This policy explains what personal data we collect, why we collect it, who we share it with, and what rights you have. It covers our website at getliro.com, including the waitlist, the Liro app, and the emails and posts that Liro sends or publishes on behalf of our customers.
We are PixelMakers Studio SRL, a company incorporated in Romania, registered office at Ion Campineanu 23, Sector 1, Bucharest, Romania, VAT number RO43917962. Liro is a brand of PixelMakers Studio SRL. For privacy questions, write to hello@getliro.com.
Words defined in our Terms of Service have the same meaning here.
1. Two different roles
Which parts of this policy apply to you depends on how your data reached us.
We are the controller for data about people we deal with directly: visitors to our website, people who join the waitlist or contact us, and the people who hold accounts in Liro. We decide why and how that data is processed, and this policy describes it.
We are a processor for data our customers put into Liro or connect to it. Our customers are businesses and agencies that use Liro to run their marketing. When one of them imports you as an email contact, collects your email through a signup form, or publishes a post that you reply to, that business decides why and how your data is used. We only act on its instructions.
If you received an email from a business that uses Liro and you want to access, correct, or delete your data, contact that business. You can always unsubscribe with the link at the bottom of the email, and that takes effect straight away. If you contact us instead, we will pass your request to the business and tell you we have done so. Section 4 explains this in more detail.
2. What we collect as controller, and why
2.1 When you visit our website
Our hosting provider processes your IP address, device and browser information, and the pages you request, to deliver the site and protect it against attack and abuse. Our website does not use analytics or advertising cookies.
Legal basis: legitimate interest in operating and securing our website.
Retention: request and security logs for up to 12 months.
2.2 When you join the waitlist
The waitlist collects your email address. When you sign up we also record the time, your IP address, and your browser's user agent, and we send one email asking you to confirm. Confirming adds the time and IP address of the confirmation. We keep this record so that we can show you asked to hear from us.
We use your email address to tell you when Liro opens to you and to send occasional news about the launch. Every email has an unsubscribe link.
Legal basis: your consent, which you can withdraw at any time by unsubscribing or by writing to us.
Retention: until you unsubscribe, or 24 months after you joined if we have not opened Liro to you by then. After you unsubscribe we keep only your email address on a suppression list, so that we never email you again.
2.3 When you contact us
When you write to us we keep your name, email address, and what you wrote, so that we can answer you and keep a record of the conversation.
Legal basis: legitimate interest in answering enquiries and keeping business records, or steps taken at your request before entering into a contract.
Retention: up to 3 years from our last exchange, unless you become a customer, in which case the record moves into your account history.
2.4 When you use Liro
For each person with an account we hold their name, email address, password (stored only as a one-way hash) or the Google account they sign in with, the workspaces and brands they belong to, their role, sign-in and session records including IP address and browser, and a record of actions such as approvals, publishing, sending, and changes to settings.
We use this to give you access, to apply the right permissions, to keep the account secure, to show who approved what, to provide support, to tell you about changes that affect your service, and to investigate abuse.
Legal basis: performance of our contract with your workspace, and legitimate interest in security, abuse prevention, and service administration.
Retention: for the life of the account. When a workspace is closed, its data stays available for export for 30 days and is then deleted from live systems. Database backups expire within 30 days after that. Security logs are kept for up to 12 months.
2.5 Product analytics
We may measure how Liro itself is used, for example which features people use and where they get stuck, with PostHog, hosted in the European Union. Analytics are linked to your account only after you sign in, and we configure them not to record what you type. Where the law requires your consent for this, we ask for it first and you can change your choice at any time.
Legal basis: consent where required, otherwise legitimate interest in understanding and improving the product.
Retention: up to 14 months.
2.6 Billing
We hold your billing name and address, VAT number, plan, credit balance and usage records, invoices, and payment status. Card details are handled by Stripe and never reach our systems.
Legal basis: performance of the contract, and legal obligation for invoicing and accounting.
Retention: as Romanian accounting and tax law requires, generally 10 years for accounting documents. This obligation survives account closure.
2.7 Product news
If you are a customer, we may email you about new features and changes to the product, as the law allows for existing customers. Every message carries an unsubscribe link. Service notices, such as billing and security messages, are not marketing and are sent regardless.
Legal basis: legitimate interest in telling customers about services like the one they already use.
Retention: until you unsubscribe. We then keep the minimum needed to make sure we do not contact you again.
