What we collect, where it goes, and when it is deleted

Lisavel is operated by Jelista Strategies Inc., Ontario, Canada. Questions and requests: support@lisavel.com.

Draft. This policy has not yet been approved by the founder and is not in force. It will be dated when it is.

In short. The free check runs in your browser. If you buy a report, your organization's profile and your answers are stored on Cloudflare to build your report and documents. Paddle takes the payment and holds your billing details; we do not store your name or email. No AI is used in this version. Unpaid reports are deleted 30 days after your last visit; paid reports 12 months after purchase or your last visit, whichever is later. You can delete your report at any time. We use no cookies and no advertising trackers.

The free check

Your four answers are evaluated by JavaScript in your browser and kept in your browser's local storage. They are not sent to us while you use the check. When a check starts and when it finishes, the page sends an anonymous count (no identifier, no answers). If you press a buy button, your four answers are sent to us to create your report, so the questionnaire starts from them.

The paid report

What we store

Your report: your organization's type and employee band, the answers and notes you give in the questionnaire, and any organization details you type in for your documents (for example its name). Your report card, documents and filing walkthrough are generated from these each time you open them.
Access: each report has a private link and an access code. We store only a salted hash of the code, so we cannot tell you the code if you lose it, and a lost link or code cannot be recovered.
Payment: to confirm your purchase we read the transaction from Paddle. We store only the transaction id, which product and price it was, and the date. Paddle, not Lisavel, collects your name, email, billing country and card or PayPal details, charges tax, and sends the receipt.
Security: to slow down guessing of access codes, we keep a hashed form of your IP address for one hour.

Who processes it

Paddle (payments). Paddle.com Market Ltd is the merchant of record: it sells you the product, charges tax, and holds your payment details. Charges appear as JELISTA on your statement.
Cloudflare (hosting and storage). The site and your report are served and stored on Cloudflare's infrastructure.
AI. No AI service receives your data in this version. If we add AI features (such as reading uploaded policies), we will name the provider here first and say what is sent.

How long we keep it

Reports that were not bought, or were refunded: deleted 30 days after your last visit.
Paid reports: deleted 12 months after the purchase or your last visit, whichever is later.
"Delete this report now" in your report deletes it immediately.
Purchase records held by Paddle: as long as tax law requires.

We do not send email in this version: no reminders and no marketing.

Anonymous counts

We count events per day: visits by source (for example "search ad"), free checks started and finished, pricing views and clicks, checkouts started, purchases, reports opened and documents downloaded. Each count is a day, an event name and a number. It contains no answers, no identifier and nothing that can be traced to you.

Cookies

We set no cookies. Your browser's local storage holds your free-check answers and, once you have a report, its link and access code so you can return to it. Paddle's checkout window, which opens only when you press a buy button, is governed by Paddle's own policy.

Your rights and how to ask

Write to support@lisavel.com to see, correct, export or delete what we hold. Because we do not store your email, include your report link (not the access code) so we can find it. We answer within 30 days. We follow Canada's PIPEDA.

Changes

If this policy changes in a way that matters, we will say so on this page with the date. The version in force is the one shown here.