Privacy Policy

Lixor is a trading name of Intelliwav LLC, a limited liability company in the State of Washington, USA. Address: 37 103rd Ave NE, Unit 502, Bellevue, WA 98004, USA. Privacy contact: support@lixor.ai. We have not appointed a data protection officer because the law does not require us to. Anthony Corneto is the person responsible for privacy at Lixor.

If your bar or restaurant uses Lixor and added you to its team, the business is responsible for what it records in Lixor about you, such as your name, your email address and which counts you made. In legal terms it is the controller and we are its processor. Ask the business first if you want to see, correct or delete that data. We will help it respond, and if you write to us we will pass your request on.

For everything else in this policy, Lixor decides how the data is used and is the controller: your login, our billing records, our support conversations with you, how the product is used, and security logs.

We do not collect your precise location. We do not want sensitive data such as health or biometric information, and the service does not need it. Please do not enter it. We do not create voiceprints or identify anyone by their voice.

You have to give us account details for us to provide the service. Everything else is optional or depends on the features you use. We do not make decisions about you by automated means that have legal or similarly significant effects.

Lix, the in-app assistant, is an AI system. When you ask it a question, your question and a summary of your business's inventory data are sent to OpenAI to produce the answer. Spoken product lists are transcribed by OpenAI. Photos of bottles are analysed by OpenAI. Photographs of delivery invoices are sent to Google's Gemini service so it can read the line items off them. The voice that speaks prompts to you is generated by ElevenLabs from product names and fixed phrases.

These providers act on our instructions. We do not use your data to train AI models. OpenAI's terms do not allow it to use data sent through its programming interface to train its models, and it keeps that data for up to 30 days to monitor for abuse and then deletes it. We use Google's Gemini API on its paid service, not its free tier. Under Google's terms for the paid service, Google does not use your prompts or responses, including invoice photographs, to improve its products; it keeps them only for a limited time to detect abuse. AI answers can be wrong, so check anything that matters.

We use service providers to run Lixor. The full list, with what each does and where, is at lixor.ai/legal/subprocessors. The main ones are Supabase (database and storage), Vercel (web hosting), OpenAI and Google (AI features), PostHog (analytics), Sentry (crash reports), Resend (email) and Stripe (payments).

We also disclose data: to the point-of-sale or distributor systems you choose to connect; to Apple and Google to deliver the apps and notifications; to authorities or courts where the law requires it; to professional advisers; and to a buyer or successor if our business is sold or reorganised, under the same protections.

Alerts to Lixor staff. When someone signs up, a payment fails, a trial is ending or a user flags an answer from Lix, an alert is sent to a private Telegram chat used by Lixor staff. Depending on the alert it contains the organisation's name, the person's name and email address, and, for flagged answers, the question asked and Lix's answer. Our internal operations assistant, which uses Anthropic's Claude, can look up users and inventory records in our database when Lixor staff ask it a question, and its answers appear in the same Telegram chat. Telegram acts under its own privacy policy and we have no data processing agreement with it.

We do not sell your personal data. We do not use the data you enter into Lixor for advertising. The Meta Pixel described in section 7 is separate: outside Europe it tells Meta about visits to our pages.

See lixor.ai/cookies. In short:

Web. We keep you logged in and remember your language with browser storage that is necessary for the service. We also use PostHog analytics, which stores a cookie and data in your browser's local storage, records clicks and form submissions on our pages, and, once you are logged in, links them to your account (your user ID and email address). Session recording is on for the web app today. We do not ask for consent before this runs and there is no switch to turn it off in Lixor today; to object, write to support@lixor.ai.

Mobile apps. PostHog records screens of your sessions. Text you type into fields is masked; other text on screen and images are not. There is no setting to turn this off. Crash reports go to Sentry with your email address, username and IP address removed.

Advertising. Outside Europe, the Meta Pixel loads on every page of lixor.ai, including pages inside the logged-in Lixor web app. It does not load for visitors we place in Europe (the EEA, the United Kingdom, Switzerland and the rest of geographic Europe), which we judge from the country of your IP address; if we cannot tell where you are, it does not load. It is not in the mobile apps.

