Privacy notice
Last reviewed: not yet reviewed by a lawyer. This is a working draft written alongside the product so that the data flows are documented accurately. Have it checked before you take a paying customer.
Who is responsible
Livery is operated by Lauridsen Software, a business registered in Denmark (CVR [insert]). Contact: [insert email].
Two different roles
This matters more than it sounds. For the freelancer’s own account data we are the controller. For the business data a freelancer researches and the client sites they build, the freelancer is the controller and we are the processor acting on their instructions. A data processing agreement covering that relationship is part of the terms.
What we process
- Account data: name, email, a hashed password, and the organisation name. Basis: performance of the contract.
- Business records from CVR and equivalent registers:company name, registration number, registered address, industry code, registration year, and publicly listed contact details. Basis: legitimate interest in B2B prospecting, documented in a Legitimate Interest Assessment kept on file.
- Website health checks: we fetch the public homepage of a business that has one, once, to classify whether it works. We honour robots.txt and store only the classification and the evidence for it.
- Site content and images supplied by the freelancer or their client, for the purpose of hosting the site.
- Contact form submissions from published sites, passed to the business they were sent to.
Sole traders
An enkeltmandsvirksomhed is a natural person. Their business contact details are therefore personal data and carry the full set of rights below, even though the context is commercial. We treat every lead record that way rather than trying to tell the two apart.
Provenance
Every lead record stores its source and the timestamp at which it was obtained, and that is shown in the product. If you ask us where a record came from, we can answer.
Marketing rules
Danish marketing law (Markedsføringsloven §10) restricts unsolicited electronic marketing. Cold calling a business is generally permitted; cold emailing generally is not, without prior consent. Livery does not provide bulk email tooling and warns in-product where the distinction applies.
Where the data lives
In the EU. Database, file storage and hosting are configured to EU regions. Payment processing is carried out by Stripe under their own terms; we never receive card details. Site generation sends the business brief to the configured AI provider — Google (Gemini) by default, or a locally hosted model if the operator runs one, in which case nothing leaves the operator’s infrastructure.
How long we keep it
- Lead records: until you delete them, or 24 months without activity.
- Site content: for the life of the subscription.
- After cancellation: a site is archived for 12 months so it can be restored, then deleted.
- Audit logs: 24 months.
Your rights
Access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interest. Write to [insert email] and we will respond within one month. You can complain to Datatilsynet.
Taking your content with you
A business whose site we host can export its full content at any time from the client portal, without asking anyone. We do not hold content hostage against payment.