Privacy policy

Controller

Loomens technologies (لومانس تكنولوجيا), Société à Responsabilité Limitée (SARL, limited liability company)

Address

Marina Manzel Djerba, 4180 Houmet Essouk, Médenine, Tunisie (مارينا منزل جربة 4180 حومة السوق مدنين)

RNE / Matricule fiscal

RNE / Identifiant unique (matricule fiscal): 1962151Y

Email

loomens.dev@gmail.com

Phone

+216 29 183 841

• Account and sign-in: name, email address, password (stored hashed), profile picture and identifier from GitHub or Cloudflare if you sign in with them, sessions (date, IP address, browser).
• Profile: name, business phone, country, language, theme, how you heard about us, onboarding progress.
• Connected services: GitHub and Cloudflare access tokens and Filebase access keys (encrypted), Cloudflare accounts used for publishing.
• Payments: chosen offer, amount, transfer reference, discount code, status, transfer receipts you send us and, for online payment, the transaction details sent by the provider (never your full card number).
• Credits: credit history (purchases, spending, reservations, releases).
• Searches and businesses: keywords and areas of your searches, business data from public Google Maps listings collected through Apify (name, category, address, phone, opening hours, rating, public reviews, photos), your notes, pipeline stages and follow-ups.
• Generated websites: files, texts, photos, versions, comments, publications and aggregated visit statistics (visits per day, with no personal data about visitors).
• AI usage: conversations with the assistant, change requests, sales practice sessions, screenshots of your websites taken for the AI, model usage logs (type of action, volume, cost).
• Launch waitlist: email or WhatsApp number, the offer you are interested in, language, a hash of the IP address, browser.
• Affiliate program: for each visit that arrives through an affiliate's link or page, the code, a visitor identifier (lm_vid cookie), a hash of the IP address, the country, the type of device, the landing page, the site it came from and the campaign parameters; the link between an account and the affiliate who brought it; for affiliates, their commissions, their payouts, their bank details (encrypted RIB, account holder, bank) and transfer receipts. An affiliate never sees the full identity of the people they bring: only a masked email address, what they bought and the matching commission.
• Creator page: the display name, photo, texts, video link and links the affiliate chooses to publish (they are public); reports sent by visitors (reason, detail, a hash of the IP address).
• Application to the creator program: name, email, description of the audience, message, language, a hash of the IP address, type of device.
• Acceptance of the terms: accepted versions, date, a hash of the IP address, browser.
• Cookies and local storage: sign-in session, language (lm-lang), theme (lm-theme), sidebar display, acceptance of the terms at sign-up (lm-consent, 30 minutes), visitor identifier (lm_vid), the affiliate link you arrived through (lm_ref), landing page theme (local storage). No advertising cookies and no third-party cookies.
• Support: the messages you send to support (contact form, email, app), your name and email address, attachments, the team's replies and the result of the automatic sorting of your message (category, urgency, language).
• Technical server logs: IP address, date, requested page, errors.

Business data found by searches is information those businesses published. The member who contacts them is responsible for how they use it (see the terms and conditions).

Your data is collected to:

• create, secure and manage your account;
• provide the service: finding businesses, generating, changing and publishing websites, the AI assistant, sales practice;
• manage credits, plan requests, payments and our accounting obligations;
• keep you informed: payment confirmation, bank details, service notifications, answers to your requests;
• prevent abuse and keep the service secure (usage limits, logs);
• measure and improve the service and control its costs (aggregated statistics);
• tell people on the waitlist when LeadMax opens;
• run the affiliate program: attribute sign-ups, compute commissions, pay affiliates, review applications and pages, prevent fraud;
• keep proof that the terms were accepted.

This processing is based on your consent, on the contract between us and on our legal obligations. We don't sell your data and don't use it for advertising.

Your data is available to authorised Loomens technologies staff and, as far as the service needs it, to our processors:

• Cloudflare: hosting, database, file storage and running the service;
• OpenRouter: access to artificial intelligence models (content of the requests sent to the AI);
• Apify: collecting public business data from Google Maps;
• TypeSafe AI: automatic classification of the messages sent to support (subject and text of the message, no attachment and no sender address), to route them faster to the right person;
• GitHub and Cloudflare: signing in to your account, if you choose these methods;
• Filebase: storing the photos of members' websites, in the member's own Filebase account;
• the licensed Tunisian payment provider for online payment, when available, and our bank for transfers.

Some of these providers are located outside Tunisia: data is only sent to them as far as the service needs it. It may also be disclosed to the authorities on a lawful request.

• Account, profile, searches, businesses, websites, conversations: while the account is active, then 3 years after it is closed or after the last activity.
• Payments, plan requests and credit history: 10 years, as accounting obligations require.
• Proof of acceptance of the terms: while the account is active, then 3 years.
• Technical logs and AI usage logs: 12 months.
• Screenshots taken for the AI: 7 days.
• Support requests: 2 years after they are closed; their attachments: 1 year after closing.
• Launch waitlist: until launch, then 6 months.
• Visits recorded for the affiliate program: 13 months. Referrals, commissions and payouts: 10 years, like payments.
• Creator page: as long as the affiliate keeps it, then deleted with the account. Applications to the creator program and page reports: 12 months after they were handled.
• Tokens and keys of connected services: until they are disconnected or the account is deleted.
• Cookies: session 30 days, language and theme 12 months, sign-up acceptance 30 minutes, visitor identifier 12 months, affiliate link for the attribution delay shown on the program page.

After these periods, data is deleted or anonymised.

Connections are encrypted (HTTPS), passwords are hashed, access tokens and keys are encrypted, IP addresses of the waitlist and of acceptances are kept only as a hash, and access to data is limited to authorised people.

Under Organic Law No. 2004-63 of 27 July 2004, you have:

• a right of access to your personal data;
• a right to rectification of inaccurate or incomplete data;
• a right to object to processing for legitimate reasons, and at any time to marketing;
• a right to deletion of your data, subject to legal retention periods (payments);
• the right to withdraw your consent (for example for the waitlist).

Businesses whose data appears in LeadMax can exercise the same rights with us. You can also file a complaint with the Instance Nationale de Protection des Données Personnelles (INPDP), the Tunisian data protection authority.

Email

loomens.dev@gmail.com

Phone

+216 29 183 841

Post

Loomens technologies SARL, Marina Manzel Djerba, 4180 Houmet Essouk, Médenine, Tunisie

Tell us what you are asking for and the email address of your account. We may ask you to prove your identity. We answer free of charge within 30 days.

We may change this policy. The date of the last update is shown at the top of this page; if the change is significant, the new version is shown to you and must be accepted before you keep using the service.