2.8 Security and abuse
We log access to Liro, API calls, security events, and payment risk signals, and we monitor for fraud, intrusion, spam, and breaches of the acceptable use rules in our Terms of Service.
Legal basis: legitimate interest in protecting Liro, our customers, and the people they reach, and legal obligation where the law requires us to act.
Retention: up to 12 months, longer where an investigation or a legal claim requires it.
3. What we do not do
We do not sell personal data. We do not rent it or share it with third parties for their own marketing. We do not use our customers' data, their contacts' data, or data from connected accounts to train AI models, and the AI providers we use do not train on it either under our agreements with them.
4. Data our customers put into Liro
Liro works on behalf of the businesses that use it. Depending on the features a customer uses, the data in its workspace can include:
- Website and brand content. Liro reads the public pages of the website a customer adds, to learn its products, audience, voice, and visual style. Public pages can include the names and photos of people who appear on them.
- Uploads and content. Files, images, documents, drafts, posts, articles, emails, and creatives the customer creates or uploads.
- Email contacts. Names, email addresses, custom fields, list and segment membership, consent records (how, when, and from which IP address someone subscribed), and engagement such as deliveries, opens, clicks, bounces, complaints, and unsubscribes. Emails sent through Liro contain a small image and redirected links to measure opens and clicks.
- Data from connected accounts. When a customer connects an account it owns, such as a Facebook Page, an Instagram business account, an ad account, Google Analytics, or Search Console, Liro reads the data the features need, such as published posts and their engagement, ad performance, site traffic, and search performance. Section 5 describes this for each platform.
For all of it, the customer is the controller. Our role is limited to processing it on the customer's instructions under a data processing agreement, which obliges us to keep the data confidential, secure it, use approved sub-processors only, help the customer answer requests from people like you, notify incidents, and delete or return the data at the end of the contract.
The customer decides what to collect, who to email, what to publish, and how long to keep its data, and its own privacy notice governs. Direct your requests to it.
5. Connected platforms
Customers can connect accounts they own on other platforms. Liro uses a connection only to provide the features the customer uses, only within the permissions the customer granted, and never to post, send, or spend without the approval rules the customer has set. Access tokens are encrypted at rest. A customer can disconnect an account at any time in Liro under Settings → Connections, and disconnecting deletes the stored tokens.
5.1 Meta (Facebook and Instagram)
When a customer connects Meta, Liro can see the list of Facebook Pages and Instagram business accounts the customer manages and chooses to share, publish posts and media to them, and read their posts and insights. If the customer also connects an ad account, Liro can read its ad performance and create, change, pause, and resume campaigns in it. Ad budgets are spent on the customer's ad account and billed to the customer by Meta. Campaigns are created paused, and spending starts only after a person approves it.
You can also remove Liro's access from Facebook directly: go to Settings and privacy → Settings → Business integrations, select Liro, and remove it. Section 13 explains how to ask us to delete your data.
5.2 Google
When a customer connects Google, Liro can read Google Analytics and Search Console data for the properties the customer chooses, and, where enabled, manage a Google Business Profile or Google Ads account the customer owns. If you sign in with Google, we receive your name, email address, and profile picture.
Liro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the features the customer uses, we do not use it for advertising, we do not sell it, we do not use it to train AI models, and our staff read it only with the customer's permission, for security reasons, or where the law requires.
5.3 Other platforms
Customers can also connect LinkedIn, X, TikTok, Pinterest, Shopify, Webflow, Sanity, PostHog, and Voyant. The same rules apply: Liro reads and writes only what the features need, within the permissions granted, and stores tokens encrypted. Each platform's own privacy policy governs what it does with data it holds.
6. AI features
Liro uses AI models to research, write, design, plan, and analyze. To do that we send the relevant request and context, such as the brand kit, the draft being edited, or performance data, to model providers acting as our sub-processors. They process it to return a result and do not use it to train their models.
We do not make decisions about you by purely automated means that produce legal effects or similarly significant effects. Customers decide what Liro publishes, sends, and spends, and our Terms of Service require human approval for those actions unless the customer deliberately turns on more autonomy.
7. Cookies and similar technologies
Strictly necessary. When you sign in to Liro, we set a session cookie named liro.session_token (with the __Secure- prefix on secure connections) that keeps you signed in. Our hosting provider sets cookies that protect the site against attack and bots, and signup forms may use Cloudflare Turnstile to check that you are human. These are set without consent because the service cannot work securely without them.
