LiveLiz collects only what is needed to reply to you, run the service and meet legal obligations. No resale, no advertising profiling.
Last updated · June 5, 2026
STUDIO 7 (SARL), 32 Chemin du Puy Blanc, 42170 Saint-Just-Saint-Rambert, France, publisher of the LiveLiz brand, is the controller of data processed via liveliz.io and the LiveLiz application.
Personal data contact: the contact form ("personal data" reason) or hello@liveliz.io. STUDIO 7 is not required to appoint a DPO; this is the dedicated point of contact.
Booking / contact form: first name, last name, work email, phone, company, craft, role, number of showrooms, use case and message. Purpose: answer your request and prepare the conversation.
Customer account (app.liveliz.io): email, hashed password, language, role, billing data and session data. Purpose: deliver and operate the service.
Video sessions and replays: session metadata and, where applicable, recordings and AI analysis of the conversations, processed on behalf of the client (house), which remains the controller towards its own visitors.
Technical logs: IP address, user-agent, timestamp. Purpose: security and fraud prevention.
Performance of a contract (LiveLiz service) or pre-contractual measures (booking, quote).
Compliance with legal obligations (invoicing, accounting).
Legitimate interest (security, technical logs, service improvement).
Consent, where required.
Unconverted commercial enquiries: 3 years after last contact.
Active customer accounts: throughout the contract, then 3 years.
Replays and session data: per the client's settings, deleted at contract end (export available beforehand).
Accounting documents and invoices: 10 years (legal obligation).
Technical logs: 12 months.
Site hosting: Vercel Inc. (USA).
Database, authentication and storage: Supabase (European Union, Ireland).
CDN, real-time video, replay storage and anti-bot protection (Turnstile): Cloudflare.
Subscription payment and billing: Stripe.
Transactional email: Google Workspace (hello@liveliz.io).
No third-party advertising tools. Google Analytics audience measurement and UTM attribution are enabled only after consent through the cookie module. All sub-processors are contractually bound to GDPR compliance.
Some sub-processors (Vercel, Cloudflare, Stripe, Google) may process data in the United States. Such transfers are governed by the European Commission's standard contractual clauses and/or the Data Privacy Framework.
You have rights of access, rectification, erasure, restriction, objection and portability over your data, as well as the right to set post-mortem directives.
To exercise them: use the contact form ("personal data" reason). Reply within one month.
You may file a complaint with the CNIL (cnil.fr) or your local supervisory authority.
The site uses cookies strictly necessary for operation and to remember your choice. Audience-measurement cookies (Google Analytics) and UTM attribution are used only after your consent. You can accept, refuse or change this choice at any time from the “Cookies” link in the footer.