Data Processing Addendum

Version 1.0, in effect from 2026-06-01.

This addendum forms part of the terms of service and applies where our handling of personal data on your behalf is in scope.

Scope, and what is outside it

The engine runs entirely inside your own infrastructure and makes no network calls. Documents you process with it never reach us and cannot, so there is no processing relationship to describe for the SDK.

What is in scope is the website and the portal: the account, order, licence, download and support records described in the privacy policy.

Roles

For your own account and order data we are the controller, because we decide what is needed to sell and support a licence.

Where you upload material to a support ticket that contains personal data of your own users, you are the controller and we process it on your instructions, for the sole purpose of answering that ticket.

Our obligations

We process only on documented instructions; we keep staff bound to confidentiality; we apply the security measures described in the privacy policy; we tell you without undue delay if there is a breach affecting your data; and we delete or return the material at the end of the engagement, subject to the statutory retention that applies to invoices.

Sub-processors

Payment processing and outbound email are sub-processed. The current list is published, and this addendum is versioned, so a change to it is a new version at a new address rather than an edit nobody sees.

Operator

Lumas Softech
705, Alif Apartment
Sarkhej-Makraba Road, Sarkhej
Ahmedabad 382210, Gujarat
India
support@lumaspdf.com · Contact page

Versions

Acceptance is recorded against a version number, so every version stays readable at its own address for as long as the record does.