Privacy Policy

1. Who we are

Likelio ("we", "us") publishes Likelio and operates likelio.dev. For privacy questions, contact privacy@likelio.dev.

For users in the European Economic Area, the United Kingdom, or Switzerland, Likelio acts as the data controller for the information described below.

2. What we collect

We collect only what we need to provide and protect Likelio:

• Account information.When you sign in with GitHub, Google, or Microsoft, we receive your email address and basic profile (name, avatar URL, and the provider's account ID).
• License records. Your activation key, license tier, seat count, and purchase history.
• Billing metadata. Stripe processes your payment and stores your card details. We receive transaction metadata (amount, currency, country for tax, last 4 digits, billing email) but never your card number.
• Activation check-ins. When Likelio validates your license, it sends us your activation key, the app version, your operating system version, and the IP address from which the request originates. These pings let us detect key sharing and operate the licensing system.
• Email signups. If you subscribe to product updates, we store your email address and opt-in state.
• Site cookies. We set a session cookie when you sign in to manage your account. We do not currently use third-party advertising cookies or cross-site trackers.
• Support correspondence. If you email support, we keep the message and any context you provide so we can respond and improve the product.

3. What we do not collect

We want to be explicit because this is the brand promise:

• The contents of your spreadsheets, plots, formulas, or queries.
• The files you open in Likelio or any data you import from CSV, Parquet, JSON, or external warehouses.
• Credentials for any external database, warehouse, or API you connect — those are stored locally on your device.
• Traffic between Likelio and a local AI assistant via MCP. The MCP server runs on your machine over a local stdio transport; that traffic never reaches our servers.

4. How we use your information

• To create and maintain your account and provide your license.
• To process payments and send you receipts and activation keys.
• To detect fraud, abuse, and unauthorized key sharing.
• To send transactional emails (purchase confirmations, security notices, important product changes). These are not marketing.
• To send marketing emails — only if you separately opt in. You can unsubscribe at any time using the link in every marketing email or at likelio.dev/unsubscribe.
• To comply with our legal obligations (e.g. tax records, responding to lawful requests).

5. Legal bases for processing (EU/UK)

• Performance of a contract — for account, license, and activation processing.
• Legitimate interests — for fraud prevention, security, and product improvement.
• Consent — for marketing emails and any optional analytics.
• Legal obligation — for tax, accounting, and law-enforcement requests.

6. Sub-processors and third-party services

We use the following processors to provide the service. Each processes data only on our instructions and under a data-processing agreement.

• Stripe — payment processing.
• GitHub, Google, Microsoft — single sign-on providers (whichever you choose).
• Vercel — hosting for likelio.dev.
• Neon — managed Postgres for license and account records.
• Google Gmail — transactional email delivery (activation keys, receipts).

Replace bracketed placeholders with the providers you actually use before publishing.

7. AI assistants and third-party LLMs

Likelio ships an optional MCP server that you can connect to a third-party AI assistant (e.g. Claude Desktop, ChatGPT desktop, Cursor). When you choose to send data from Likelio to such an assistant, the data goes directly from your machine to that provider — not through us. Their privacy policy and terms apply to that data. We strongly recommend reviewing those policies before sharing sensitive information with any AI assistant.

8. Sharing and disclosure

We do not sell your personal information. We share information only in the limited circumstances below:

• With the sub-processors listed above, to operate the service.
• When required by law, court order, or to respond to a valid government request.
• To prevent fraud, security incidents, or harm to our users or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you.

9. International transfers

Likelio is based in the United States and our sub-processors are primarily located in the United States. If you access Likelio from outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate safeguards for such transfers, including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable.

10. Retention

• License records — kept for the duration of your license plus a reasonable period to comply with tax, accounting, and legal-defense obligations.
• Account data — kept until you request deletion or close your account.
• Activation logs — retained for up to 90 days, then deleted or aggregated.
• Marketing list — kept until you unsubscribe.
• Support correspondence — retained as long as needed to provide ongoing support and improve the product.

11. Your rights

Subject to your jurisdiction, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten"), subject to legal retention requirements.
• Receive a portable copy of your data in a machine-readable format.
• Object to processing or restrict it.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

California residents. Under the CCPA/CPRA you have the rights described above. We do not sell or "share" your personal information for cross-context behavioural advertising as those terms are defined under California law.

To exercise any right, email privacy@likelio.dev. We will respond within the time required by applicable law.

12. Security

We use commercially reasonable technical and organizational measures to protect your information, including TLS in transit, encryption at rest for sensitive fields, restricted access to production systems, and routine security reviews. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by applicable law.

13. Children

Likelio is not directed to children under 16, and we do not knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Do Not Track and global privacy signals

Our site does not use cross-site advertising trackers, so there is currently no behavioural tracking to disable. We honour the Global Privacy Control (GPC) signal where applicable.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or by posting a notice on the site, and we will update the effective date above. Your continued use of Likelio after the new policy takes effect constitutes acceptance of the updated terms.

16. Contact

Privacy questions or rights requests: privacy@likelio.dev
General support: support@likelio.dev