Privacy Policy
Protecting your personal data is a priority for Lyten Agency (Carousels Generator). This privacy policy describes how we collect, use, and protect your information in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Company: Lyten Agency (SAS)
Address: 200 RUE DE LA CROIX NIVERT, 75015 PARIS
Contact: contact@lyten.agency
2. Data Collected
We collect the following data:
- Identification Data: Full name, Email address.
- Professional Data (optional): Organization / Company name.
- Connection Data: IP address, connection logs, browser used (via Vercel Analytics).
- Usage Data: Created carousels, preferences, action history.
- Payment Data: Processed exclusively by our provider Lemon Squeezy (we do not store your banking data).
3. Purposes of Processing
Your data is used for:
- Creating and managing your user account
- Providing the carousel generation service
- Billing and payment management
- Sending communications related to our services (technical updates, news)
- Statistical analysis and improvement of our platform
- Compliance with our legal obligations (accounting)
4. Legal Basis
The processing of your data is based on:
- Contract Execution: for providing our services.
- Your Consent: for certain communications.
- Our Legitimate Interest: for improving our services and security.
- Our Legal Obligations: invoice retention, etc.
5. Storage and Retention
Your data is hosted in Europe (Supabase database region eu-west-1).
| Data Type | Duration (Standard) |
|---|---|
| Active Account | As long as the account is active |
| Inactive Account | 3 years after last activity |
| Billing Data | 10 years (legal obligation) |
| Cookies | 13 months maximum |
6. Cookies and Trackers
We use the following types of cookies:
- Essential Cookies: necessary for the site's operation (Supabase authentication).
- Analytical Cookies: Vercel Analytics to measure audience anonymously.
- Functional Cookies: to remember your preferences.
7. Data Sharing
Your data may be shared with our technical subcontractors strictly necessary for the service:
- Supabase: Database hosting (AWS Infra in Europe).
- Vercel: Web application hosting.
- Lemon Squeezy: Secure payment management and billing.
- AI Providers (OpenAI, Anthropic, Google): Only the prompt content for generation (no personal data transmitted unless included in the prompt by the user).
We never sell your data to third parties for advertising purposes.
8. Your Rights (GDPR)
In accordance with GDPR, you have the following rights (access, rectification, erasure, portability, objection). You can exercise these rights by contacting us at:
9. Security
We implement industry-standard security measures:
- SSL/TLS encryption for all communications (HTTPS).
- Secure database and authentication managed by Supabase.
- Restricted access to data to authorized personnel only.
10. Complaint
If you believe that the processing of your data does not comply with regulations, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.
11. Modifications
We reserve the right to modify this privacy policy at any time. Modifications will be published on this page with an update date.
Last update: January 2026