Terms of Service

1. Subject matter

Lumohub is an online management service for the self-employed and freelancers: invoicing (including e-invoicing via the Peppol network), tracking of expenses and days worked, estimation of VAT, social contributions and taxes, financial steering and assistance features. These terms govern the use of the service, published by Atlas Digital SRL, VAT BE 1033.770.471 (see legal notice).

The service is for professional use only. It is intended for the self-employed and companies, for their business activity: by creating an account, you declare that you act in that capacity, and not as a consumer. The rules that protect consumers, including the right of withdrawal from distance contracts, therefore do not apply.

2. Nature of the service — what Lumohub is not

Lumohub is not an accounting firm or a tax advisor. The amounts calculated and recommendations provided (including the AI assistant) are indicative, based on the data you enter and the public rates in force; they are not personalized advice and do not replace an accredited professional. You remain solely responsible for your declarations.

3. Account

Registration requires a valid email address. You are responsible for the confidentiality of your credentials and for the accuracy of the data entered. Enabling two-factor authentication is recommended.

4. Plans, trial and payment

• The plans, their prices and their features are detailed on the Pricing page.
• The 14-day free trial does not require a bank card and does not automatically convert into a paid subscription.
• Subscriptions, monthly or annual, and monthly options are paid in advance via Stripe. They renew automatically at the end of each period, for the same length, until they are cancelled (section 5). A one-off option is paid once.
• Prices may change; any modification is announced at least 30 days before it takes effect.

5. Cancellation, refunds and account deletion

• You can cancel your subscription at any time from your account. Cancellation takes effect at the end of the period already paid, monthly or annual: the service stays available until then, and the subscription is not renewed.
• No refund is due for the current period, in full or pro rata, whether the subscription is monthly or annual. Likewise, a move to a lower plan takes effect at the next renewal.
• Once the period is over, the account becomes read-only: you can still view and export your data, and a new subscription restores full access. An account that stays without a subscription is then handled as set out in section 8.
• An account deletion request ends the subscription the same way: it is no longer renewed and the current period is not refunded. As soon as you make the request, your sessions are closed and the reception of Peppol invoices stops; the account and all its data are permanently erased 30 days later, even if the paid period is not over. You can cancel the request during that time. To use the paid period to its end, cancel the subscription first and request the deletion afterwards.

6. Non-payment

If a payment fails, the application warns you and Stripe retries the charge according to its retry schedule; the service stays available meanwhile. If the invoice is still unpaid after the last attempt, the account is frozen: your invoices, expenses, contracts and documents can still be viewed and exported, your profile and settings can still be changed, but nothing more can be created or changed in your books. Full access returns as soon as the outstanding invoice is paid or a new subscription is taken out. A frozen account remains subject to the rule of section 8 on accounts without a subscription.

7. Peppol e-invoicing

The sending and receiving of electronic invoices pass through a certified access point (Recommand). Lumohub implements reasonable means to ensure transmission, but cannot be held liable for outages of the Peppol network or of third-party platforms. It is your responsibility to check the status of your submissions in the application.

8. Your data

The data you save remains your property. You can export it in full and request the deletion of your account at any time (permanent erasure after 30 days). An account left without a subscription for more than 2 years is warned by email, then erased the same way. We do not keep your documents on account of YOUR statutory retention duty: export them beforehand. The processing of personal data is described in the privacy policy; for your clients' data, Lumohub acts as your processor, under the annex below.

Imported history: invoices and expenses brought in via the history import (predating your use of Lumohub) are marked “without supporting document” and are excluded from the service's legal archiving guarantee — the retention of the corresponding original documents remains your responsibility.

9. Acceptable use

You undertake not to use the service for unlawful purposes (false invoices, circumvention of tax obligations, compromising the security of the service, unauthorized resale). Any abuse may result in the suspension of the account.

10. Availability and liability

The service is provided “as is”, without any guarantee of absolute continuity. The publisher's liability is limited to the sums paid over the last 12 months and excludes indirect damages as well as the consequences of declarations based on the estimates provided.

