Privacy Policy

• account and login data, typically email address and password hash
• workspace, project, and version data needed to generate documents
• approval data such as approver name, title, OTP email, and approval timestamp
• audit records for important actions inside the app
• waitlist data if you sign up on the landing page

• to create and secure your account and workspace
• to generate Scope/SOW, LOA and checklist documents
• to maintain version history, audit trail, and approval records
• to protect the service from abuse and investigate incidents
• to send invites, OTP messages, and operational notices

In the approval flow, Loalyx stores the approver name, job title or role, the approval timestamp, and selected technical metadata in hashed form. For the waitlist, we may store email, optional company name, use case, and hashed technical metadata needed for basic abuse prevention.

Loalyx relies on a small number of standard infrastructure providers to operate the service. You can find the current list on the Sub-processors page.

We keep account, workspace, and project data for the duration of active service use and for a reasonable period afterward where needed for security, auditability, or compliance. Waitlist data is kept until you unsubscribe, the relevant campaign is completed, or the data is no longer needed.

If you upload personal data about third parties as part of a project, you are responsible for ensuring you have the right basis and authorization for that use. Loalyx is a workflow product for pre-engagement documentation, not a tool for storing unnecessarily broad sets of personal data.

For privacy questions, DPA requests, or requests related to your data, contact hello@loalyx.app.