Privacy Policy

1. Who We Are

Lavori is operated by LAVORI LLC ("Lavori," "we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, why, how we handle it, and the rights you have. For any privacy question or to exercise your rights, contact us at info@lavori.io.

2. Controller and Processor Roles

When you use Lavori through an organization (your employer or team), that organization is the controller of the content you create, and Lavori acts as a processoron its behalf. For your account data, billing data, and our public website, Lavori is the controller. If you are an end user and wish to access or delete content stored in your organization's workspace, we route your request to your organization's administrators.

3. Data We Collect

• Account data — name, email, password (stored only as a hash), organization, and role.
• Content you create — projects, tasks, contacts, messages, calendar events, files, invoices, quotes, budgets, and notes.
• Billing data — plan, billing contact, and payment status. Card details are handled directly by Stripe; we never store full card numbers.
• AI interaction data — the prompts, content, and (if you use voice input) audio you submit to the AI assistant.
• Technical data — IP address, browser and device type, time zone, and login timestamps.
• Usage data — how you interact with the product.
• Diagnostic data — crash and performance reports, scrubbed of user content and retained for 30 days.

4. How and Why We Use Your Data

We only use your personal data where the law allows. Most commonly:

• To provide and operate the service you have signed up for (performance of a contract).
• To secure accounts, prevent abuse, and improve the product (our legitimate interests).
• To process payments and meet tax and accounting obligations (legal obligation).
• To send service-related emails such as announcements and administrative messages.

We do not use your data for advertising, and we do not sell or rent it.

5. AI Features

Lavori's AI assistant sends the content you submit to our AI providers, Anthropic and OpenAI, to generate responses. If you use voice input, your audio is transcribed by OpenAI for the duration of that request. We use these providers under their commercial API terms: your data is not used to train their models, and we do not use your content to train any AI models of our own. Audio is not retained after transcription.

6. Subprocessors

We share data only with providers that process it on our behalf to deliver the service. We do not sell or rent personal data, and we do not share it with advertisers.

We update this list as our providers change. Enterprise customers may request advance notice of new subprocessors.

7. International Data Transfers

Some of our providers are located in the United States. Where required, these transfers rely on Standard Contractual Clauses or an equivalent safeguard.

8. Data Retention and Deletion

We retain account and content data while your organization is active. When you delete your account or request full deletion, we remove the data from production and purge it from backups within 30 days. Diagnostic data is retained for 30 days.

9. Your Rights

Depending on your jurisdiction (including GDPR, UK GDPR, and CCPA/CPRA), you may request access, correction, export (portability), deletion, or restriction of your personal data, and you may object to certain processing. To exercise any of these rights, email info@lavori.io. California residents: we do notsell or "share" personal information as those terms are defined by the CCPA.

10. Cookies

We use strictly necessary cookies only: an authentication cookie to keep you signed in and a cookie that protects against cross-site request forgery. We do not use advertising or third-party analytics cookies.

11. Security

We use appropriate technical and organizational measures to protect your data. Data is encrypted in transit (TLS) and at rest, and access is limited to members of your organization and to staff with a business need to know.

12. Children

Lavori is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

13. Breach Notification

If a breach affects your personal data, we will notify affected customers and the relevant regulators as required by applicable law.

14. Changes to This Policy

We may update this policy from time to time. We will post changes here and update the date above; material changes will be announced in-product or by email.

15. Contact Us

Questions about this policy or our privacy practices? Contact LAVORI LLC at info@lavori.io.