Privacy Policy
Last updated: July 5, 2026
The protection of your privacy is a priority for AskLizy. This policy explains how THELI SAS collects, uses, and protects your personal data when you use the website asklizy.com.
This policy is established in accordance with the GDPR and applicable French regulations.
1. Data controller
The personal data collected on this site is processed by:
THELI SAS
Registered at the RCS of Paris under number 940 357 981
Registered office: 8 Rue des Cloys, 75018 Paris, France
Contact email: privacy@asklizy.com
THELI SAS acts as the data controller within the meaning of Article 4 of the GDPR.
2. Technical cookies
AskLizy uses only cookies strictly necessary for the operation of the service:
- Supabase session (authentication)
- Anonymous rate-limiting cookie (signed, non-personal)
- Stripe payment security cookies (third-party)
No profiling, advertising tracking, or behavioral analysis cookies are used. In accordance with CNIL recommendations, these technical cookies do not require prior consent.
3. Personal data collected
We collect only the data necessary for the operation of the service:
| Category | Example | Purpose | Legal basis |
|---|---|---|---|
| Identity | Email address | Account creation and management | Contract performance |
| Payment | Stripe customer ID, invoices | Subscription management | Contract performance |
| Company | Company name, VAT number | B2B invoicing | Contract performance |
| Technical | IP hash, Vercel logs | Site security and rate limiting | Legitimate interest |
| Usage | Benchmark history, saved reports | Service delivery | Contract performance |
No sensitive data is knowingly collected.
4. Purposes of processing
Personal data is used for:
- managing user accounts and authentication
- providing the AskLizy service (location benchmarking, scoring, reports)
- managing subscriptions and billing (Stripe)
- ensuring site security
- preventing fraud and abuse
- improving service quality
AskLizy does not engage in any automated profiling or automated decision-making with legal effect.
5. Data recipients
Data is intended exclusively for:
- THELI SAS internal teams
- technical subprocessors necessary for the service (Supabase, Stripe, Vercel, Google Maps API, RapidAPI)
These providers act as subprocessors within the meaning of Article 28 of the GDPR.
6. Hosting and providers
Frontend & API: Vercel Inc. — United States
Database & Auth: Supabase Inc. — data hosted in EU
Payments: Stripe Inc.
Maps & POI data: Google Maps API / RapidAPI
Some transfers may take place outside the European Union, notably to the United States. These transfers are governed by Standard Contractual Clauses of the European Commission.
7. Data retention
| Data type | Retention period |
|---|---|
| Active user account | Duration of activity |
| Benchmark history | Duration of account |
| Invoices and accounting records | 10 years |
| Supabase session | 1 hour (renewable) |
| Anonymous rate-limit records | Monthly reset |
| Vercel technical logs | Maximum 12 months |
Beyond these periods, data is deleted or anonymized.
8. Account deletion
You can delete your AskLizy account at any time from your account page. This action is irreversible: your authentication data is immediately deleted from Supabase.
If a Stripe subscription is active, you must first cancel it via the billing portal available in your account page.
9. Data security
THELI SAS implements appropriate technical and organizational measures:
- HTTPS encryption (TLS)
- Supabase Row Level Security (RLS)
- Secure service tokens
- Access control and internal access limitation
- Signed anonymous rate-limiting cookies
10. Your rights
In accordance with the GDPR, you have the following rights:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to data portability
- right to object
- right to withdraw consent
You can exercise these rights by writing to: privacy@asklizy.com
A response will be provided within a maximum of 30 days.
In the absence of a satisfactory response, you may file a complaint with the CNIL.
11. No sale of data
THELI SAS does not sell, rent, or share any personal data for commercial or advertising purposes.
12. Changes to this policy
This policy may be updated to reflect the evolution of the service, legal obligations, or technical practices. The update date at the top will be modified accordingly.
13. Contact
For any questions regarding this policy: privacy@asklizy.com