11. Modification of the terms

These terms may be updated; users are informed of substantial changes by email or in the application at least 30 days in advance.

12. Applicable law

These terms are governed by Belgian law. Any dispute falls under the jurisdiction of the courts of the judicial district of Brussels.

Annex — Data processing agreement (GDPR, Article 28)

When you record personal data of your clients, your prospects or their contacts in Lumohub, you are the controller of that data and Atlas Digital SRL acts as your processor within the meaning of Article 28 of Regulation (EU) 2016/679 (GDPR). This annex is part of these terms: it is the processing contract required by Article 28(3), and you accept it with them. The data about you, as a user, is covered by the privacy policy.

• Subject matter and duration: the processing serves only to provide you with the service described in section 1, for as long as your account exists, then until the erasure set out below.
• Nature and purpose: hosting and storing that data, displaying it and computing with it to produce your invoices, quotes, contracts, reminders, returns and exports; sending it to your clients when you ask (e-mail, Peppol network); reading the documents you drop in to fill a form (AI features).
• Categories of data: identity and contact details (name, address, e-mail, phone), company and VAT numbers, bank details, the content of invoices, quotes, contracts and reminders (services, amounts, dates, payments), and the documents and notes you attach. Lumohub is not designed for sensitive data (GDPR Article 9): do not record any.
• Data subjects: your clients and prospects who are natural persons, the contact persons of your clients and prospects, and anyone else named in the documents you record.
• Your instructions: Lumohub processes that data only on your documented instructions — these terms and what you do in the service (record, send, export, delete) —, including for a transfer outside the European Union, unless the law requires otherwise, in which case it would inform you before the processing where the law allows. It tells you if it considers that an instruction infringes the GDPR. It does not use that data for its own purposes, does not sell it and does not use it to train AI models.
• Confidentiality: the people authorised to process that data are bound by confidentiality, and access it only to run or secure the service, or to answer a support request of yours.
• Security (GDPR Article 32): hosting in the European Union with Scaleway, encrypted connections (HTTPS), data encrypted at rest by the host, strict separation of data between accounts, hashed passwords, two-factor authentication offered to every account, and administration access restricted to designated accounts protected by two-factor authentication.
• Sub-processors: you authorise Lumohub to use the processors listed in the privacy policy (section 4) that handle that data — hosting, network, e-mail sending, Peppol network, AI features. Lumohub binds them by contract to the same protection obligations and remains liable to you for their compliance. Any addition or replacement is announced to you by e-mail or in the application at least 30 days in advance: you may object in writing, on grounds relating to data protection, and, if no solution is found, cancel your subscription and export your data before the change; in that case only, the part of the paid period still to run is refunded to you pro rata.
• Data subjects' rights: Lumohub helps you answer your clients' requests (access, rectification, erasure, portability…) through the service's features — viewing, correcting, exporting or deleting a record or a document — and, where needed, on request at contact@lumohub.eu. A request that reaches Lumohub directly is passed on to you.
• Data breaches: Lumohub notifies you of any personal data breach affecting that data without undue delay after becoming aware of it, with the information it has (nature, data and persons concerned, likely consequences, measures taken), so that you can meet your own obligations (GDPR Articles 33 and 34). It also gives you the reasonable help you would need for a data protection impact assessment.
• End of the processing: you can export all of your data at any time, in particular before you leave (return). After an account deletion request, it is permanently erased after 30 days: the database, the stored files, and your company at the Peppol access point with the documents exchanged through it. An account left without a subscription for more than 2 years is warned by e-mail, then erased the same way. Only the backup copies and the technical traces some processors keep (sending logs, for example) remain afterwards, until the end of their own retention cycle. Lumohub keeps nothing on account of an obligation of its own.
• Audits and information: Lumohub makes available to you the information needed to demonstrate compliance with these obligations — this annex, the privacy policy, the Security page and, on request, its processors' guarantees. You may have an audit carried out, at your expense, by an auditor bound by confidentiality, with reasonable notice, at most once a year unless there is a data breach.
• Your obligations: you make sure you have a legal basis for the data you record and that you inform the persons concerned, as any controller must.