Privacy Policy

Data controller

Florin Livada, sole trader — Castellane (04120), France — SIRET 44198112300025. Contact: contact@livada.io.

Data collected

• When purchasing: name, email, billing address, banking data (handled exclusively by Lemon Squeezy — we store no banking data).
• When joining a waitlist: email + first name (optional).
• When sending a form message: name, email, message content.
• Audience measurement: Cloudflare Web Analytics — anonymous, cookie-free, no cross-site tracking.

Legal bases

• Performance of the contract: purchases, licence delivery, support.
• Consent: newsletter, waitlist, contact form.
• Legal obligations: invoicing, 10-year accounting retention.
• Legitimate interest: anonymous audience measurement, site security.

Retention

• Customer accounts: 3 years after last activity.
• Billing data: 10 years (accounting obligation).
• Waitlist / newsletter sign-ups: until consent is withdrawn.
• Contact messages: 2 years.

Hosting and sub-processors

We use the following sub-processors, with EU edge/hosting preferred:

• Cloudflare: site hosting, D1 storage and edge/reverse-proxy infrastructure (EU edge preferred; company established in the United States).
• Lemon Squeezy (Merchant of Record): payment and invoicing (United States). No banking data is stored by Livada.
• Brevo (formerly Sendinblue): transactional emails (EU — France).

Transfers outside the EU. Where a sub-processor (notably Cloudflare or Lemon Squeezy) carries out a transfer outside the EU/EEA, it is framed by a valid mechanism under Chapter V of the GDPR: EU-US Data Privacy Framework adequacy decision (10/07/2023) where the importer is certified, and/or Standard Contractual Clauses of the Commission (art. 46) with supplementary measures (the SCCs serving as a fallback basis). No data is resold.

Livada Edge SEO — processing as a processor

When you use Livada Edge SEO, the traffic of your site's visitors transits through our optimisation infrastructure. In this respect, Livada acts as a processor (GDPR art. 4-8) on your behalf, with you (or your end client) being the controller. The conditions are governed by our Data Processing Agreement (DPA), which is provided to you and prevails for personal data.

• Data processed (in transit): connection IP address, user-agent, requested URL, headers, page content of your site's visitors. No retention beyond the technical transit, no profiling, no resale.
• Purpose & legal basis: provision of the optimisation service, on the controller's instruction (the legal basis for processing visitor data lies with the controller — your site).
• Retention: strictly the time necessary for relay/injection (transit); configuration records are deleted on termination.
• Sub-processors: Cloudflare (edge infrastructure), Brevo (emails), Lemon Squeezy (payment) — see Annex 1 of the DPA.
• Transfers outside the EU: framed (EU-US DPF and/or Standard Contractual Clauses + supplementary measures); EU edge preferred.
• Data-subject rights: visitors exercise their rights with the controller (the site publisher); Livada assists as far as possible given the “transit” nature of the processing.

Your rights (GDPR)

You have the following rights at any time:

• Right of access, rectification, erasure
• Right to portability
• Right to object and to restriction of processing
• Right to withdraw your consent
• Right to lodge a complaint with the CNIL

To exercise your rights, write to contact@livada.io. Response within 30 days maximum.

Cookies and trackers

By default, no measurement, tracking or affiliation cookie is set. These trackers load only after your explicit consent via the cookie banner (Consent Mode v2, refusal as simple as acceptance). Your choice is kept for 6 months.

If you accept, the following trackers may be enabled:

• Google Analytics 4 (audience measurement, anonymised IP) — to understand which pages are useful. No data sold.
• Meta Pixel (campaign measurement, if enabled) — to assess the effectiveness of our occasional ads.
• Lemon Squeezy affiliate tracking — to credit the partner who referred you, within our affiliate programme. Cookie duration: 60 days.

If you refuse, none of these trackers is loaded and your browsing stays anonymous. You can change your choice at any time by clearing the site data in your browser.