Privacy Policy

We collect the following categories of information:

• Account information — the name, email address, and organization details you provide when you register or are invited to a workspace.
• Workspace content — the tickets, comments, boards, tags, and other data you and your members create while using the Service.
• Billing information — plan and subscription details. Payment card data is handled directly by our payment processor and is never stored on our servers.
• Usage and technical data — log data such as IP address, browser type, and actions taken in the Service, used to keep it secure and reliable.

We use the information we collect to:

• Provide, maintain, and improve the Service and its features;
• Authenticate users, resolve the correct organization workspace, and enforce access controls;
• Process subscriptions and payments for paid plans;
• Communicate with you about your account, security, and service updates;
• Detect, prevent, and address fraud, abuse, and security incidents.

LitosFlow is a multi-tenant service. Every organization's data is scoped to that organization and is not accessible to other tenants. Access to workspace content is determined by the roles and permissions configured within each organization.

We do not sell your personal information. We share information only in limited circumstances: with service providers who process data on our behalf (such as hosting and payment providers) under appropriate confidentiality obligations, when required by law or valid legal process, or to protect the rights, safety, and security of our users and the Service.

We retain your information for as long as your account is active and as needed to provide the Service. Two deletion paths are available directly in the product, and both are immediate and irreversible:

• Closing an organization (Organization → Plan & Billing) permanently erases that workspace and everything in it — tickets, comments, boards, attachments, and member records — and cancels any paid subscription.
• Deleting your account (My profile) erases your login and removes your name and email from every organization you belong to. Work you contributed stays with those organizations, attributed to a deleted user, so their records remain complete.

Deleted data cannot be recovered. Copies may persist in encrypted backups until those backups age out of our retention window, and we may retain limited information where required to comply with legal obligations or resolve disputes.

We use industry-standard technical and organizational measures to protect your information, including encryption in transit, scoped access controls, and session-based authentication. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

Depending on your location, you may have rights to access, correct, export, or delete your personal information. Most of these you can exercise yourself: update your name and email from My profile, export tickets from your workspace, and use the deletion controls described in section 5. For anything you cannot do in the product — including an erasure request you are unable to complete yourself — contact us through your organization's support channel and we will verify the request and carry it out.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date above and, where appropriate, provide additional notice.

If you have questions about this Privacy Policy or our data practices, please review our Terms of Service or contact us through your organization's support channel.