Legal

Privacy Policy

Last updated: July 2026

Leiclara is operated by ALEDOALLO LLC. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Portuguese law.

By using Leiclara, you agree to the collection and use of information in accordance with this policy. If you have questions, contact us at privacy@leiclara.com.

1. Data we collect

We collect the following categories of personal data:

  • Account data: your email address, first and last name, provided during registration via Clerk (our authentication provider).
  • Conversation data: the questions you submit and the answers returned during your sessions. These are stored to provide the service and to enforce usage limits.
  • Usage data: anonymous usage information, including question counts and session timestamps, stored via a cookie. This data is not linked to your identity.
  • Billing data: payment information processed exclusively by Stripe. We do not store card numbers or full payment details on our systems.

2. How we use your data

We use the data we collect for the following purposes:

  • To provide, maintain, and improve the Leiclara service.
  • To enforce usage limits (Free: 8 questions/month; Premium: 20 questions per 6-hour window).
  • To process Premium subscription billing via Stripe.
  • To send transactional emails related to your account (e.g. subscription confirmations).
  • To detect and prevent abuse of the service.

We do not use your data for advertising, profiling, or sale to third parties.

3. Third-party processors

We share your data only with the following processors, each acting under a data processing agreement and in compliance with GDPR:

Processor Purpose Data shared
Clerk Authentication and user account management Email address, session tokens
Stripe Payment processing for Premium subscriptions Email address, billing information
Fly.io Application hosting and infrastructure All data processed by the application
OpenRouter AI inference — your questions are sent to AI models for processing Conversation messages (question text)

We do not sell, rent, or otherwise share your personal data with parties outside those listed above.

4. Cookies

Leiclara uses a single anonymous usage cookie to track question counts within the Free tier. This cookie does not contain personal identifiers and is not shared with third parties. It is purged after 90 days of inactivity.

Clerk and Stripe may set their own session cookies as part of authentication and payment flows. These are governed by their respective privacy policies.

5. Data retention

  • Conversation data is retained for as long as your account is active. If you delete your account, your conversations are deleted within 30 days.
  • Anonymous usage data (the usage cookie) is purged after 90 days.
  • Billing records are retained by Stripe in accordance with their policies and applicable tax law.

6. Your rights under GDPR

As a data subject under EU law, you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure: request deletion of your personal data ("right to be forgotten").
  • Portability: receive your data in a structured, machine-readable format.
  • Restriction: request that we limit processing of your data in certain circumstances.
  • Objection: object to processing based on our legitimate interests.

To exercise any of these rights, contact us at privacy@leiclara.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados), at cnpd.pt.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (HTTPS/TLS). Our hosting provider, Fly.io, maintains SOC 2 compliance.

No method of transmission over the internet is 100% secure. If you become aware of a security concern, please contact us immediately at privacy@leiclara.com.

8. Governing law

This Privacy Policy is governed by Portuguese law and the applicable regulations of the European Union, including the General Data Protection Regulation (GDPR, Regulation EU 2016/679).

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. If changes are material, we will notify you by email. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact us at:
privacy@leiclara.com