Data Governance

Privacy Policy

We process only the personal data required to operate the service: account email, hashed password (or OAuth ID), and run history. We never sell personal data. GDPR data subject requests: privacy@urbanlabs.info.

Data Sources & Provenance

Every indicator stores its source, source_url, and year. Primary portals:

• transparenz.hamburg.de — Hamburg open data
• offenedaten.luebeck.de — Lübeck open data
• OpenStreetMap via Nominatim — boundaries and POIs
• Eurostat — peer benchmarks
• Klimaschutzkonzept Lübeck — climate strategy documents

Methodology Transparency

Scoring formulas, indicator weights, and JRC139118 mappings are public on the methodology page. All agent prompts are versioned in methodology_versionon every API response.

European Sovereign Cloud

Data is hosted on European infrastructure (Frankfurt region). LLM inference uses the Lovable AI Gateway with EU-routed providers where available. No personal data is sent to model providers — only the assessment brief and public source documents.