1. Data controller
The operator of the Limot service is the controller of the personal information described in this policy. Send privacy requests and data protection questions to [email protected]. Limot has not currently appointed a separate data protection officer.
2. Information we collect
Information you provide
- Account information: email address, encrypted or hashed login credentials, and basic account details provided by third-party sign-in services with your authorization.
- Transaction information: order ID, amount, currency, payment status, and Pro entitlement status. We do not store full payment card numbers.
- Communications: support emails, feedback, refund or privacy requests you send us, and related handling records.
Information collected automatically
- Device and network information: IP address, browser and device type, operating system, language, and time zone.
- Usage and log information: pages visited, feature interactions, request times, errors, and security logs.
- Local settings: effect parameters, interface preferences, and essential session information saved in your browser.
3. Purposes and legal bases
- Performance of a contract: creating accounts, providing effects and exports, activating Pro access, and processing payments.
- Legitimate interests: maintaining service reliability and security, preventing fraud, responding to support requests, and improving the product.
- Legal obligations: retaining necessary transaction, tax, and compliance records and responding to lawful regulatory requests.
- Your consent: using optional cookies or sending marketing messages where consent is legally required. You may withdraw your consent at any time.
We may use aggregated or anonymized data that can no longer identify individuals for statistics and product analysis.
4. Cookies and local storage
We use strictly necessary cookies or local storage to keep you signed in, provide security, and save essential preferences. If we introduce optional analytics or marketing tools in the future, we will first obtain your consent where required by applicable law and provide a way to turn them off. You can also delete stored data through your browser settings, but this may prevent sign-in or preference-saving features from working.
5. Sharing and disclosure
We do not sell your personal information or rent it to third parties. Only to the extent necessary to provide the Service, we may disclose information to cloud hosting, authentication, email, support, security, and payment providers subject to contractual confidentiality and data protection obligations.
Payment card data is processed directly by Waffo Pancake, a payment processor that meets PCI-DSS requirements, and is not stored on Limot servers. We may also disclose necessary information to meet legal obligations, protect users and service security, complete a business merger or asset transfer, or with your explicit consent.
6. Data security
We use reasonable safeguards such as HTTPS/TLS transport encryption, password hashing, access controls, and security logs to protect information. No online service can guarantee absolute security. If a security incident requires notification by law and may affect your rights or interests, we will notify you and the relevant authorities promptly as required by law after confirming the incident.
7. Retention periods
- Account information: retained while your account is active; generally deleted or anonymized within 90 days of account deletion, with backups cleared on the normal rotation schedule.
- Transaction and tax records: retained as required by applicable law, generally for no more than 7 years.
- Support and rights request records: generally retained for 2 years after the matter is closed.
- Security and technical logs: generally retained for no more than 12 months; this may be extended when needed to investigate security incidents or meet legal obligations.
8. Your data rights
Depending on the laws applicable in your jurisdiction, you may have rights to be informed, access, correct, or delete your data, restrict processing, obtain data portability, object to processing, and withdraw consent. Submit requests to [email protected]. We may need to verify your identity and will generally respond within 30 calendar days.
If you believe we have not handled your personal information appropriately, you have the right to complain to your local data protection or consumer protection authority.
9. International transfers
Limot and its service providers may process information outside your country or region. In accordance with applicable law, we will use data processing agreements, standard contractual clauses, adequacy decisions, or other valid mechanisms, and require recipients to provide appropriate protection.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their personal information. If you believe a minor has provided information to us, please contact us. We will verify the matter and delete the information as soon as possible.
11. Third-party services
The Service may include links to third-party websites or integrations such as sign-in and payment services. Third parties apply their own privacy policies to information they collect directly. We recommend reviewing those policies before using their services.
12. Policy changes and contact
We may update this policy. If changes materially affect your rights, we will generally provide at least 15 days’ notice through a website announcement or your registered email and update the date at the top of this page.
For privacy, account, or data rights requests, contact [email protected]. Support hours are Monday through Friday, 09:00–18:00 (UTC+8, excluding public holidays).