contract is concluded when the registering person accepts these terms at registration and confirms their email address. We store the accepted version and the time of acceptance.

We provide free of charge:

• a customer account with sign-in by email link (no password),
• the download of the App for macOS and Windows and of future versions,
• signing in to the App with the customer account, which is required to use the App.

There is no entitlement to particular features, to constant availability of the website or to further development, bug fixes or support. We may change, add or discontinue features. Paid services (such as team features) are subject to separate agreements.

Registration details (name, company, business email address) must be accurate and kept up to date. The account is personal and must not be shared. Anyone with access to the mailbox can sign in; the Customer protects that mailbox accordingly.

We may suspend or delete accounts in case of false details, misuse or breach of these terms.

LumeSec grants the Customer a free, non-exclusive, non-transferable, non-sublicensable and perpetual right to install and use the App for the internal purposes of its business, including by its employees. All other rights in the App remain with LumeSec.

In particular, the Customer may not

• sell, rent, publicly offer or pass on the App or installer files outside its own business,
• remove or alter copyright, trademark or licence notices,
• decompile, disassemble or otherwise reverse engineer the App except where § 40e of the Austrian Copyright Act mandatorily permits it,
• use the App to develop a competing product.

Using the App requires a customer account: each user signs the App in once with their own account, using the same email address as on this website. After that the App also works without a network connection; when the device is online it renews access automatically. After 30 days without any connection a new sign-in is required. Deleting or suspending the account ends the ability to use the App.

The App contains, or downloads on explicit request, open-source components and third-party models, including Rampart (CC-BY-4.0), GLiNER and Privacy Filter (each Apache-2.0) and the Terax interface (Apache-2.0). Their licence terms take precedence for those components; the notices are available in the App. Models are downloaded from Hugging Face only at the Customer’s request and verified against pinned checksums.

SecureGrid detects personal and confidential data automatically and replaces it with placeholders. Detection is not complete and may miss values or mark them in error. SecureGrid supports a review but does not replace it: the Customer checks the redacted text before sharing it.

The Customer remains solely responsible for the lawfulness of processing the data it handles with the App and for its use of third-party AI services, including compliance with data protection, professional and confidentiality obligations. SecureGrid is neither legal nor data protection advice. Pseudonymisation with a local mapping is not anonymisation.

The App processes texts, documents and the mapping between placeholders and real values exclusively on the Customer’s device. When signing in, the App transmits sign-in data only, never content. LumeSec receives none of the content and is neither controller nor processor for it. Processing of account and website data is described in the privacy policy.

If the Customer has consented at registration or in the account, LumeSec sends information about SecureGrid and about other LumeSec products and services to the email address stored in the account. Consent is optional and not required for the account or the download. The Customer may withdraw it at any time, free of charge: in the account, via the unsubscribe link in every such email, or by email to hello@lumesec.ai. LumeSec does not pass the Customer’s contact details on to third parties, except to processors that send emails on LumeSec’s behalf.

The App and the website are provided free of charge and “as is”. To the extent permitted by law, any warranty is excluded, in particular that detection is complete or error-free or that the App is fit for a particular purpose.

LumeSec is liable only for intent and gross negligence. Liability for slight negligence, lost profit, consequential and financial loss, loss of data, and damage arising from data that was not detected or was shared is excluded. Liability for personal injury and under the Austrian Product Liability Act remains unaffected.

By accepting these terms, the Customer grants LumeSec, free of charge, the non-exclusive right to name the Customer’s company name and show its logo (word and figurative mark) as a user of SecureGrid — for example “Teams at [company] use SecureGrid”. Naming is permitted on the SecureGrid and LumeSec websites (lumesec.ai), in presentations, sales and press material and in LumeSec’s social media posts.

The logo is shown unaltered, in its original colours or in one colour; LumeSec may use the Customer’s publicly used logo or ask the Customer for a file. The reference only states that the Customer uses SecureGrid. It contains no endorsements or quotes by the Customer and no information about its usage, content or data; for those we ask separately. Individuals are not named.

The registering person warrants that they are authorised to grant this right on behalf of the company. The right continues after this contract ends until the Customer revokes it. The Customer may revoke the reference at any time without giving reasons, informally by email to hello@lumesec.ai. Revocation takes effect for the future and does not affect the use of SecureGrid. We remove the reference from our websites and current digital materials within 30 days; material already printed or published need not be recalled.

The contract runs for an indefinite period. The Customer may delete its account at any time in the customer account under “Account” or have it deleted by email to hello@lumesec.ai. LumeSec may terminate with 30 days’ notice by email, and without notice for good cause — in particular breaches of section 4.

We may change these terms with effect for the future. We announce changes by email at least four weeks before they take effect. If the Customer does not object by then, the changes are deemed accepted; we point this out in the announcement. In case of objection, either party may end the contract when the changes take effect.

Sign-in links are personal, short-lived and single-use. The Customer does not forward them and informs us without delay if it suspects misuse of its account.

Austrian law applies, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. Exclusive place of jurisdiction is the court competent for Innsbruck; LumeSec may also sue the Customer at its seat.

Declarations may be made by email. Should a provision be invalid, the remainder stays valid and is replaced by the valid provision closest to its purpose. The German version is authoritative; the English one is a translation.