Legal
Privacy Policy
This policy explains how LottieFyr handles personal data across anonymous use, accounts, purchases, support, feedback, and consented analytics.
Effective date: June 16, 2026
Controller and contact details
LottieFyr is operated by LEXOR AXIOM S.R.L., a Romanian limited liability company.
- Registered office: Soseaua Industriala nr 7, Constanta 900147, Romania
- Registration number: J2025096195003
- EUID: ROONRC.J2025096195003
- VAT ID: RO53087130
- Privacy contact: support@lexoraxiom.com
What data we collect
- Uploaded files and conversion data, including GIF, MP4, MOV, AVI, or SVG files, settings, and generated outputs needed to run a conversion.
- Account and authentication data such as email address, Firebase user ID, and sign-in provider details.
- Usage-limit and security data, including a hashed IP-based identifier for anonymous daily limits and account-linked usage records for signed-in users.
- Billing and purchase metadata such as Stripe customer or checkout identifiers, purchased pack size, payment status, and granted credits. We do not receive full card numbers from Stripe.
- Support conversation data, including your account email, subject lines, and message contents.
- Feedback data such as rating, comment, trigger context, and associated account email if available.
- Promo or service email data, including send history and delivery-related metadata for operational or product messages.
- Device, browser, and analytics data that Google Analytics may collect after you consent to analytics cookies.
Where the data comes from
- Directly from you when you upload files, create an account, buy credits, contact support, or send feedback.
- Automatically from your browser or device when the site needs to secure the service, keep you signed in, or enforce free limits.
- From Firebase when you authenticate or maintain an account session.
- From Stripe when you complete or attempt a checkout.
- From Google Analytics only if you opt in to analytics cookies.
Why we process data and the legal bases we rely on
- To provide the service: run conversions, generate outputs, keep the app functioning, and restore certain in-session states. Legal basis: contract or steps at your request before a contract.
- To create and maintain accounts: authenticate users, keep them signed in, and show credit balances or dashboard data. Legal basis: contract.
- To process purchases and deliver credits: start Stripe checkout, confirm paid purchases, and maintain accounting records. Legal basis: contract and legal obligation.
- To provide support and respond to feedback: review messages, troubleshoot, and improve service quality. Legal basis: contract and legitimate interests.
- To secure the service and prevent abuse: enforce daily limits, protect the app, investigate misuse, and maintain logs. Legal basis: legitimate interests.
- To measure site usage: understand aggregate traffic and navigation patterns through Google Analytics. Legal basis: consent.
- To send service or promotional emails: deliver operational messages and limited product outreach where permitted. Legal basis: contract, legitimate interests, or consent depending on the message and applicable law.
Some data is required if you want to use specific features. For example, we need login data to create an account and payment metadata to grant purchased credits. If you reject optional analytics, the rest of the site remains usable.
Processors and recipients
- Firebase / Google: authentication and application data storage.
- Stripe: hosted checkout, payment processing, and related billing metadata.
- Resend: delivery of service or promotional email messages.
- Google Analytics: optional analytics measurement only after consent.
- Professional advisers or authorities: where needed for legal, tax, accounting, fraud, or compliance reasons.
International transfers
Our providers may process data outside your country, including outside the EEA or UK. When that happens, we aim to use lawful transfer mechanisms such as contractual safeguards, adequacy decisions, or equivalent protections offered by the provider.
Retention
- Temporary uploaded files used for conversion are created for processing and are deleted shortly after the conversion completes or fails.
- Account, credit, and purchase records are kept while your account remains active and afterward for support, fraud prevention, bookkeeping, tax, and legal compliance.
- Hashed anonymous usage-limit records reset daily for limit logic, but hashed records may remain longer where needed for security or service operations.
- Support and feedback records are kept for as long as reasonably needed to respond, improve the service, defend legal claims, or maintain business records.
- Consent preferences are stored in the consent cookie for six months unless you change them sooner.
- Promo and service email history may be kept until we no longer need it for delivery, compliance, suppression, or recordkeeping purposes.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. We explain the request process on our Privacy Rights page.
Children and minimum age
LottieFyr is not intended for children under 16. If you believe a child below that age has provided personal data to us, contact support@lexoraxiom.com.
Security
We use reasonable technical and organizational measures to protect the service and the data we process. No method of internet transmission or storage is completely secure, so we cannot guarantee absolute security.
Complaints and changes
If you have a concern, please contact us first so we can try to resolve it. You may also lodge a complaint with your local data protection authority, including the authority in the place where you live, work, or believe a privacy issue occurred.
We may update this policy from time to time. When we do, we will post the updated version on this page and change the effective date above.