Privacy policy

Last updated 2026-10-23

This policy explains how Your Company Ltd. ("we") processes personal data when you use Luxivo. We process data in line with the EU General Data Protection Regulation (GDPR).

Controller

Your Company Ltd., Street 1, 00-000 City, Country. Contact: legal@luxivo.app.

Data we process as controller

  • Account data: name, email address and password hash, to provide your account (Art. 6(1)(b) GDPR).
  • Billing data: company name, address, VAT ID and payment status, to bill you and meet tax obligations (Art. 6(1)(b) and (c)). Card details are handled by our payment provider and never reach our servers.
  • Technical logs: IP addresses and connection metadata, kept for up to 30 days for security and troubleshooting (Art. 6(1)(f)).
  • Website statistics: the pages you view on our website, the referring site and campaign tags, to understand which pages work (Art. 6(1)(f)). We count visits ourselves, with no cookies and no third-party analytics. To tell visits apart we store a hash of your IP address and browser that changes every day and can't be traced back to you. When you sign up, the source of that day's first visit is stored with your account.

Data we process on your behalf

Content you add to the service is processed only on your instructions, as a processor under Art. 28 GDPR, as set out in the terms of service.

Sub-processors

  • Cloudflare, Inc., USA (EU Standard Contractual Clauses and the EU-US Data Privacy Framework): Hosting of the website, dashboard, API and database (Workers, D1, R2), and transactional email.
  • Paddle.com Market Ltd, United Kingdom (UK adequacy decision): Payments, invoices and sales tax as our reseller and merchant of record.

Retention

Account data is kept while your account is active and deleted within 30 days after closure, except where we must keep invoices for tax purposes.

Your rights

You can request access, correction, deletion, restriction or a copy of your data, and object to processing, by writing to legal@luxivo.app. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).

Cookies

We use only strictly necessary cookies to keep you signed in. We don't use advertising, analytics or tracking cookies.