Lixor is operated from the United States and your data is stored there. The United States does not have a general data protection law equivalent to Europe's. We protect transfers in two ways. Many of our providers are certified under the EU-US Data Privacy Framework, the UK Extension to it and the Swiss-US Data Privacy Framework, which the European Commission, the UK government and the Swiss Federal Council have recognised as adequate. For the others, and between us and our business customers, we use the European Commission's standard contractual clauses, with the UK addendum and Swiss amendments. Write to support@lixor.ai for a copy.

Countries that receive personal data: United States.

We do not delete most data on a schedule. Data is kept until your account is deleted or you ask us to delete it. To delete an account, use Delete Account in the mobile app under Settings, or email support@lixor.ai from the account's email address with the subject "Account Deletion Request" (see lixor.ai/delete-account). We acknowledge an emailed request within 72 hours, complete the deletion within 30 days. Our database backups are kept on a rolling 7-day basis; deleted data drops out of them within that window.

Deleting an account removes your records from our database. It does not currently remove photos or voice recordings you uploaded from our file storage, which can remain after deletion.

Data is encrypted in transit and is encrypted at rest by our database and hosting providers. Each business's data is separated from every other's by access rules enforced on our servers. Access to production systems is limited to the founder; no other staff member or contractor holds it. Photos you upload (of bottles, shelves and invoices) are stored in our file storage at long web addresses that anyone who has the address can open without signing in; they are not access-controlled. No system is perfectly secure. If a breach affects you, we will tell you and the relevant authorities as the law requires.

Depending on where you live, you have the right to: see the data we hold about you and get a copy; have it corrected; have it deleted; restrict or object to our use of it, including any use based on our legitimate interests; receive it in a portable format; and withdraw consent at any time where we rely on consent. You can delete your account and its data yourself in the mobile app under Settings, or by emailing support@lixor.ai (section 9). You can download your count results as Excel spreadsheets in the web app; for other data, write to support@lixor.ai.

To use any right, write to support@lixor.ai. We answer within one month. We may need to check who you are. It is free.

You can complain to your data protection authority. In the EU, that is the authority in the country where you live or work (list: edpb.europa.eu/about-edpb/about-edpb/members_en). In the UK, the Information Commissioner's Office (ico.org.uk). In Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch). We would like the chance to put things right first. If you send us a complaint about how we handle your data, we will acknowledge it within 30 days and tell you the outcome without undue delay.

Brazil. The Lei Geral de Proteção de Dados gives you the rights in Article 18, including confirmation that we process your data, access, correction, anonymisation or deletion of unnecessary data, portability, information about who we share data with, and withdrawal of consent. Our person in charge of data protection (encarregado) is Anthony Corneto, support@lixor.ai. You may complain to the Autoridade Nacional de Proteção de Dados (gov.br/anpd).

Japan. Business operator handling personal information: Intelliwav LLC, 37 103rd Ave NE, Unit 502, Bellevue, WA 98004, USA. Representative: Anthony Corneto. Purposes of use: section 4. Security control measures: section 10. Your data is stored in the United States, which has no comprehensive data protection law. It has sector-specific federal laws and state laws, and the Federal Trade Commission supervises unfair and deceptive data practices. We do not provide your data to third parties except as described in section 6. To ask for disclosure, correction, deletion or an end to use, write to support@lixor.ai. You may also contact the Personal Information Protection Commission (ppc.go.jp).

Mexico. This policy is our aviso de privacidad integral. The controller (responsable) is Intelliwav LLC at the address above. The primary purposes, which are necessary for the service, are the first three rows of section 4. The others are secondary purposes, and you may refuse them by writing to support@lixor.ai without affecting your service. You may exercise your rights of access, rectification, cancellation and opposition (ARCO), revoke consent, or limit use or disclosure, by writing to support@lixor.ai with your name, the account email and what you are asking for. We reply within 20 business days. We send data to the providers in section 6, who act on our behalf. We will post changes to this notice on this page.

Switzerland. The controller is Intelliwav LLC at the address above. Personal data is sent to the United States under the safeguards in section 8.

United States. We do not sell personal information and we do not use the data you enter into Lixor for advertising. See section 7 for the Meta Pixel.

Lixor is a tool for businesses that sell alcohol. It is not meant for anyone under 18, and we do not knowingly collect their data.

We will post changes here and change the date at the top. If a change materially affects how we use your data, we will email account owners before it takes effect.

support@lixor.ai, or by post to Intelliwav LLC, 37 103rd Ave NE, Unit 502, Bellevue, WA 98004, USA.