This page is a translation provided for information only. The French version is the only legally binding one.
Privacy Policy
1. Who is responsible for your data?
The data controller is BENYWEB STUDIO (Lektify), a simplified joint-stock company (SAS) registered with the Lyon Trade and Companies Register (RCS) under number 130 420 821, with its registered office at 64 rue Waldeck Rousseau, 69006 Lyon, represented by its President, Ms. Sonia Boufella. Personal data contact: contact@lektify.app.
Lektify acts as data controller for the technical foundation of the Platform (accounts, authentication, reading analytics, AI interactions, security, payment via transaction identifiers). If a Creator reuses the data of its Buyers for its own purposes (marketing, newsletter, etc.), it then acts as an independent data controller and bears sole responsibility for compliance.
2. What data, for what purposes, on what legal basis?
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Account management | Email, hashed password, role, preferences | Create/manage the account, authenticate | Performance of the contract |
| Payment | Transaction identifiers (no card stored by Lektify; card and KYC processed by Stripe) | Payments, commissions, fraud prevention | Performance of the contract + legal obligation |
| Content created | Lekty'Books, comments, notes, highlights | Publish and personalize the experience | Performance of the contract |
| Reading analytics | Anchored reading events, timestamps, progress | Measure reading, improve the product | Legitimate interest |
| Audience measurement and activity | Page views (page address, referring site, device type, country), non-reversible daily technical fingerprint; for logged-in accounts, days of use and last activity | Traffic and usage statistics, service improvement, error detection | Legitimate interest (cookieless audience measurement, designed to fall within the consent exemption of the French Data Protection Authority (Commission nationale de l'informatique et des libertés, CNIL)) |
| AI interactions | Questions asked to the "Lekty" tutor + answers | Provide the AI tutor/quiz, security | Performance of the contract |
| Communications | Email, content of transactional messages | Service notifications, support | Performance of the contract / legitimate interest |
| Cookies and trackers | Essential cookies (session) + local preferences (no third-party tracker without action) | Operation of the service | Necessity (essential) · explicit action (external media) |
| News from Lektify | Email, first name, proof of consent | Send Lektify news and offers | Consent (optional checkbox, can be withdrawn at any time) |
| News from a Creator | Email, name, proof of consent | Transmit your address to the Creator whose news you agreed to receive, for that sole purpose | Consent (optional checkbox at payment) |
| Free trial: abuse prevention | Simplified email (without dots or "+"), encrypted and non-reversible fingerprint of the IP address, fingerprint of the bank card provided by Stripe (never the card number) | Reserve the free trial of a Lekty'Book to a single person and prevent repeated trials | Legitimate interest (protecting Creators against fraud) |
| Legal obligations | Billing and identification data | Accounting, legal requests from authorities | Legal obligation |
As a rule, Lektify does not collect sensitive data (Article 9 of the General Data Protection Regulation (GDPR, RGPD)).
3. Recipients and processors
Your data is processed by Lektify and by processors (Article 28 GDPR), bound by a data processing agreement (DPA):
| Processor | Role | Location | Transfer outside the EU |
|---|---|---|---|
| Vercel | Website hosting | United States | Yes: standard contractual clauses (SCCs) |
| Supabase | Database, authentication, content storage | EU (Ireland) | No |
| Stripe | Payment and identity verification (KYC) of Creators | EU (Ireland) | Depending on the data flow: SCCs where applicable |
| Anthropic (Claude) | "Lekty" AI tutor + quiz generation | United States | Yes: SCCs |
| OpenAI | Speech synthesis (audio narration) | United States | Yes: SCCs |
| ElevenLabs | Voice cloning (upcoming feature) | United States | Yes: SCCs |
| AWS SES | Sending emails | EU | No |
| Hostinger | Domain name / email | EU | No |
Creators. When you purchase a Lekty'Book, the Creator (seller) receives the information needed for your order. The Creator receives your email address to send you its news only if you checked the optional box provided for that purpose at payment. The Creator then becomes the controller of that processing: a notice specific to each Creator, accessible from that checkbox ("Learn more"), specifies its identity, the purpose, the retention period and your rights. You may withdraw this consent at any time from Settings → Emails; Lektify then notifies the Creator.
Lektify does not sell your data. It may be disclosed to authorities upon a lawful request.
4. Transfers outside the European Union
Some processors are established in the United States (Vercel, Anthropic, OpenAI, ElevenLabs). These transfers are governed by the standard contractual clauses (SCCs) adopted by the European Commission (Commission Implementing Decision (EU) 2021/914) and, where applicable, by the provider's participation in the EU-U.S. Data Privacy Framework, supplemented by appropriate additional measures (Articles 44 to 49 GDPR).
