Privacy Policy

Last updated: April 22, 2026

1. Introduction

Lanceva ("we", "us", "our"), operated by Polsia, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our AI-powered sales outreach platform.

2. Data Controller

The data controller for the purposes of GDPR and applicable data protection laws is Lanceva / Polsia, based in Grenoble, France. Contact: support@lanceva.com.

3. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, and hashed password when you create an account
• Campaign data: Company information, ideal customer profiles, and prospect lists you upload
• Generated content: AI-generated emails and campaign outputs
• Usage data: Pages visited, features used, and session duration (anonymized analytics)
• Technical data: IP address, browser type, and device information for security and service delivery

4. How We Use Your Data

• To provide and improve the Lanceva service
• To generate personalized outreach emails based on your campaign data
• To authenticate your identity and secure your account
• To send service-related notifications (account security, feature updates)
• To analyze usage patterns and improve the platform (aggregated, anonymized data only)

5. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance: To deliver the service you signed up for
• Legitimate interest: To improve our service, prevent fraud, and ensure security
• Consent: For optional communications (you may withdraw consent at any time)

6. Data Sharing

We do not sell your personal data. We may share data with:

• AI providers: Prospect and campaign data is sent to AI services (OpenAI) for email generation. This data is processed per their data processing agreements and not used for model training.
• Infrastructure providers: Hosting (Render), database (Neon), and analytics services that process data on our behalf under strict data processing agreements.
• Legal requirements: When required by law, regulation, or valid legal process.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interest

To exercise any of these rights, contact support@lanceva.com. We will respond within 30 days.

9. Data Security

We protect your data using industry-standard measures including encryption in transit (TLS), encrypted storage, and access controls. Passwords are hashed using bcrypt and never stored in plain text.

10. Cookies

We use essential cookies for authentication (JWT tokens stored in localStorage). We use anonymized analytics to understand usage patterns. We do not use third-party tracking cookies.

11. International Transfers

Your data may be processed in the EU and the United States. Where data is transferred outside the EU, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).

12. Changes to This Policy

We may update this Privacy Policy. We will notify registered users of material changes via email. Continued use of the Service constitutes acceptance.

13. Contact

For privacy-related questions or to exercise your rights, contact: support@lanceva.com