Privacy Policy

Data controller

The data controller is Valentin GIRAUD, sole proprietor publishing the Levux service. Full legal information is available on the legal notices page.

For any question about personal data, you can write to contact@levux.app.

Data subjects

This policy applies to professional users of Levux, end clients who access a form, share link, or client portal, and visitors to the public website.

Data collected

Depending on how you use the service, Levux may process the following categories of data:

• account and authentication information: email address, first name, last name, technical identifiers, and account status;
• professional profile information: preferences, company, activity, or elements useful for using the service;
• client and project data: names, contact details, brief, budget, deadlines, context, needs, risks, and next steps;
• documents, forms, questions, responses, and share links associated with projects;
• analyses, estimates, summaries, and histories generated or stored in the application;
• messages sent via contact or support request forms;
• email address and proof of consent when you subscribe to the Levux newsletter;
• billing and payment data linked to paid offers: Stripe customer identifiers, subscription and purchase history, payment status, invoices or receipts; card data is collected and processed by Stripe, not stored by Levux;
• technical data: connection logs, cookies, session data, audience metrics, and information necessary for service security.

Processing purposes

Data is processed to provide and improve Levux, in particular to:

• create, secure, and administer user accounts;
• manage projects, clients, forms, responses, documents, and client portals;
• help professionals scope, qualify, analyze, and estimate their projects;
• produce analyses, summaries, suggestions, or estimates from provided information;
• manage paid offers, subscriptions, AI action packs, billing, and credit tracking;
• send service-related emails such as invitations, confirmations, or authentication links;
• send the newsletter and product updates when you have consented, with an unsubscribe link in each email;
• ensure security, prevent abuse, diagnose errors, and maintain service availability;
• measure audience, understand usage, and improve the experience.

Legal bases

Processing relies, depending on the case, on performance of the service or pre-contractual measures, Levux's legitimate interest in securing, operating, and improving its application, consent where required, or compliance with applicable legal obligations.

Recipients and subprocessors

Data is accessible only to people and providers who need it to deliver the service, maintain the application, secure access, or respond to user requests.

Levux relies in particular on Supabase for authentication, database, and application storage, Vercel for hosting and technical metrics, OpenRouter for certain artificial intelligence features, Resend for some email delivery (transactional and newsletter), and Stripe for payment, invoicing, and subscription/pack management.

Some data may be processed by providers located outside the European Union. In that case, Levux seeks to rely on providers offering appropriate safeguards for personal data processing.

Payments and Stripe

When you subscribe or buy an AI action pack, payment is processed by Stripe (Stripe Payments Europe Limited / affiliated entities). Levux does not store your full card number.

Stripe processes data needed for payment (payment details, transaction status, invoices or receipts) for Levux or as a payment service provider. For more information, see Stripe's privacy policy: https://stripe.com/privacy.

Levux keeps technical identifiers linked to your Stripe customer, subscription, purchases, and billing history to activate credits, show spending, and manage renewals or cancellations.

Client data and the professional user's role

When a professional user enters or collects information about their own clients, they must ensure they have a legitimate basis to process and transmit it to Levux. They remain responsible for the relevance of information collected in their forms, briefs, documents, and client communications.

Levux must not be used to collect sensitive or excessive data relative to the project concerned. Forms and documents must remain linked to project scoping, qualification, or estimation.

Artificial intelligence

Some project information may be transmitted to artificial intelligence technical providers to produce analyses, summaries, estimates, or suggestions. These processes serve only to provide the requested features in Levux and help the user better scope their project.

The user should avoid transmitting sensitive or unnecessary data in briefs, documents, and forms used to generate this content.

Retention periods

Data is retained for as long as necessary for use of the service, application security, and compliance with applicable legal obligations. Data linked to an account or project may be deleted or anonymized when no longer necessary, subject to technical, backup, or security constraints.

If a deletion request is made, Levux will process it as soon as reasonably possible, unless limited retention remains necessary to comply with a legal obligation, defend a right, or ensure service security.

Cookies, local storage, and audience measurement

Levux uses cookies and similar mechanisms strictly necessary for the service to function, in particular for authentication, session security, and browsing continuity.

The site may also use browser local storage to remember certain preferences, such as cookie banner acceptance or display of certain in-app guidance. These elements improve the experience and are not used to sell personal data.

Audience and performance tools, including Vercel Analytics and Vercel Speed Insights, may be used to understand site usage, detect issues, and improve service quality. For more information, see also the cookies section of the legal notices.

Security

Levux implements reasonable measures to protect data against unauthorized access, loss, alteration, or disclosure. These measures include access controls, authentication, database authorization rules, and separation between the professional workspace and the client portal.

However, no online service can guarantee absolute security. Users must keep their access links, authentication emails, and account information confidential.

Your rights

Under the General Data Protection Regulation and the French Data Protection Act, you may request access, rectification, erasure, restriction, or portability of your data. You may also object to certain processing or withdraw consent where processing is based on consent.

For the newsletter, you can unsubscribe at any time via the link in each update email.

To exercise your rights, write to contact@levux.app. To protect accounts and project data, identity verification or confirmation of your link to the relevant project may be requested.

If you believe your rights are not being respected, you may file a complaint with the CNIL at cnil.fr.

Updates to this policy

This policy may be updated to reflect changes to Levux, its providers, its processing activities, or the applicable legal framework. The version published on this page is the one applicable at the time of your visit.

Use of the service is also governed by the terms of use and, for paid offers, by the terms of sale.