Your text.
Your device.

Controller and contact

Data controller: Riccardo Sparacino
Contact phone: +39 371 140 0149
Privacy email: sparacinoriccardo@gmail.com

Website delivery

Serving this website involves ordinary connection information, including an IP address, at the hosting and network providers. The application does not store individual page visits, conversations or prompt text on the server. Operational or network-error logs can contain technical connection details. The website runs on the operator’s machine; Register.it provides existing domain/DNS and email services.

Local AI and model downloads

Pressing Load local model requests public model files from Hugging Face and its download infrastructure. Those providers receive ordinary request metadata, such as your IP address and the requested model. The selected model and pinned revision are shown in the workspace. Runtime files are served by this website. No model weights are requested until you choose to load a model.

Your input and model output are processed on your device inside the browser. There is no server prompt endpoint or cloud inference fallback in this preview. The inference worker permits model/runtime fetches while loading and blocks its fetch calls afterwards. Its activity list is application diagnostics, not an independent network audit. Model licensing and provider arrangements still require the operator’s review before a commercial launch.

Documents, spreadsheets and presentations

Office files are opened and generated inside your browser. The basic editors handle text, cells and simple slide layouts; there is no file-upload endpoint for these documents. Workspace items stay in tab memory unless you explicitly choose Save on this device, which writes only the ownlumo.workspace.v1 localStorage key in this browser. This is necessary storage for the save feature you request, not analytics. Exporting a backup creates a file you control. Browser data can be lost or evicted; keep your own backup. The workspace deletion control removes only that key and preserves tab contents and unrelated site data.

When you select an AI action, the requested text passes to a same-origin embedded AI Studio through browser messages. A reviewed result can return as a separate draft. Text is not placed in a URL, uploaded to the operator, or sent to a cloud inference service. The on-device model may still make mistakes. Basic Office import does not execute macros, external links or supplied scripts.

Requested product enquiries

The optional questions form deliberately sends the name, reply email, optional company, topic and message you choose to provide to the operator’s private server queue. It does not attach your local files or AI conversations. Its purpose is to handle the request you initiate; pre-contractual requests are handled under Article 6(1)(b) GDPR and ordinary product feedback under the operator’s legitimate interest in responding under Article 6(1)(f). The privacy checkbox records notice acknowledgement and your request, not newsletter consent. Fields marked required are needed to handle and reply to the enquiry; you may use the workspace without submitting them. No marketing list or unrelated use is enabled.

Messages, internal reply drafts and delivery-state metadata expire after 90 days with daily maintenance. Scoped local enquiry backups expire after 30 days, so erasure can persist in an older backup until that expiry. The operator and authorised maintenance assistant can review the private queue; requested replies pass through the existing Register.it SMTP/mailbox infrastructure. SMTP acceptance is not proof of recipient delivery or reading. This website does not make automated decisions about eligibility or other significant outcomes, profile visitors, or send unsolicited marketing. Requests for rights can use the controller contact above. Provider arrangements and any relevant international-transfer assessment remain organisational tasks; no unverified transfer safeguard is invented here.

Browser storage and deletion

Conversations exist in tab memory. New session clears the displayed conversation and application history; reloading closes that session. This is not a promise of secure erasure of all device memory. Model and tokenizer files may remain in the browser’s transformers-cache until the browser evicts them or you use Delete this model’s cached files in the workspace diagnostics. That control targets only the selected model and pinned revision, preserving other models and site data. Downloaded weights are not personal conversation history.

The essential ol_privacy cookie remembers acknowledgement of this notice for up to six months, with no unique visitor ID. It is set after your choice, using SameSite=Lax and Secure on HTTPS. There are no optional usage statistics, advertising cookies, third-party fonts, social embeds or tracking pixels. Consent controls from the retired research pilot do not enable analytics here.

Links, correspondence and your rights

External source/licence links open separate sites at your request. Voluntary email passes through the existing mailbox provider and is used to respond to your request; no marketing list is active. Do not email passwords or unnecessary identity documents. Correspondence is normally reviewed after closure, within 12 months unless duties require longer retention. Operational logs and existing scoped local backups follow the documented 30-day maintenance policy; archived financial records are handled separately.

Use the controller email shown above for relevant access, correction, erasure, restriction, objection or portability requests. The service cannot recover a conversation that was never sent to its server. Requests and any verification must be proportionate. You may complain to your supervisory authority, including the Italian Garante.

Current limits

Controller status and contact details are shown above. Organisational/provider review still requires completion. No signup, paid subscription or payment service is active. This engineering implementation and notice do not certify complete GDPR compliance. Offline reopening and universal hardware compatibility are not guaranteed.

Updated 17 October 2026. The existing ContoKit mailbox remains the contact while Ownlumo is set up.