Privacy, without the fog.

Leviathan Studios Ltd, trading through DataAF, is the controller for account, enquiry, billing, security and DataAF website data.

Company: Leviathan Studios Ltd · NI710693
Registered office: 30 Owenvarragh Park, Belfast, Northern Ireland, BT11 9BD
Privacy contact: info@dataaf.lvthn.co

• Account identity, email address, organisation, memberships and permissions.
• Account requests, support messages and decisions made by an administrator.
• Security records such as sign-in events, shortened network identifiers, device information and audit logs.
• Website observations and metrics you ask DataAF to collect or import.
• OAuth connection details, provider resource identifiers and encrypted access credentials.
• Optional analytics and consent preferences for the DataAF website.

• Contract and steps before contract: providing accounts, dashboards, monitoring, reports and support.
• Legitimate interests: securing DataAF, preventing abuse, maintaining auditability and improving reliability.
• Consent: optional website analytics and any marketing you actively request.
• Legal obligation: records we must retain under applicable law.

You may withdraw consent at any time without affecting earlier lawful processing.

For metrics collected on a customer's website, that customer normally decides why the data is collected and acts as controller. Leviathan Studios Ltd processes it to provide DataAF under the customer's instructions.

DataAF is designed to collect operational and aggregate website signals. Customers must not intentionally send special-category data, passwords, payment-card data or form-field contents through DataAF Capture.

We use carefully selected providers where necessary: Cloudflare for hosting, security, storage and queues; Resend for transactional email; and, when enabled or connected, Google and Microsoft for Analytics, Search Console and Clarity services.

Authorised members of the relevant DataAF workspace can access the sites assigned to them. We do not sell personal data.

Some providers may process data outside the UK. Where this is a restricted transfer, we rely on an applicable adequacy regulation or contractual safeguards such as the UK International Data Transfer Addendum, together with proportionate security measures. Contact us to request more information about relevant safeguards.

We retain account and customer records while the service is active and for a reasonable period afterwards for security, support and legal claims. Unsuccessful account requests and operational logs are periodically reviewed and deleted when no longer needed. Imported metrics follow the customer's configured retention and contractual requirements. OAuth credentials are deleted or rendered unusable when a connection is removed.

Depending on the processing, you may ask for access, correction, deletion, restriction or portability, and may object to processing based on legitimate interests. The right to object is brought to your attention expressly here.

Email info@dataaf.lvthn.co. You may also complain to the Information Commissioner's Office.

We use access controls, tenant-scoped permissions, encryption for provider credentials, rate limiting and audit records. No solely automated decision produces legal or similarly significant effects for DataAF users. Account applications are approved or denied by an administrator.