DPDP & GCC Data Governance

Luff Enterprise Studio is local-first: the records your applications hold stay on the machines and infrastructure you choose. Lanvex does not host, receive or process them. This page covers the small amount of personal data the website holds to sell and deliver licences.

Kingdom of Bahrain

Lanvex is established in Bahrain and processes website and order data under the Personal Data Protection Law (Law No. 30 of 2018). You may ask to access, correct or erase your data, and object to processing, by writing to privacy@withluff.com.

GCC

For customers elsewhere in the GCC, including under the UAE Federal Decree-Law No. 45 of 2021 and the Saudi Personal Data Protection Law, we apply the same rights and respond within the periods those laws set.

India

For customers in India, we process personal data under the Digital Personal Data Protection Act, 2023, on the basis of your consent and to perform the contract you enter when you buy. You may access, correct and erase your data and nominate another person to act for you. Grievances go to privacy@withluff.com.

Where data is stored

• Order and portal data: our server, and Paddle for payment records.
• Your applications' data: only where you deploy it. Lanvex has no copy.

Retention

Order records are kept as long as tax and accounting law requires. Portal data is deleted on request once no plan is active. Server logs are kept for a short period for security.