Privacy Policy

1. Introduction

Lithora ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our work management platform and services ("the Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, password, and profile information
• Content Data: Projects, tasks, notes, documents, and other content you create
• Communication Data: Messages, comments, and collaboration data
• Payment Information: Billing details processed securely through Dodopayments

2.2 Automatically Collected Information

• Usage Data: How you interact with the Service, features used, and actions taken
• Device Information: IP address, browser type, operating system
• Log Data: Access times, pages viewed, and error logs
• Cookies: Session data and preferences (see Cookie Policy below)

3. How We Use Your Information

We use the collected information for:

• Providing, maintaining, and improving the Service
• Processing payments and managing subscriptions
• Sending important notifications and updates
• Providing customer support
• Analyzing usage patterns to improve features
• Detecting and preventing fraud or abuse
• Personalizing your experience
• Complying with legal obligations

4. AI-Powered Features

Lithora uses AI services (Google Gemini) to provide features like content generation and summarization. When you use AI features, your prompts and generated content may be processed by third-party AI providers. We do not use your content to train AI models.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Team Members: With other users in your workspace or team
• Service Providers: Third parties that help us operate the Service (hosting, payment processing, AI services)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do NOT sell your personal information to third parties.

6. Third-Party Integrations

The Service integrates with third-party platforms:

• GitHub: Repository and code management
• Figma: Design file embedding
• Google Drive: File storage and sharing
• Jitsi: Video conferencing
• Dodopayments: Payment processing
• SendGrid: Email delivery

Each integration is governed by the respective third party's privacy policy.

7. Data Storage and Security

We implement appropriate technical and organizational measures to protect your data:

• Data is stored in secure MongoDB databases
• All connections use HTTPS/TLS encryption
• Passwords are hashed using bcrypt
• Regular security audits and updates
• Access controls and authentication mechanisms

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

9. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your content and data
• Opt-out: Unsubscribe from marketing communications
• Restriction: Limit how we process your data

To exercise these rights, contact us at lithora.prod@gmail.com

10. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns
• Improve performance

You can control cookies through your browser settings. Disabling cookies may affect functionality.

11. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date at the top indicates when the policy was last revised.

14. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

15. California Privacy Rights (CCPA)

California residents have specific rights regarding their personal information:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell your data)
• Right to non-discrimination

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: