Lanorx ("we" or "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect from users of our no-code landing page builder platform, how we use and store that data, and the rights you have regarding your personal information. We aim to be transparent about our practices and use plain language that everyone can understand.

A. Information We Collect

Email Address: We collect your email when you create an account or contact us. This is used for account login, verification, and to communicate important updates.
IP Address: When you use Lanorx, our servers may log your IP address for security, fraud prevention, and basic diagnostic purposes (e.g., to identify potential abuse or troubleshoot issues).
Project Data: We store the content you create on Lanorx, including landing page content, designs, colors, and configurations. This data is necessary to provide the service.
Collected Emails: If you use Lanorx's email collection feature on your landing pages, we store the email addresses submitted by your visitors. This data belongs to you and is collected on your behalf.
Usage Data and Analytics: We use Google Analytics to understand how users interact with our platform. This includes information such as pages visited, time spent on pages, browser type, device information, and approximate geographic location. Google Analytics uses cookies to collect this data (see our Cookie Policy for details).
Payment Information: If you subscribe to a paid plan, we collect payment information through our payment processor, Paddle. We do not directly store your credit card details on our servers. Paddle handles payment processing and stores payment information securely.
Usage Logs: We maintain logs of your activity within Lanorx (such as features used or error events) to help us improve the service and fix problems. These logs may include technical details like browser type or timestamps.

We collect only the data necessary to provide and enhance Lanorx for you.

B. How We Use Your Data

We use the collected information for purposes that enable you to use Lanorx effectively and help us maintain a reliable service:

Providing the Service: Your email and login credentials allow you to access your account securely and use Lanorx's features. Your project data is stored so you can create, edit, and publish landing pages.
Email Collection Feature: When visitors submit emails on your landing pages, we store those emails on your behalf so you can access and export them. We act as a data processor for this information—you are the data controller.
Analytics and Improvement: We use Google Analytics to understand how users interact with Lanorx, identify popular features, and improve our platform. This helps us make data-driven decisions about new features and user experience improvements.
Communication: We may use your email to send important notices about your account, such as password‑reset emails, security alerts, updates to our policies, subscription confirmations, or occasional product updates. We won't spam you or send marketing emails without your consent.
Payment Processing: We use Paddle to process subscription payments. Your payment information is handled securely by Paddle according to their privacy policy and PCI compliance standards.
Improving and Fixing Issues: We analyze usage patterns and error logs to understand how Lanorx is performing and to identify bugs or areas for improvement.

We do not sell your personal data to third parties or use it for advertising purposes beyond Google Analytics. All data is used internally or with trusted service providers as described below, strictly to serve you and operate Lanorx.

C. Third‑Party Services and Data Sharing

Lanorx uses trusted third-party services to run our platform. We do not share your data with any third parties for marketing purposes. However, we rely on the following third parties to help us deliver the service:

Google Analytics: We use Google Analytics to track and analyze how users interact with our platform. Google Analytics collects data about your usage patterns, device information, and approximate location through cookies. This data is anonymized and aggregated. Google may use this information in accordance with their privacy policy. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on or by blocking analytics cookies in your browser settings. For more information, see Google's Privacy Policy at https://policies.google.com/privacy
Paddle (Payment Processing): We use Paddle as our payment processor for subscription management. When you subscribe to a paid plan, Paddle collects and processes your payment information (credit card details, billing address, etc.). Paddle is PCI DSS compliant and handles payment data securely. We receive limited information from Paddle such as subscription status and transaction IDs, but we do not store your credit card details. For more information, see Paddle's Privacy Policy at https://www.paddle.com/legal/privacy
Cloud Hosting Providers: Lanorx is hosted on cloud infrastructure (such as web servers and databases provided by reputable providers like Vercel and database services). Your data (including account information, project data, and collected emails) is stored on these servers. Our cloud providers store and process data on our behalf to keep Lanorx running. We choose providers that employ strong security measures to safeguard data. These providers are not allowed to access or use your data except as needed to maintain the service.
Email Delivery Service: We may use a third‑party email service (such as Resend) to send emails such as verification codes, password resets, or notifications. This means your email address and the content of the message pass through that email provider. We ensure any such provider has appropriate privacy and security practices. They will only use your information to send the emails we instruct them to send.
Error Tracking: We may use error-tracking tools (like Sentry) to automatically log errors in the Lanorx application. Error reports may include technical information like error messages, stack traces, browser information, but we configure these tools not to collect sensitive personal data.

We only partner with companies that respect user data and have agreements in place to ensure your data is protected and used only for the specific services we need.

We will never sell your personal information or share it for purposes not mentioned in this Privacy Policy. If we ever need to integrate a new third‑party service that affects personal data, we will update this policy and notify you when appropriate.

