Privacy Policy

What Luppa processes

Public guidance prompts, optional municipality context, the conversation context needed to answer them, and source results from public legal and municipal guidance sources.

The public chat website uses an anonymous browser token and IP-derived request signals for combined rate limiting and abuse prevention.

Basic technical request information may be processed to operate, secure, debug, and monitor the public chat and MCP server.

What Luppa does not ask for

Luppa does not ask for account connection, exact address, property identifier, personal identity data, drawings, credentials, or private permit application details in the public guidance app.

If you include personal or sensitive information in a prompt, it may be processed only as part of handling that prompt.

How information is used

Information is used to provide public, source-backed building guidance, distinguish national law from municipal guidance, and explain practical next steps.

Luppa is designed to return only information needed for public guidance and to avoid unnecessary personal identifiers in tool responses.

Raw prompt logging is avoided by default; operational monitoring should focus on status, errors, latency, rate-limit events, and token/cost metadata rather than personal prompt content.

OpenAI and service providers

The public chat website calls OpenAI server-side to generate an answer and may use OpenAI-managed response state so follow-up questions can continue the conversation without sending the full visible transcript back from the browser.

When you use Luppa in ChatGPT, OpenAI processes your interaction under its own terms and privacy policy. Luppa receives MCP requests needed to provide the app response.

Questions about this policy can be sent to support@luppa.fi.