Privacy notice
How LazyAnalysis S.r.l. processes personal data on its website, accounts, browser application and AI connector, under the GDPR.
Who is responsible
The data controller is LAZYANALYSIS S.R.L., Via Cicerone 57, 00058 Santa Marinella (RM), Italy, VAT 18720311002. Contact for any privacy question or request: vincenzo@lazyanalysis.it, or by certified email to lazyanalysis@pec.lazyanalysis.it. Last updated: 10 November 2026.
The website (lazyanalysis.it)
The website is a set of static pages. It uses no analytics, no advertising, no tracking and no contact forms, and it sets no cookies. To deliver the pages, our web server necessarily handles your IP address and the technical details of each request.
Your LazyAnalysis account (api.lazyanalysis.it)
One account is used for the desktop application and the browser application. We keep your user name, email address, a salted hash of your password (never the password itself), the name of the device and the dates of creation and last use of each sign in session, your plan, and any profile details you choose to add (name, company, contact details, picture) and feedback you send. If you sign in with Google, we also keep the identifier Google gives us for your account and the email address it shares; Google processes your sign in under its own privacy policy. Registration and password reset codes are sent by email through our email provider.
The browser application (app.lazyanalysis.it)
When you start a session, the application runs for you in an isolated, temporary environment on our server. What you build or upload in a session is deleted when the session ends; download anything you want to keep. We record which account started a session and when, to run the service, enforce its limits and protect it from abuse. If you ask for access, we keep your request (account number, user name, email and the note you write) until it is handled.
The AI connector (mcp.lazyanalysis.it)
When your AI assistant builds a graph through our MCP server, the description it sends and the resulting graph file are kept for seven days so the download link works, then deleted. Requests are rate limited using the caller’s IP address.
Why, and on what legal basis
We process account and application data to provide the services you ask for (Article 6(1)(b) GDPR: performance of a contract or steps before entering into one). We process technical data such as IP addresses, request records and abuse limits for the security and integrity of our services (Article 6(1)(f): legitimate interest). We keep data required by law, such as invoices, to meet legal obligations (Article 6(1)(c)). We do not sell personal data and do not use it for advertising or automated decisions with legal effects.
Who handles the data with us
Our servers and email are provided by Aruba S.p.A., in Italy, acting as our data processor. If you choose to sign in with Google, Google acts on its own account for that sign in. Your AI assistant’s provider (for example Anthropic or OpenAI) processes your conversations under its own terms; we only receive the requests your assistant sends to our connector.
How long we keep it
Account data: as long as your account exists; after you ask us to delete it, within 30 days, except what the law requires us to keep. Sign in sessions: 30 days after last use. Browser application sessions: deleted when the session ends. Access requests: until handled. Graph files from the AI connector: seven days. Technical records for security: for a short period, as needed to detect and stop abuse.
Your rights
Under Articles 15 to 22 GDPR you can ask for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Write to vincenzo@lazyanalysis.it. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Changes
We will update this notice when our services change, and show the date of the last update at the top.