D. Data Retention

We keep your personal data only as long as necessary for the purposes described above:

Account Information: Your email, profile data, and project information are kept until you delete your account or we no longer need it to provide the service.
Project Data: Your landing page content and configurations are stored as long as your account is active. If you delete a project, it is permanently removed from our servers.
Collected Emails: Emails collected through your landing pages are stored until you delete them or delete the associated project. You can export and delete collected emails at any time.
Payment Data: Subscription and payment history is retained as required by law for tax and accounting purposes. Payment details (credit card numbers) are stored by Paddle, not by us.
Server Logs: Server logs and error reports are typically retained for a short period (e.g., 30-90 days) and periodically purged, unless we need to keep them longer to investigate a specific problem.
Analytics Data: Google Analytics data is retained according to Google's data retention policies (typically 26 months by default, but we may configure shorter retention periods).

If you cancel your account or request deletion, we will erase or anonymize the personal data associated with your account (except for data we are required to keep by law or for legitimate business purposes, such as payment records).

Backup copies of data may exist temporarily in our archives; if so, we will securely store and eventually delete them in the normal backup cycle.

E. Your Rights Regarding Your Data

We respect your control over your personal information. Depending on your jurisdiction (especially if you are in the European Union under the GDPR), you have certain rights concerning the data we hold about you:

Access: Request a copy of the personal data we hold about you.
Correction: Correct or update inaccurate or outdated personal data.
Deletion: Request deletion of your personal data ("right to be forgotten").
Objection and Restriction: Object to or restrict certain processing of your data.
Data Portability: Request a copy of your data in a common format (e.g., CSV for collected emails, JSON for project data).
Withdraw Consent: Withdraw consent at any time if we rely on it for processing (such as for marketing emails or analytics).

These rights are subject to legal limits. If we cannot fulfill a request, we will explain why.

To exercise these rights, please contact us (see Contact Us below). We will respond as soon as possible, and within the timeframe required by applicable law (e.g., 30 days for GDPR requests).

EU residents also have the right to lodge a complaint with their local data‑protection authority, but we encourage you to contact us first so we can address your concerns directly.

F. Data Security

We take the security of your personal data seriously and implement reasonable measures to protect it from loss, misuse, or unauthorized access. Lanorx uses industry‑standard practices such as:

Encryption: HTTPS (TLS) encryption for data in transit
Authentication: Secure password hashing and session management
Access Controls: Limited access to production data, with role-based permissions
Regular Updates: Keeping our software and dependencies up to date with security patches
Monitoring: Logging and monitoring for suspicious activity

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security of your data. If we ever experience a data breach that affects your personal information, we will notify you and the appropriate authorities as required by law.

G. Children's Privacy

Lanorx is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13 years old, and our service is designed for adult users or those at least in their mid‑teens and above. If you are under 13, please do not use Lanorx or provide any personal data to us.

If we learn that we have collected personal information from a child under 13, we will promptly delete that information. Parents or guardians who believe a child has provided personal data to Lanorx should contact us so we can remove it.

H. International Data Transfers

Lanorx is operated from South Korea, but we use cloud services that may store data in various locations around the world (including the United States and Europe). By using Lanorx, you consent to the transfer of your data to these jurisdictions.

We ensure that any international data transfers comply with applicable data protection laws, such as GDPR. We use service providers that provide adequate safeguards for data protection, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Privacy Shield certification (where applicable)
GDPR-compliant data processing agreements

If you have concerns about international data transfers, please contact us.

I. Refund and Cancellation Policy

Lanorx is a digital landing page builder platform. We apply the following refund and cancellation policy to our paid subscriptions:

Withdrawal Period: You may withdraw from your purchase within 14 days of payment. If you request a refund within this period, we will issue a full refund.
How to Request a Refund: Please email us at grw05428@gmail.com. Include your account information (email address) and the reason for the refund request.
Refund Processing Time: We will process your refund within 5 business days of receiving your request. Refunds will be issued through Paddle to the original payment method used during the purchase.
Exceptions: Refunds may not be granted in the following cases:
- If the service has been actively used (e.g., creating and publishing landing pages, collecting emails).
- If the refund request is made after the 14-day withdrawal period.
Subscription Cancellation: You can cancel your subscription at any time. Upon cancellation, your subscription will remain active until the end of the current billing period, and you will not be charged again. You can continue to use paid features until the subscription expires.

J. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

Email (privacy inquiries or data requests): grw05428@gmail.com
Email (general support): grw05428@gmail.com

You can also write to us at:

Dchool, Na-B01, 125-20 Yeokgok-ro 496beon-gil, Ojeong-gu, Bucheon-si, Gyeonggi-do, 14406, Republic of Korea

By using the Lanorx website and services, you acknowledge that you have read and understood this Privacy Policy. We appreciate your trust and are committed to handling your personal data responsibly, transparently, and with care.

(Last updated: January 26, 2025)