Privacy Notice: Lumo AI Connector (MCP)
Last updated: October 19, 2026
This notice covers the Lumo by HorusBI connector, which lets Claude (Anthropic) and ChatGPT (OpenAI) read business data from a Lumo account through the Model Context Protocol (MCP), at https://dataviz.horusbi.com.br/mcp. For the Lumo platform as a whole, see Privacy and LGPD (in Portuguese).
1. Who we are
HORUS DESENVOLVIMENTO DE SISTEMAS LTDA (“HorusBI”), CNPJ 33.161.535/0001-01, Rua Desembargador Pedro Silva, 2958, Coqueiros, Florianópolis/SC, Brazil, CEP 88080-701, operates Lumo and the connector.
The company that contracts Lumo is the controller of its business data: it decides which data enters the platform and who can see it. HorusBI processes that data on the company’s behalf. For the sign-in and call records described below, HorusBI is the controller.
2. What the connector processes
| Data | Purpose |
|---|---|
| Your Lumo username and password | Entered only on the Lumo sign-in page in your browser, to authorize the connection. They are never sent to Claude, ChatGPT or their providers. |
| Access and refresh tokens | Keep the connection authorized. The access token lasts 1 hour and is renewed while the assistant uses the connection; after 30 days without use, you must connect again. |
| Business data returned by your queries | Answer the questions you ask the assistant: tables, columns, indicators and aggregated results from the Lumo applications you already have access to. |
| Call records: user, workspace, tool called, application, number of rows, success or failure, assistant client, time | Security, troubleshooting and usage limits. |
The connector is read-only. It never creates, changes or deletes anything in Lumo. Every query runs with your own Lumo permissions, including row and column restrictions, so the assistant only sees what you can already see when you sign in to Lumo.
3. Who receives the data
The results of your queries are sent to the assistant you connected, and from that point they are handled under that provider’s privacy policy:
- Anthropic, for Claude: anthropic.com/legal/privacy
- OpenAI, for ChatGPT: openai.com/policies/privacy-policy
These providers may process the data outside Brazil. HorusBI does not sell connector data, does not share it with anyone else and does not use it to train AI models.
4. Retention
HorusBI keeps the call records for 12 months and then deletes them automatically. It does not store the content of the results returned to the assistant. Business data stays in Lumo’s data warehouse, in Brazil, under the customer company’s contract.
5. Control and security
- Your company’s Lumo administrator can allow or block the connector for each group or user.
- You can disconnect at any time in Claude or ChatGPT.
- When a user is deactivated in Lumo, connector access stops within 15 seconds.
- All traffic uses HTTPS.
6. Your rights
Under Brazil’s General Data Protection Law (LGPD), you can ask for confirmation of processing, access, correction, deletion, portability and information about sharing, and you can withdraw consent where it applies. Write to our Data Protection Officer at dpo@horusbi.com.br. Requests about business data inside your company’s Lumo workspace are answered together with your company, which is the controller of that data.
7. Changes
We will update this page when the connector changes what it processes, and change the date at the top.