Fair question — it's the first thing we'd ask too. The honest answer: you can. But if the document belongs to a client, here is what you should know first. Every claim below links to its source.
On ChatGPT Free, Plus, and Pro, your conversations — including the documents you paste or upload — are used to train OpenAI's models unless you find the setting and opt out [1][2]. And by OpenAI's own documentation, data already used in a training run cannot be removed retroactively [2]. An opt-out protects your next document, never your last one.
In May 2025, a US federal court ordered OpenAI to preserve user conversations — including ones users had deleted — as potential evidence in a copyright lawsuit [3]. OpenAI objected on privacy grounds; the order was affirmed. In January 2026, the court went further and compelled production of a sample of 20 million chat logs to the plaintiffs [4]. None of those users did anything wrong. Their conversations became litigation material anyway.
Under the US CLOUD Act (2018), American companies can be compelled to hand data to US authorities even when it is stored on EU servers. The EU's own data-protection authorities have flagged this as a direct conflict with European data-protection law [5]. Choosing an EU region from a US provider does not change who the provider answers to.
Suppose you opt out of training, use temporary chats, and never slip. When a client — or an auditor — asks "who processed this document, under what agreement, and where?", a personal chatbot account gives you nothing to show: consumer terms, no data processing agreement, no processor relationship. That's the textbook definition of shadow AI.
Luminari Doc's answer to that question fits on one line: a named EU vendor, a signed DPA, every processor listed in the privacy policy, EU-only processing, and originals that are never stored. Your name is on the audit — ours is on the processing.
Hosted by a German infrastructure company, analyzed by a French AI provider on EU servers [6]. No US company touches your documents at any step — so there is no US provider for the CLOUD Act to reach.
Our AI provider does not use API data to train models [6] — a contractual term of the paid API, not a buried toggle you have to find.
Text is extracted in memory and your file is discarded on the spot. Analyses live in your dashboard for 30 days — or until the moment you delete them.
No empty chat box. Each document type runs through a fixed professional template — contract, RFP, lease, financial report, meeting notes — consistent every time, built for long documents.
A real vendor relationship: DPA in place, processors named, deletion guaranteed. GDPR-safe by design — a defensible answer for your audit trail.
If an analysis fails or is unusable, it's refunded. A human answers within two business days. Try getting that from a chat tab.
We use general-purpose chatbots ourselves — for brainstorming, drafting, public information, anything that isn't confidential. If the text you're pasting contains nothing you'd mind a stranger reading, a chatbot is free and excellent. The line is simple: your data, your call — your clients' data, their trust. Luminari Doc exists for the second category.
Analyze your first document — free
One-step account · no card required · first analysis free
All sources accessed June 2026. If any of these facts change, we'll update this page — accuracy is the product.