Privacy Policy (GDPR Compliance)

1. Data Controller

The data controller responsible for processing personal data is:

Leavely
triven kadiata
134 avenue des bleuets 93370 Montfermeil
Email: dev.triven.kadiata@gmail.com

2. Personal Data Collected

• Email address and account information
• Project-related data created within the platform
• Subscription cancellation reasons and optional comments
• Technical data (IP address, security logs)
• Billing data processed via Stripe

3. Purpose of Processing

• Account creation and management
• Providing Leavely services
• Aggregated statistical analysis
• Billing and payment management
• Platform security and fraud prevention

4. Legal Basis for Processing

• Performance of a contract (Article 6(1)(b) GDPR)
• Legal obligations (accounting and invoicing requirements)
• Legitimate interest (security and service improvement)

5. Data Retention

Personal data is retained for the duration of the subscription. Billing data may be retained for up to 10 years in accordance with applicable legal requirements.

6. Data Recipients

Personal data may be shared with trusted service providers:

• Stripe (payment processing)
• Cloud hosting providers (e.g., Vercel)
• Database infrastructure providers (e.g., Neon / PostgreSQL)

7. International Data Transfers

Some service providers may process data outside the European Union. In such cases, appropriate safeguards are implemented, including Standard Contractual Clauses or adequacy decisions.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object

To exercise these rights, contact: dev.triven.kadiata@gmail.com

9. Supervisory Authority

If you believe your rights are not respected, you have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).