Privacy Policy

Effective Date: 24 October, 2024

This Privacy Policy (the "Policy") describes in comprehensive detail how Litlyx S.R.L (referred to as “Company,” “we,” “our,” or “us”) collects, utilizes, shares, manages, and protects the personal information of users (referred to as “you,” “your,” or “user”) who interact with or access our website, applications, products, services, or any related online platforms (collectively, the “Services”).

We are fully dedicated to preserving and securing your personal information. The following document elaborates on how we collect and process the personal data you provide or that we gather from you, the choices you have regarding our use of such data, and your legal rights to access, update, or request the deletion of your information. By utilizing our Services, you confirm your consent to the practices stated in this Policy.

1. Information We Collect

We may collect various types of personal and non-personal information from you, depending on the nature of your interaction with our Services. This information may include, but is not limited to:

A. Personally Identifiable Information (PII)

This includes data that can be utilized to identify, contact, or locate a user individually. We may gather PII through the following means:

• Registering for an account
• Subscribing to newsletters
• Purchasing products or services
• Filling out forms
• Participating in surveys, promotions, or contests
• Engaging with our customer support team

Types of PII we may collect include, but are not limited to:

• Name: Full name or surname
• Contact Information: Email address (collected to facilitate communication, provide updates, and offer support)

In addition, we may collect the following:

• Public Anon Key & Project URL: These details are collected when users autonomously integrate with Supabase. These are encrypted and securely stored in our European-hosted database. Our hosting provider, Hetzner, operates from Nuremberg (Germany), with servers powered entirely by renewable energy.

B. Non-Personally Identifiable Information (Non-PII)

This refers to data that cannot be used to personally identify you. It may encompass:

• Usage Data: Information such as pages viewed, time spent on the website, click behavior, referring URLs, and device information.

We do not collect IP addresses.

2. How We Use Your Information

The information we collect serves various business purposes, including but not limited to:

A. Providing Services

We process your personal data to deliver the services you request, which may include:

• Processing orders and managing payments
• Sending transactional emails (e.g., order confirmations, receipts)
• Delivering customer support and responding to inquiries
• Facilitating account creation and management

B. Personalizing Your Experience

We strive to tailor your experience to enhance your interaction with our Services. Personalization may involve:

• Offering customized content, products, and services based on your preferences
• Providing personalized advertisements or recommendations

C. Communication

We may use your contact details to communicate with you, which could include:

• Sending promotional materials, newsletters, or updates (with the option to opt out)
• Notifying you of changes to our services or policies
• Responding to customer service inquiries or resolving issues

We utilize Brevo (a GDPR-compliant and highly secure email provider based in France) to manage email communications.

D. Improving Our Services

We constantly seek to enhance our services’ quality and functionality by:

• Conducting analytics to understand user behavior and preferences
• Identifying trends or detecting potential security risks
• Debugging and troubleshooting issues

We use our proprietary software, Litlyx, to track user activity. Litlyx is cookie-less and strictly GDPR-compliant. It enables us to collect non-personal usage data without employing traditional tracking technologies like cookies. Since we do not collect sensitive personal information beyond email addresses and Supabase-related details, a cookie banner is unnecessary on our website.

3. Sharing and Disclosure of Your Information

We are committed to safeguarding your privacy and will never sell your personal information to third parties. However, we may share your data under the following circumstances:

A. Third-Party Service Providers

We may engage trusted third-party service providers to perform functions on our behalf, such as:

• Payment processors
• Data analysis services
• Marketing and advertising platforms
• IT and hosting services

These service providers are given access to your information solely to perform specific tasks, and they are contractually bound to protect your information and use it exclusively for the agreed-upon purposes.

B. Legal Compliance and Protection

We may disclose your personal information to law enforcement agencies, regulatory authorities, courts, or other third parties as required by law, including:

• Compliance with legal obligations, such as responding to court orders, subpoenas, or legal processes
• Protecting the rights, property, or safety of our Company, users, or others
• Preventing or investigating potential fraud or breaches of our terms

C. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the involved third party, provided they agree to adhere to the privacy practices outlined in this Policy.

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:

• As required by legal, accounting, or reporting obligations
• As needed to resolve disputes or enforce agreements

Upon request or if you delete your account, we will securely delete your data within 60 days, unless legal retention requirements apply.

5. Data Hosting and Security

Your data, including encrypted Public Anon Key & Project URL from Supabase, is stored on servers hosted by Hetzner in Nuremberg, Germany (DE). We employ stringent security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, HTTPS, and other industry-standard security protocols. Given the sensitivity of this data, we take extreme care in its protection.

6. Cookies and Tracking Technologies

As mentioned, we do not use traditional tracking technologies, such as cookies, to collect your personal data. Our proprietary solution, Litlyx, is fully GDPR-compliant and cookie-less. Since we do not rely on tracking mechanisms that require user consent, we do not display a cookie consent banner on our website.

7. Your Rights and Choices

As a user, you hold several rights regarding your personal data:

A. Access and Correction

You have the right to request access to the personal information we hold about you and to request corrections to any inaccuracies.

B. Data Portability

In certain cases, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.

C. Right to Deletion

You can request the deletion of your personal information, and we will comply within 60 days, unless there is a legitimate business or legal reason to retain it.

D. Opting Out of Marketing Communications

You may opt out of receiving promotional communications at any time by clicking the unsubscribe link provided in our emails.

8. Security Measures

We implement a range of technical, administrative, and physical safeguards to secure your personal information against unauthorized access, disclosure, alteration, or destruction. While we strive to use commercially acceptable methods to protect your data, no method of internet transmission or electronic storage is entirely secure, and we cannot guarantee absolute security.

9. Children’s Privacy

Our Services are not intended for individuals under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will promptly delete it.

10. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Any updates will be posted on this page with an updated “Effective Date.” We encourage you to periodically review this Policy to stay informed about how we are protecting your data.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us at:

Email: help@supacharts.dev