Privacy policy
Last updated: 25 October 2026
1. Controller
VALYOS, LLC, Delaware Limited Liability Company no. 10032549, 605 Geddes Street, Wilmington, DE 19805, USA ("Valyos", "we"), which provides the Loquavia service. For any privacy request: privacy@loquavia.com.
2. Two different roles
Controller. We are the controller of the data of visitors to this website, of people who create an account, and of our customers' contact persons (billing, support).
Processor. For the content, materials and data that customers upload to or connect with Loquavia (including data from their social media pages and websites) we act on behalf of the customer, who is the controller, under a data processing agreement (Art. 28 GDPR).
3. What data we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email, role, credentials (stored in non-reversible form), settings | create and manage the account | contract (Art. 6(1)(b) GDPR) | account lifetime + 30 days |
| Access and activity logs (date, time, IP, action) | security, abuse prevention, approval records | legitimate interest (Art. 6(1)(f)) | 12 months |
| Billing and payment data | selling, invoicing, tax obligations | contract; legal obligation (Art. 6(1)(c)) | contract term + statutory tax periods |
| Emails sent to hello@ or privacy@loquavia.com (address, name, message content), including early access requests | replying to and assessing the request | pre-contractual steps at your request (Art. 6.1.b); for privacy requests, legal obligation (Art. 6.1.c) | 24 months after the last exchange, unless it becomes a contractual relationship |
| Support messages | customer support | contract | 24 months after the request is closed |
| Technical browsing data on this website | website operation and security | legitimate interest | server logs: 30 days |
This website does not collect data through forms and uses no cookies of its own, analytics or tracking tools: see the Cookies page.
4. Connected social accounts and websites
If you connect a Facebook Page, a professional Instagram account, a LinkedIn Page or a WordPress site to Loquavia, we receive from the platform, with your explicit consent on its authorization screen, only what the service needs:
- the access token that allows us to act on the page, stored encrypted;
- the ID, name and picture of the page or account;
- the content published through Loquavia and its outcome;
- aggregated insights for the page and its content (reach, engagement, followers).
We use this data only to publish the content the customer has approved, schedule posts and show results in reports. We do not sell this data, we do not use it for our own or third-party advertising, we do not use it to train artificial intelligence models, and we do not share it except with the providers listed in section 6, for the purposes stated here.
You can revoke access at any time from Loquavia or from the platform's settings (e.g. Facebook: Settings › Business integrations). On revocation we delete the token immediately and the other data for that page within 30 days, unless the customer instructs otherwise. See also Data deletion.
Our use of data received from the Meta and LinkedIn APIs complies with these platforms' developer terms.
5. Artificial intelligence
Loquavia uses third-party artificial intelligence services to produce copy, images and other content from the customer's materials. These providers are bound not to use this data to train their models. Every piece of content is reviewed and approved by a person before publication; we do not take decisions based solely on automated processing that produce legal effects on individuals (Art. 22 GDPR).
6. Providers
The following process data on our behalf under Art. 28 GDPR agreements: a provider based in Italy for development, technical operations and support; Cloudflare, Inc. (website network and protection), Google (loquavia.com email, Google Workspace), the server, network, email, payment, artificial intelligence and social publishing providers we use. The current list of sub-processors is available on request at privacy@loquavia.com.
7. Transfers outside the EU
Valyos is based in the United States and some providers process data in the United States. Transfers rely on the EU-US adequacy decision (Data Privacy Framework) for certified recipients and, in any case, on the European Commission's standard contractual clauses, with supplementary measures (encryption, data minimisation, access control).
8. Your rights
You can request access, rectification, erasure, restriction, portability and object to processing (Arts. 15-22 GDPR) by writing to privacy@loquavia.com. We reply within one month. If your data is processed on behalf of one of our customers, we forward the request to that customer and help them respond. You can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the authority of the country where you live or work.
9. Security
Data encrypted in transit and at rest, connected-account tokens encrypted with keys kept separate from the database, data isolation between customers, controlled and logged access, encrypted backups.
10. Changes
If we change this policy we update the date above and, for significant changes, notify registered users.