Privacy Policy

1. Controller / operator

License Radar is provided by Sveves Labs. Privacy contact: info@sveves.org.

This Policy explains how we collect, use, disclose, and protect personal information when you use our websites and application.

2. Information we collect

Account and profile data (name, email, authentication data, optional 2FA settings).

Workspace and business data you submit (business profiles, locations, employee assignments, compliance records, tasks, reminders, notification preferences).

Uploaded documents and files you choose to store in the workspace.

Billing-related identifiers and subscription status from our payment processor (we do not store full payment card numbers).

Support communications and limited operational notes.

Technical and security data such as IP address, device/browser information, logs, cookies/session tokens, and diagnostic events needed to operate and secure the service.

When you request or confirm an official-source match: source identifiers, normalized public fields, hashes, timestamps, source links, and encrypted raw snapshots for auditability.

3. How we use information

To create and manage accounts and workspaces; provide reminders, tasks, documents, and source-check features; process subscriptions; send service emails; prevent fraud and abuse; improve reliability and security; and comply with law.

We do not sell personal information for money. We do not use the contents of your uploaded private documents for advertising.

4. Legal bases (where applicable)

Where GDPR or similar laws apply, we process data as needed to perform our contract with you, for legitimate interests in securing and operating the service (balanced against your rights), with your consent where required, and to meet legal obligations.

5. Sharing

We share data with service providers that help us run the product (hosting, databases, object storage, email delivery, error monitoring, and Lemon Squeezy or a successor for payments), under contractual confidentiality and security obligations.

We may disclose information if required by law, legal process, or to protect rights, safety, and security.

We do not share private uploaded documents with official-source connectors. Source connectors only use the identifiers and parameters needed for the configured official lookup or import.

6. Cookies and sessions

We use essential cookies/session tokens for authentication and security. We do not rely on third-party advertising cookies for the core product experience.

7. Retention and security

We retain information while your account is active and as reasonably needed for audits, security, disputes, backups, and legal obligations, then delete or anonymize it when no longer needed.

We use encryption in transit, access controls, password hashing, private object storage with short-lived signed download URLs, and audit logging. No method of transmission or storage is 100% secure.

8. Your rights (including U.S. state privacy laws)

Depending on where you live, you may have rights to access, correct, delete, or export personal information; to appeal a denial; to opt out of “sale” or “sharing” of personal information as those terms are defined under laws such as the CCPA/CPRA (California), CPA (Colorado), CTDPA (Connecticut), VCDPA (Virginia), and similar state laws; and to limit use of sensitive personal information where applicable.

Sveves Labs does not sell personal information in the conventional sense. If a future feature could be considered “sharing” for cross-context behavioral advertising under California law, we will provide required notices and opt-out mechanisms.

To exercise rights, email info@sveves.org with sufficient detail to verify your request. We will not discriminate against you for exercising privacy rights. Authorized agents may submit requests where state law allows, subject to verification.

Workspace owners control business records in the product; personal data requests may be limited by another party’s rights, security needs, or legal retention duties.

9. International transfers

We may process data in Serbia, the EU/EEA, the United States, or other countries where we or our processors operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

The service is for business and professional users age 18+ (or the age of majority). We do not knowingly collect personal information from children.

11. Changes

We may update this Policy. The “Effective” date above will change, and material updates may also be communicated by email or in-product notice where appropriate.