Legal
Privacy Policy
Last updated: August 17, 2026
The short version: favedo stores your email and your saves, uses a small set of services to process them, shows you no ads, sells nothing about you, and deletes your data when you ask. The long version follows — plain sentence first, precise one after.
What we collect
favedo is operated by Lazo Labs (Zaragoza, Spain), who is the data controller for the personal data described here. We collect only what the product needs:
- Your email address. It’s how you sign in (one-time codes — we never store a password) and where reminders go.
- Your saves. The URL you save, the public metadata we fetch for it (title, thumbnail, caption), transcripts and extracted text cached for processing, and the AI outputs built from them.
- Your library. Notes, reminders, folders, and ratings.
- Your plan. Whether you’re on Free or Pro, and your usage against the free quota.
- Operational basics. Server logs and aggregate usage numbers, the kind every web service produces by existing.
That’s the list. There are no ads on favedo, we do not sell or share your data for advertising, and there is no tracking beyond the operational basics above.
How we use it
We use your data to run favedo, and for nothing else:
- to sign you in and keep your session working;
- to build your library — fetching, extracting, and enriching the links you save (§3 and §4 describe who touches the data along the way);
- to send you the emails you’ve asked for: sign-in codes and reminders;
- to bill Pro subscriptions and enforce plan quotas;
- to keep the service running — debugging from logs, watching aggregate usage.
In GDPR terms, the legal bases are performance of our contract with you (running the service you signed up for), our legitimate interest in operating and securing it (logs), and legal obligations (billing records).
Who processes it for us
favedo is one person, not a data center. A small set of services process data on favedo’s behalf. We do not sell your personal data and we do not share it with anyone for their own marketing. We share data only with the providers that help us run favedo, only to the extent needed to deliver the service, and they fall into these categories:
| Category | What it receives |
|---|---|
| Database and authentication | Your email, your saves and everything in them, notes, folders, plan status. |
| Hosting and delivery | All traffic to favedo passes through it, including standard server logs. |
| Payment processing | Your email and card details (card details go only to the payment processor, never to favedo). |
| AI analysis | The content of a save being enriched — text, transcript, images. favedo uses paid API tiers, not consumer chat products. |
| Content extraction | The URL of the post being saved, so its public content can be fetched. |
| Transactional email | Your email address and the content of sign-in and reminder emails. |
| Bot protection | A browser challenge on the public try-it box only — no account data. |
| Error monitoring | Reports when something breaks: the error message, the stack trace, the page address it happened on, your browser, operating system and device type, and an approximate location (country and city) derived from your IP address. It is deliberately configured not to attach your account details, the contents of your requests, or any recording of your screen. Hosted in the EU. |
A few lookups also enrich saves with public reference data — book covers, film and TV posters, video links, map links. Those services receive the queried title or place name, never your identity.
Some of these providers process data outside the European Economic Area, including in the United States. Where personal data is transferred, we rely on appropriate safeguards such as the providers’ standard contractual clauses, and we limit what is shared to what the service needs. If you want the current named list of providers, ask us (§10) and we’ll send it.
AI processing, specifically
This is the part of the pipeline most services gloss over, so here it is step by step. When you save a link, favedo fetches public metadata for it — title, thumbnail, caption — from the platform or public oEmbed endpoints. When a save is enriched, favedo may fetch the post’s transcript, text, and images through a content-extraction provider, and runs that content through commercial AI models to produce the title, summary, category, tags, and actionable items in your library.
What the AI providers see is the content of the post, not your identity. favedo sends it through paid API tiers, not consumer chat products. The AI outputs are stored in your saves, where you can edit or delete them.
Cookies
favedo uses cookies for one thing: keeping you signed in. There are no advertising or analytics cookies. The only other exception is the bot check on the public try-it box, which may set its own cookie on that box to tell humans from scripts. That’s why there’s no cookie banner — there’s nothing to consent to.
Retention and deletion
We keep your data for as long as you use favedo, because your data is the product — your library is the thing favedo stores for you. The retention periods:
- Your library (saves, notes, folders, reminders, ratings): kept for the life of your account. Delete any single save anytime; it’s removed from your library.
- Abandoned free accounts: a free account with no sign-in for 12 months is scheduled for deletion. We warn you by email first — twice, with time to act — and one sign-in resets the clock. Accounts with an active paid plan are never deleted for inactivity.
- Account data (email, plan status): kept while the account exists; deleted with it.
- Server logs and error reports: short-lived — they expire on their providers’ own rolling schedules, typically within weeks.
- Billing records: kept as long as tax and accounting law requires, at our payment processor.
Deleting your account: Settings → delete account permanently deletes your account and your server-side data — your profile, saves, notes, folders, ratings, and stored images. Thumbnails are shared between users who saved the same link; on deletion we remove the ones no other user’s save still references. Deletion also cancels any future subscription renewal (the Terms cover refunds). If you can’t sign in, you can also request deletion by email (§10) and we’ll do it for you within a month.
What survives deletion: billing records at our payment processor that the law requires keeping, short-lived server logs that expire on their own schedule, and any error reports at our error-monitoring service, which contain no account details and age out on that service’s own retention schedule.
Your rights
Wherever you live, the spirit is the same: it’s your data. Depending on your jurisdiction (the GDPR in Europe, the CCPA in California, and similar laws elsewhere), you have the right to access the personal data we hold about you, to correct it, to delete it, to object to or restrict certain processing, and to receive a copy of it. We don’t sell personal data, so there’s nothing to opt out of on that front.
How to exercise them:
- Deletion: self-serve in Settings, or on request by email — honored within a month (§6 covers exactly what is deleted and what the law makes us keep).
- Export: favedo doesn’t have a self-serve export button yet. Email us (§10) and we’ll send you a machine-readable copy of your data — your saves, notes, folders, and account details — within a month, free of charge.
- Access and correction: most of your data is directly visible and editable in the app; anything else, ask us.
If you believe we’ve mishandled your data, you can also complain to your local data-protection authority.
Children
favedo is not for children under 13, and we don’t knowingly collect their data. If you believe a child under 13 has an account, contact us (§10) and we’ll delete it.
Changes to this policy
If our practices change — a new subprocessor, a new kind of data — this page changes first, and the “Last updated” date with it. For material changes we’ll give you notice by email or in the service before they take effect.
Contact
Privacy questions and requests: favedo@lazolab.app, or the feedback page. favedo is solo-operated, so your message goes to the person who can actually act on it.