Privacy Policy

How Luxivio (a product of AgenTeam5) handles data. Last updated 2026.

What we collect

Account details (name, email), the business and client data you enter, content you submit to AI features, and usage/diagnostic data. Payment details are handled by our merchant of record — we never see full card numbers.

How we use it

To provide and improve the service: run your workspace, process AI actions, send transactional email, meter tokens, and keep the service secure. We do not sell your data.

Processors we use

Neon (database), Vercel (hosting), Polar (payments / merchant of record), Resend (email), and an AI provider via the Vercel AI Gateway (to generate AI outputs). Each processes data only to provide their part of the service.

AI & your content

Content you send to AI features is processed by the AI provider to produce a response. We use providers with zero-retention/enterprise terms where available and do not use your content to train public models.

Cookies

We use a strictly-necessary session cookie to keep you signed in, and (when configured) privacy-respecting analytics. No third-party ad tracking inside the product.

Your rights (GDPR)

Access, export (portability), correct, delete (erasure), restrict, or object. Signed-in users can export their data and delete their account self-serve in account settings, or request it via Contact. Legal basis: contract (to provide the service), legitimate interests (security, improvement), and consent (advertising/analytics cookies). A Data Processing Agreement is available for business customers; EU data residency on request.

California (CCPA/CPRA)

We do not sell or share your personal information, and don't use it for cross-context behavioural advertising beyond consent-based ad measurement. California residents have the right to know, access, delete, correct, and to non-discrimination — exercise these the same way (account settings or Contact). See your privacy choices on the Cookies page.

Retention

We keep data while your account is active and delete it on request, subject to legal/accounting requirements.

Security & contact

Encryption in transit and at rest, least-privilege access, daily encrypted backups. Questions or requests: the Contact page.