Analytics. If product analytics are enabled in the app (section 2.5), PostHog stores an identifier in a cookie or in your browser's local storage. Where consent is required, it is set only after you agree.
Our website at getliro.com sets no analytics or advertising cookies. You can clear or block cookies in your browser. Blocking the necessary ones will sign you out of Liro.
8. Who we share data with
We share personal data with service providers who process it on our behalf, under contract, and only for the purposes we set. The current list:
- Cloudflare (United States, global network): hosting, content delivery, DNS, security and bot protection, file storage, page rendering, and AI request routing.
- Neon (database hosted in Frankfurt, Germany): managed PostgreSQL databases.
- Amazon Web Services (email sent from the European Union): delivery of the emails customers send through Liro, and our own emails.
- Stripe (Ireland and United States): payment processing, subscriptions, and invoicing.
- Anthropic (United States): AI models for writing, design, and analysis.
- OpenAI (United States): AI models for writing, analysis, and image generation.
- PostHog (European Union): product analytics, where enabled.
Some services Liro uses receive no personal data from us, only public information: Google PageSpeed Insights (public page addresses, for speed checks), DataForSEO (domains and keywords, for search research), and Unsplash (search terms, for stock photos). Stock photos from Unsplash are loaded from Unsplash's servers, which receive the viewer's IP address under Unsplash's privacy policy.
When a customer connects an account, data moves between Liro and that platform on the customer's instructions, as described in section 5.
We also share data where we have to: with professional advisers under confidentiality, with authorities where the law or a valid order requires it, and with an acquirer if the business is sold, in which case we will tell affected customers.
We give notice before adding a sub-processor that handles our customers' personal data, and customers may object on reasonable data protection grounds, as set out in the Terms of Service.
9. Where your data goes
Our database is hosted in the European Union. Several of the providers above are established outside the EU or operate globally, so some data reaches countries without an adequacy decision, principally the United States.
For those transfers we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses, together with the measures in section 10. Ask us and we will tell you which safeguard applies to a specific provider.
10. How we protect data
Data is encrypted in transit. Credentials for connected accounts are encrypted at rest with a key held separately from the database. Each workspace is isolated from every other. Access inside Liro is controlled by role, and reviewers see only the brands they are invited to. Publishing, sending, and ad spend go through an approval step. Administrative access on our side is limited to the people who need it. We monitor for intrusion and abuse and keep backups.
No system is perfectly secure. If a breach affects personal data we hold, we notify the supervisory authority and affected people as the GDPR requires, and we notify affected customers within 72 hours of becoming aware.
11. Your rights
Under the GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, to receive it in a portable form, and to withdraw consent at any time without affecting processing already carried out. Where processing rests on legitimate interest, you may object and we will stop unless we have compelling grounds that override your interests.
To exercise a right, write to hello@getliro.com. We may ask for information to confirm who you are. We respond within one month, and we will tell you if we need longer because the request is complex.
If your data reached us through a business that uses Liro, we will redirect you to that business. See section 4.
If you are unhappy with how we handle your data, you can complain to the Romanian supervisory authority, ANSPDCP, at dataprotection.ro, or to the authority in the EU country where you live or work.
12. Children
Liro is a business tool and is not directed at children. You must be at least 18 to hold an account, and we do not knowingly collect personal data from children under 16 through our website or the waitlist.
13. Deleting your data
If you have a Liro account, write to hello@getliro.com from the email address on your account and ask us to delete it. If you are the owner of a workspace, say whether the workspace should be deleted too. We confirm the request, delete your data from live systems within 30 days, and backups expire within 30 days after that. We keep only what the law requires us to keep, such as invoices.
If you connected Facebook, Instagram, or another platform, you can disconnect it in Liro under Settings → Connections, which deletes the stored access tokens straight away, or remove Liro from the platform's own settings (section 5.1 for Facebook). To have the data Liro collected through the connection deleted as well, write to us as described above.
If you joined the waitlist, use the unsubscribe link in any email from us, or write to us and we will delete your entry.
If a business emails you through Liro, use the unsubscribe link in its email, and contact that business to have your data deleted. See section 4.
14. Changes
We update this policy when our processing changes. Material changes are announced by email to customers and posted here at least 30 days before they take effect. The date at the top always shows the current version.
15. Contact
PixelMakers Studio SRL
Ion Campineanu 23, Sector 1, Bucharest, Romania
VAT number RO43917962
Email: hello@getliro.com
Web: getliro.com