5. Retention periods
| Data | Period |
|---|---|
| Account and associated data | Duration of the contractual relationship, then deletion/anonymization |
| Content (Lekty'Books, notes, highlights) | For the duration of the publication / subscription |
| Reading analytics | In accordance with CNIL recommendations on audience measurement |
| Audience measurement (page views) | 13 months maximum, then automatic deletion |
| Technical error log | 6 months maximum |
| AI interactions (logs) | Strictly necessary period |
| Free trial abuse prevention signals | 12 months after the start of the trial, then deletion |
| Billing / accounting data | 10 years (accounting obligation) |
| Creators' KYC data | Retained by Stripe in accordance with its obligations |
| Cookies / trackers | 13 months maximum (CNIL) |
6. Use of your data by AI: transparency (AI Act)
Lektify uses third-party AI systems (Anthropic, OpenAI, ElevenLabs). In accordance with Article 50 of Regulation (EU) 2024/1689 (AI Act): you are informed when you interact with an AI ("Lekty" tutor), from the first interaction; AI-generated content (audio, images, synthesized text) is labeled as such. Your questions and content are not used to train the models of AI providers without a legal basis.
7. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the rights of access, rectification, erasure, restriction, objection, portability (including the export of your notes and highlights in a structured format), and the right to withdraw your consent at any time. You may also set instructions regarding the handling of your data after your death (post-mortem directives).
To exercise these rights: contact@lektify.app. Proof of identity may be requested. A response will be provided within a maximum of one month (Article 12 GDPR).
You may file a complaint with the CNIL: https://www.cnil.fr · 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
8. Security
Lektify implements appropriate technical and organizational measures (Article 32 GDPR): password hashing, encryption of data in transit (HTTPS), access segregation, logging, use of reputable processors.
9. Data processing agreement (DPA) and record
Lektify enters into a data processing agreement (DPA) with its processors in accordance with Article 28 of the GDPR and maintains a record of processing activities (Article 30).
10. Cookies and trackers
Lektify does not place any advertising trackers or third-party audience measurement cookies. The only non-essential trackers are external media, the referral cookie and the Creator link cookie, all subject to your consent via the banner (Article 82 of the French Data Protection Act (loi Informatique et Libertés)). In detail:
| Tracker | Type | Purpose | Basis / duration |
|---|---|---|---|
Supabase authentication cookies (sb-*) | Essential (exempt) | Keep your session logged in | Necessary for the service · session/renewal duration |
Local storage of preferences (lk-reader-settings, reading positions, interface settings) | Functional (exempt) | Remember your reading settings on your device | Necessary for the service · stored on your device only |
Local storage lk-media-consent | Functional (exempt) | Remember your choice to "always load external videos" | 13 months maximum (CNIL), then requested again |
| Cookieless audience measurement | Exempt from consent (no cookie, no storage on your device) | Count visits and page views to improve Lektify | No cookie placed · your IP address and your browser are used only to compute a salted, non-reversible daily fingerprint that changes every day: it is impossible to track you from one day to the next or from one site to another · no data transmitted to any third party · statistics retained for no more than 13 months |
Referral cookie (lk_ref) | Subject to consent | Remember the person who recommended Lektify to you, so that they receive their commission if you subscribe | Placed only after your consent in the banner · duration 60 days · no sharing with third parties · refusal has no consequence (a referral code can be entered at sign-up) |
Creator link cookie (lk_link) | Subject to consent | Retain the link of a Creator (published on a social network) through which you discovered its Lekty'Book, in order to inform the Creator, in the form of a statistic, that its post led to a purchase | Placed only after your consent in the banner · duration 30 days · contains only the link code, no data about you · no sharing with third parties · the Creator only sees a number of sales and a total amount, never your identity · refusal has no consequence (a purchase made right after the click is still counted, without a cookie) |
| External videos (YouTube, Vimeo, Dailymotion) embedded in Lekty'Books | Third-party, subject to your action | Playback of videos chosen by the Creator | The iframe is loaded only after you click "Load video" (the provider may then place its own cookies, under its own policy) |
The "Load video" placeholder remains available to those who decline automatic loading.
Managing your choices. A consent banner is shown to you on your first visit ("Accept all", "Reject all", "Customize" by category). Your choice is retained for 13 months maximum, then requested again. You may change it at any time via the "Manage my cookies" link at the bottom of the legal pages (withdrawing consent is as easy as giving it). If a new category of trackers is introduced (e.g., audience measurement, marketing), the banner will be displayed again to obtain specific consent before any activation.
11. Amendments
Lektify may amend this policy. The applicable version is the one published on lektify.app, with an indication of the date of the last update.